{"type": "bundle", "id": "bundle--023c9ac6-8a1a-4c3b-9180-b43592a5861c", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--2a5ed70b-4f03-41de-9610-2459ab2b99a0", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--440620de-a262-41ea-aa6f-c25bc972103e", "name": "DigitalOcean Toronto", "latitude": 43.6547, "longitude": -79.3623, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "CA"}, {"type": "location", "spec_version": "2.1", "id": "location--3564de80-bd62-4201-a89d-e0ec7aadad03", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--f6a38850-6588-428e-ab59-fe61ce21eafe", "name": "Vultr Paris", "latitude": 48.8566, "longitude": 2.3522, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "FR"}, {"type": "location", "spec_version": "2.1", "id": "location--c2053441-01d6-43e4-a5e4-1940adbf2e1e", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--4cf152f7-83b5-475c-9868-4fdb90a2762c", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--f9a7aded-cd85-4264-8f1a-af1623b67161", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d6891977-5acc-4ad9-a4a4-04dd80fd01d0", "relationship_type": "located-at", "source_ref": "infrastructure--f9a7aded-cd85-4264-8f1a-af1623b67161", "target_ref": "location--2a5ed70b-4f03-41de-9610-2459ab2b99a0", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--d6b8ced1-aa1f-4282-af91-f1cb1240e31f", "name": "DigitalOcean Toronto", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7bbc72dc-634a-444a-b79b-f240d638f34f", "relationship_type": "located-at", "source_ref": "infrastructure--d6b8ced1-aa1f-4282-af91-f1cb1240e31f", "target_ref": "location--440620de-a262-41ea-aa6f-c25bc972103e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--f3c3ad64-d81a-4e33-be5a-e9e6e52c3c06", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--56f6fc68-e9f0-45fe-af7d-72991a87efa5", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d0c2a29-fd5a-4471-81fc-4b4a6fc36e87", "relationship_type": "located-at", "source_ref": "infrastructure--56f6fc68-e9f0-45fe-af7d-72991a87efa5", "target_ref": "location--3564de80-bd62-4201-a89d-e0ec7aadad03", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--9d573367-bd6b-4596-848b-30ba64d2dbb5", "name": "Vultr Paris", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bb1a25ad-a87e-473b-8637-0d2ff54686f9", "relationship_type": "located-at", "source_ref": "infrastructure--9d573367-bd6b-4596-848b-30ba64d2dbb5", "target_ref": "location--f6a38850-6588-428e-ab59-fe61ce21eafe", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--bd11a6c3-492f-43df-ab39-bff1d4661b23", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--59e275ba-75c7-4d2e-b93a-880183b891d6", "relationship_type": "located-at", "source_ref": "infrastructure--bd11a6c3-492f-43df-ab39-bff1d4661b23", "target_ref": "location--c2053441-01d6-43e4-a5e4-1940adbf2e1e", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--0aa844a7-7234-4786-8181-cd1e7ec582c2", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--81e98968-d1ba-4f74-8fe3-4f81225c66bd", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--668dbde8-32b2-46d1-9fb2-5cf4c09d4e99", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--a18ddcd4-c910-49c7-b394-de5f3e1b30c9", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--4f3d5d6a-75bb-46c0-b417-b174ec310a1a", "name": "CVE-2023-1389", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e887bc-3d59-4b75-ac07-94368ccceba5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.12.70.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06481165-f1f3-4292-a8fe-eee36f601db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.168.101.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8432d565-2752-4373-8219-301b0d1f3b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.168.152.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea2e38f6-f2c9-48db-b7b4-c55b8da57865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.220.119.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8658166e-9ef1-4668-a263-d23b0aa4f30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.222.180.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04002f9-a607-4f4c-b3d9-b094d5b7c28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.253.187.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ceabee-4742-4bcd-93d1-823021b48cc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.27.18.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8067d75f-7196-4b50-9a38-c6166f635c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92e43e1-492d-4c0f-9dda-a97d46a4ee04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.191.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21b475a-00a2-463e-8cbb-6e331b9e27ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274d857f-5cdb-487a-a76c-6c5361f66841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48abeb83-b9e2-4e62-9f0a-4874c8220db1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3a0c663-b664-463d-889a-48c380aac9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8092e951-47e1-4b04-a10d-7a014d4c1285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daf11ad-123b-48f7-91c7-0e21563c365a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb86cf1-6fb0-4e81-ac83-8b9b5918994f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d60cb9-3597-4572-8d50-5001f5a40f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8f01e0-db27-4948-b94f-33227b386e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05a6296-842a-4134-aef3-c5230933f015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c981e85a-388d-4ba8-bfa2-0822d8fc1d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98fc4052-acd4-438d-8bce-df3b8700d1c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a93f4fa-baee-47cc-9b65-0671f78ba0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa9cda0-3cae-489c-943f-5d7b811a2af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee7c798-579d-4c45-8ddd-9520be0aa65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28072a6a-c0ff-4d92-93e1-ff1cd3a8d28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9230a73f-f601-4968-ad98-e9b1183d8209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c346bb5-cefe-418b-80da-f07d4f3a5a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e9b084-12a2-42a9-9b0e-d53409aaf537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49da95e-fab1-4f41-ad07-7f672d779f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0949220-34eb-40cf-b0b7-179d5e31ec72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c052bb91-3ce5-46ec-b6ef-ba231ab345fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.100.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb303496-ce54-4d53-bb34-63362758b4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.31.89.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ab2fe9-7268-4c5e-b288-58390b58429c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.48.93.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53af6808-fcf0-49b1-933a-13dd06e1d0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027886fc-7bb3-4071-8292-400d877aee5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52aa3f83-2776-4f6e-86a3-de6b4d70d9ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.51.6.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2793c356-2803-4f04-a63d-c55c1901a116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.54.213.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9afbc2-9c45-4838-9cce-0e7607aae7c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.109.28.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1dd34e0-c49c-4f53-8d08-fa2a710da2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.81.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4796d08-a471-40a1-8f4c-8d92f9559d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.201.38.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13b788e-3482-4fe5-8661-276daf518ac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.105.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4cdaea-d1b4-4091-9f77-0509702e43b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e18c06-c72f-4844-a526-65e74bb0e625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80aaafa-0612-4225-94eb-a6ba414502c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.106.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a030e58-561a-41c6-88a1-b28c3bf50da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1329e365-e6ab-4794-8e24-877c789f4119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c12139-c589-400e-a618-1f6bb1aca462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499bec74-2089-48ea-9044-b97325004e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70eb7ec0-8b3a-48c4-89a4-70e07b913bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080c156a-da72-489d-95ef-a96157b1de8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075ce14a-110c-4675-aaa4-08e4ec4dc742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.109.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3e04cf-b3b3-4d3b-8846-f4d21580310f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.110.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9d7caa-78e9-4832-91c2-f734c23acde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f988b4-789f-4204-85c2-531a64dc8e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e1ae7f-7e90-4842-8e79-5b3962946eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61b3a3c-35ef-476f-a24d-e691424506e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.117.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dd8d7a-3b76-4458-aa4f-82a5819deb99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf400bb5-45cb-405c-9b31-eb23206d7898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c3934cd-852d-46c8-8785-c7cb266e37a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43280a9d-fac4-4217-a3de-881857215d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.121.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673074a7-4aea-44fb-9a10-e93b107d899c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.123.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e75dc3-c010-42e6-8810-3d84ef76f710", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d670d6bf-025f-47a5-9f7c-a644be852e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfc65a9-b225-4630-830d-a25794c5b601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.127.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09a5f3d-18a4-45ce-ba85-3d1874f59f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8cc1eb-e272-43bf-bf37-4abc4dc389f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e31bad-b010-4d6c-85a4-d9529e59f46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c24538-bd35-4891-aa1e-32b2b0576dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4612e347-0237-41cc-9644-d00f979bb958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103554e7-df2a-4f92-b2a4-7753e8e7fc86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.37.244.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbab7f7-ce3f-44af-bc40-dfa9cf949a17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.42.46.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f907742c-38bb-45d3-8907-56fd228b5d91", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26964680-e670-496d-bba0-5b2354248f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.78.139.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b7f822-4e17-4113-93fe-3eab42dafcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.89.116.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1e36d8-0753-4ccf-9f1a-42fd44b81a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.95.175.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19759a34-3768-4cd4-a701-7febe84dc386", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.192.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1190c37c-21f3-4810-b1db-b1b0b0afaa76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.198.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c81d6d-c8f7-4ea7-a2ec-f76713c87f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.129.200.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5409547f-c553-47e7-9da0-ec420cc5e43e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.207.180.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c46713d-35ac-410a-a73d-be908743df65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.88.21.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f1c2fc-d925-43bf-8820-4613ca51bfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b4ac92-348d-487a-9849-a10921f9fdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.7.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fc0d10-3551-4a1f-8af8-7a750c799f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.102.246.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8b3419-92b7-4e18-b0c0-19ca9909c12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.102.247.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b3fb69a-818a-40fe-bfd5-f375d814f336", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.103.245.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e448767-1d7c-4836-9151-c601dbfce8b5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.120.227.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb62b43-799c-4a6c-a096-a3fa2abdc12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0741d50-55d5-434c-ba84-55c9df56b628", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.123.226.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc1ecb6-c5c5-4baf-838c-ff468b478131", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.137.249.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae591c4-a9a5-4cdc-b82f-1b3fb87fa689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fb9245c-3de4-43f5-bc18-cf3a3a80b708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.14.32.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a92a6a9-8b95-4b93-8162-bc8b45448e7e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.177.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f24d3e2-d9a7-4ccc-800e-bb40219cf348", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.202.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6267264-6909-4d15-b71d-43cb3b46641b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.146.23.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e1c8ecd-8eb8-42c6-b3e9-707d853b673b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecb4ba6-fa7e-4077-af0a-ee8eee2102c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.26.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfdad66a-8a8d-419b-8832-0a94d58774e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.149.98.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e95d849-497c-461a-9e67-dd3c83561199", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.153.254.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ef2b87-457f-4d8b-ac37-3fffd94e011d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.154.77.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2955b2f6-27dd-4ea3-b072-e8f3a98008ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.155.221.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d49895-b352-466c-a20d-013e175c4750", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.16.117.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c40912-4c26-4d2b-aaf0-262158245d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.160.150.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8a93dc-39f8-48e3-b835-d520b6682f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.34.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec53890-045b-4cf5-9dee-c1fb441aef0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.163.167.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9b084f-7d92-4b6a-aa92-05337d592570", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.164.107.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e067b958-46b0-448f-9c69-4563199b3001", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.164.9.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ab2e4a-14f5-4915-9109-03d505da21ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.167.89.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3542c0-d824-4404-a951-025d4f6fc0c0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.172.236.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fded9656-eb5d-445c-8020-3313b961ef7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.173.227.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8125b5bf-7bfb-460c-a337-293ad19583fe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.225.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f8c1f4-102b-449c-937f-e79f3a7cb655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.175.51.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a294b95d-d45e-4ecd-a604-5ff8020e4b44", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.180.124.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ec033c-9178-4a47-bde9-b7d3834c11f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.181.176.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6731fe40-76a8-4615-b840-23da4e2f83ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.182.132.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--823a45a1-a9c6-4d4f-a8d6-ae4526b44bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.185.53.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4a281a-60b0-46f9-8475-0b72d56a7847", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.146.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325da245-fbc5-45db-bbfb-864b9db0d10e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.190.214.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99296a9f-7cf8-4159-b718-07d97491a08e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.191.14.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd076aec-3fff-4109-ba49-5c7a64bfeefc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25dfa31-cc93-40d2-8788-3c2a0d61d1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe37c17b-6907-4714-88e4-ae06921ead4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb395b30-e0cd-4aef-b3e0-db48686417d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e488f31-4b24-41cf-bc14-71747373dd0e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.214.5.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb91a5b-8057-4684-bf3e-4be187a4a45a", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.215.26.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f131f49-cca7-415c-8c69-3b5696598218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.218.241.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62450097-6a4a-4cd6-bc72-728db5cc9662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53e779c-d3b1-4ca7-8986-3e123348617d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef69eedd-4e00-47b9-ad2e-2200a39baf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3ea479-d6e8-4ad2-a8c7-449994c1bab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85873bdf-3a35-41ca-a348-a6e7395f99d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342eb1b2-b0a2-4399-819f-ec2a4889b92e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd240ba4-694d-4205-935f-68c1e61df971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a938ee-0edb-4e74-8b86-f5d294ce579a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb32f36e-ce11-473c-9859-f0c09b57cf53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a465125e-bda1-4e7a-9d07-172603102676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c5f642-ec9e-4a26-9f86-c320443ecf05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530b7eda-4bfb-4941-bea0-e1063a7f41c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cec9d48-9026-4841-815e-ea24edb70862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7449d89c-a555-4ecf-b8c8-f314247d4ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.234.62.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8d54ab-22bd-486b-80f1-bed43d5f4963", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.24.200.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2537db1-5c70-4d55-91ba-5bc9e82945dc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.248.120.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7d123e-f79d-4565-8f60-cb054888bda3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.250.11.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f4737f-746d-43f5-b4ef-5712a803a25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.26.86.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c1cd006-bdee-4469-9056-440a2eabf740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.27.78.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c2514e-bb42-4191-9478-c862b1e98900", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.43.191.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12917294-ece4-4359-9359-76850c31fe58", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.48.192.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9434df9d-d211-4757-8cd2-2cc3ac0d00dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.52.153.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56e9586-7329-4a5b-8937-c4b89bcba275", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.101.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec562b6-a6f7-4e7d-b697-d4b4122d9c8b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.56.115.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c54d3b-0ca5-460b-a6ed-2fbab6086d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.56.148.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978768fb-ccf5-4685-9fde-44d091d4bc94", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.65.240.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3885cf02-fd8e-425d-addf-3b3a3bb71f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.54.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c414c9d1-15cd-4671-99ff-a1f442ade2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.173.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fabc47-8b5a-4b43-a542-49d41dd011ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.77.246.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72793bd-fa37-420a-845c-dec1fff09c70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.86.180.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a90ee2-acc9-49e8-9441-2ec45fd6a82a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.76.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2781c6f-2fa8-4b1d-bfca-fe388ce39692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d47f730-493e-4a48-89ac-7adec8e1156c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.91.246.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfed725-2eec-456d-bf73-6ffd4f513f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.93.42.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438ad4cf-1630-405d-a3d6-085543ecc932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.98.148.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e5eef7-bb0e-4594-8390-1987b87d8905", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.131.69.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded34da7-c5d2-4a82-9e25-cc8f956a1004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.131.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cf45fa-754c-4986-b50a-fc9f476c2dff", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.154.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b112763-10bc-48be-b946-c8ef664c5056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.167.64.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f90af0c-829d-4850-8341-377842705afd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.197.4.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad870e7-d7d1-45ff-8047-0a129a26331a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.208.108.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a34acc3-36e4-42e9-9d40-a4604348d4d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.210.140.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf528ef4-d572-4c1b-bb4b-7c994956a0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6eedb2d-2b23-4643-b41f-938beac0359f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.111.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4d5dbc-e760-445f-b021-3b7f39b29f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.53.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f065e4-b3a7-4277-9c21-8ebf63147a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.97.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837d7e0d-e4d3-4087-b828-387e5e0167f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.145.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede827a4-c2e2-4adb-b352-af0d6c958b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653e449c-7e98-42be-9a79-5fd42aae8a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9110b025-da95-455c-9185-505f31bbba35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.35.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867812bd-0255-473f-9f86-917053e03b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.37.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a095b92d-2325-44a8-ba70-524428ce4df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.243.46.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8b3a0f-3ea4-4bf4-bab8-bf86b56f6aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.79.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04922e96-0454-4423-ae9e-ac70e4168af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.130.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a17ee3ab-b88a-4cde-9a52-629b1757b5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.172.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df51a4bb-081d-427a-88e9-c63321d21ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.195.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--821d14e0-cabf-430c-9359-60e5e799b37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.196.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058f086d-0539-4cc9-95d2-a95bb722263f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.218.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--630d5679-e68b-4f0b-ab4a-671b7f5ab132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.229.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adda49b7-549a-4bc2-9db3-601e0eb614a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.231.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2607a8-de96-4c80-9a9f-62ea28abb594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.38.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5db3ba-6042-4196-ac05-28c0baef5ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.48.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e39662e-faff-45c9-a146-e9c4929810e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.82.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf33ad3-f9ee-4273-84fc-75d56d279ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.251.180.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b2ad8d-f597-490b-a3b1-6a83a1c7c438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.195.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09ed3cd-c21e-4633-aff7-cd1acaf7969c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.233.67.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d011e24e-732f-4973-a967-ceb6d26bcec2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '105.96.13.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a920a6-961a-4b9d-b588-be7f95f55a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.117.115.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad4ca50-3d05-4d8c-9df0-b8cb0c59e309", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.122.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--857ddc85-ac0e-40c6-9183-1137c6f92659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.181.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb41144-8594-4b4c-b200-a66a10207ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.13.39.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa6ca0a-2a51-43a3-b328-8077c6d3ef6b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.227.33.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276beac5-f64e-4d96-83ef-497fbc8e5296", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.47.44.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dff3ec5-11c5-4f94-9c99-a46e9f15bcc5", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.137.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08b1f64-0452-43e5-ba5a-a29138b0a793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119d2f1b-c395-4436-8fc6-290717512a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb402c6-f6e8-4bbe-b911-c1d93d8d96a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c447d7d7-502c-4f7a-8b96-8b41b5533175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ee4419-fb5b-4124-9a5c-04ab45b2fdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.144.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5140981f-0b37-408a-96f0-68d2ab68c6b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.172.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7808e279-c86c-489b-bf8a-a212eb9f590d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604d5035-eea6-4d94-bf75-6db12694a351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc9641b6-db34-45f1-b74c-f6aa9ede1a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.188.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c38518-c1aa-4a48-b475-58fd6410f9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.191.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a6edae-a520-4ac3-9a3f-1857f9d8e08b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.237.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1b5a0a-f667-41c4-9b8e-b8fe7ac93647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.77.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e08e75-1df6-40cb-b1c7-d7675f968829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.100.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05a51ae-ce69-4693-920f-9153c7fe2fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aac9a34-4fb1-448f-8400-8c1949dd2d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11fd27ce-b6bd-479f-ae61-8a71aac54314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.101.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c0f3b8-1f91-4f81-8f25-1ed5840783ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde68314-f465-465b-bfdc-57e41fc39555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31663a31-2dd8-4d45-8fbf-f2fa066239fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.102.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938921f9-46e8-4842-832b-4b60887301d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb6ae8c-1a9b-4bcf-92f9-c15ede39ccbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0a1b0c-457e-4ff0-a781-680a241762d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4abb208-a1dd-4acd-a8b9-99924d4e41ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.103.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632b5a34-a384-4205-a7a4-f01274464fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f050fb4a-9e11-4b30-af87-9207ae06fffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.104.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e46913-b52d-4b42-a4a5-a152e5231ca6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f95dff7b-f77d-4df2-820b-b48c1e56da4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a93ab50-dcac-44db-bf45-bd1a6f5b02a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2411f8fb-cf2b-41d1-944a-2469ad24c5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.109.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d109c7a2-226f-4e20-90ec-2a9e82767272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.111.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3241d6-4f13-43b3-b796-610760c99dd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.112.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d46da3-2fba-47a6-9b99-8902c82d0aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.117.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5e98a6-eee0-48f1-b1ce-1d05f776557a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530ae5f5-c022-4df0-8c0e-0d1dd267ab1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.96.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e602afa4-c4f9-4ac3-8642-6a2ab1b6d217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89092dcc-27ff-4a7d-94cc-e6888e3f4736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33787cf-da37-4d31-9862-6b841e8ab736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.97.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c715f282-7cd7-430e-a4ec-70dc749d95e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ffd352-9b4c-4729-862c-dd830bfec4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.98.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950bec32-2f3d-4a08-b7d4-da4d4f812ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce207394-e76a-4f21-8125-4ef7a396bbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.99.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a09d52-4d2f-4ff3-8cfa-25d355187420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.48.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0c7dba-d73c-404f-838d-01ea3436d1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.155.56.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffa3c2b-3532-4a7d-8f3d-8e9d27ff0e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.170.247.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff116b2f-9e8a-4ffa-a35b-bdbb78aa5683", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.230.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099704ca-a4de-404b-a280-41fc1bac4728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.122.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27de0cd0-df9f-41c9-8900-8f88963948f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.173.182.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd19fec-89e0-4e42-8e46-6524270e0b17", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.180.88.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ff0af2-c523-4157-b808-d948b7239e64", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.189.27.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70eaa14-4b40-4e49-a0f6-4c69c8d21244", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.167.177.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e4f680-db9c-4241-865b-377d0efc0ad7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.208.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--203ad79d-4192-42cd-a1a7-835054ef5e81", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.209.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--765cc304-e941-4c0d-a754-4cb18dae6b47", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.210.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7e4cc3-0780-4546-a222-42b3c66facbe", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.217.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6f8430-c223-4c52-ac44-e05871435b65", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.218.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902dc205-92db-4ad6-9fb6-126a6afabeeb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.222.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2519ed19-7d88-422c-89b1-dfe5dd3e2583", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.223.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68789631-5c0e-47e9-8402-14e5db02fcf5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.179.225.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2f685cb-7d6d-4cc4-9484-fcfe69fce2cb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.2.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fff32c-552b-426c-a00e-35da62e91820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.22.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5f2ff5-50ed-49c3-bcf6-5f2576441afb", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.181.63.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb28b38e-337d-488b-8f54-a96e0eebabfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.61.198.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa1995d-d70d-45ba-8f37-ac73f1a98b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac84416-7693-40a1-be63-23c42bd4fe49", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.186.48.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89bb150-3c6c-4127-9459-c43ab2d3d88d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.194.108.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46aa19cb-85ee-4571-9abe-807d2da27a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe6c036-3102-4576-92f9-5e30ce877576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.211.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bce796-7587-4643-a317-41c42b6b7ec5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.206.241.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f528d0-cd10-475f-8e23-41d132a3cec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.37.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8339e62b-3d53-4576-bd70-7a9ab037bfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.236.86.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a623110-b7b2-4a4c-8c8f-b0a610f7960a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.172.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66292da6-b463-4c8e-9a0f-e9bf5d309bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819c52ee-220c-4c97-96dc-726d1fb051c7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.10.176.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a3c145-9ee0-4c77-837e-8b1015826400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.152.120.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559407c3-6a62-445c-8bdf-48320619ff09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.171.111.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bfb7ac-48aa-4a14-8b69-e532adf0de1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.177.182.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcbb08c0-2ab6-4964-9581-cd1a60b9eac1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.185.106.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597d533c-db7e-458a-989e-e8510faa4148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceeef8a-d011-4ba7-a284-1cb44b97387b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.89.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49d7a135-74e5-4d41-98e2-2a2d0fe47dd4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.15.230.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4672de1-bda3-4442-919d-bb19188654aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.16.53.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4bef2f-dba7-4c69-8b7e-c4930d5461da", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.198.221.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c805fba3-ef85-4bb7-b838-bd8743d854e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.20.172.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992c506a-07b5-48f7-b074-d6a5cc99b99c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.242.1.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a3d8bc-c7fe-439c-81a8-47a8402e869e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.35.7.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--311adaa7-3d9e-4b9d-9c43-46952cb0c531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.45.29.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7951713-e6ea-4829-91ec-207812b242be", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.104.154.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e06012-37b2-48be-a6d8-709d3c472c7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.104.64.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00b12cd3-33a6-4af2-9c81-4979c7e7f457", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.123.17.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15f946e-f53c-4444-b4bc-c921f3a14496", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.164.20.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b4b7034-d8db-4c96-92d4-632d938e0131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.240.235.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369fa7d1-c9a9-47cb-93bc-3377cfa51427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.248.254.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66b8518-6de7-4ce9-8f9c-922807f6e569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.212.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed3ef180-0297-4405-84b7-2d9126f85e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.46.213.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0309f242-bfc0-42f4-a080-b4d1587294ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.142.60.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e021630a-bd71-42ad-a276-c5a6f07f7082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.172.178.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1263834e-98d2-4cff-8c82-1032ec4f8c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.187.151.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9001cf-282f-4cf7-91a3-005d93592f26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.15.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7ef5f8-f284-4e80-ab36-68b9dc1095de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.221.96.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c0f54b-ac18-478f-8f29-705d5f40fa49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.128.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6745b8-cef2-4103-bb43-68d98f9f280f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c168eb2-c208-4548-ba22-a6516e6f6ec1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb01112d-19de-4a5c-b193-7f37acdc93c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3104544-f30a-45ea-8037-1a1f5a21e170", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c45e99b-f064-4cbc-a175-1f8e87a4b031", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37a9437-8ec2-4673-b633-71ae1025726f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.139.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b147ed54-406e-41ee-9244-3440156ce684", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7285282-f00c-471a-9424-50ab41a06313", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab895463-be31-4f9d-9762-8798ff1d4cfc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9113043e-53d2-4acc-aa63-d57d816d14b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e2dd2d-9b99-4da2-978b-fcb846e4dd88", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb8ec60-c43e-4eac-818d-f420edef9c46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a424a6b7-44e7-4cbb-bdb9-559db3eae6de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec856c04-eb9e-40b2-b35d-2eeb57f9c205", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326d84df-ade4-44bd-8828-d0fdba600ee2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.133.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101b1306-574d-456f-a762-80cb2a5026d7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.55.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b282dc-10c8-4579-8381-16790e36a7fb", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.80.41.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d0977f-fa9d-4f13-bd60-123f1a9ee0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.98.177.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b947d2a1-4e54-4171-ba47-91a7a8c0aa3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.151.72.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caccaff2-2b14-427e-bf15-64bc80c99948", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.178.75.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15aa979-940c-4a55-9ca5-eb673abab392", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.178.75.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d8ba04-b6ad-4573-86db-fccab21da037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d215b3c-093a-481b-b49c-89b032bdbabf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.172.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c49961-e2fa-4ed9-80d8-758c21b714e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.213.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac1a2f6-26f0-473c-b41a-1147a9b9c035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.241.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2401beab-c498-4227-83ea-2d8199448c23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.56.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb157031-7c17-406c-a183-becd490395f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.83.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429f7043-8b3b-48db-9d13-6e6f3907774e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.191.64.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e4769a-ac17-46aa-8cea-96bcc6057918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.129.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948ccba4-23e8-48ea-8e48-f797bead1b83", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.227.73.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e2bcde-c7de-40d2-8138-1106990c1f62", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.231.78.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8beed4cd-fb95-4284-b407-901a3aae95fd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.118.44.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c7f67e-3907-4a1c-82d6-4f335498f8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.178.128.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--025647bd-926a-4958-b4ee-fa8bfd20621f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eaae2fa-7631-4f94-9c40-2bf7d82c8e28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb752dd5-02d9-41ca-b66b-9bd2d7b79f32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba677d20-7ffb-4926-98ce-09170a7d5ba7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ed80db-241f-483f-9343-98dc17801ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.198.232.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39356118-3734-4fba-9992-04a229dcabe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.230.168.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b91f6f4d-2545-41da-b34d-9c254926cd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.255.169.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f15538e-e12c-4090-8e46-fc2b45eacb56", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.34.14.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb8bc57-ea45-4cfa-9a5c-c87acfc03b21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.62.241.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51aea16-93bf-474d-9a73-d141a35d1ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.63.140.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df82e0ee-42ef-4e20-9f03-e3f1535e5abb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.173.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bab4706-4d85-4aa8-bf6f-390256ab88e5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.173.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc05227-8fd6-4a27-b6b5-ad985f4bafbc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.99.175.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba3e3b3-b248-481d-ab23-7f2debedbbe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.139.93.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721e4ffe-50eb-40e1-90e2-b1668a4cdd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.14.159.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca51ab65-d455-47b3-8cec-fcef281d5fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.146.110.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59777490-2fde-4df1-a985-a1f847593c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.149.196.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c159fa47-8527-4417-be5a-8949850f4b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.156.231.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d131340-2ebc-4bbc-9ce9-e349007eb8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.158.66.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c6ee34-3a57-4c9c-9a08-171ed8bcbbdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.172.226.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06d5e72-d5ee-45ca-9876-531f218db5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.173.77.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2194ae68-1ee6-424c-9199-3b0993d6bf27", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.180.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39154e7f-9776-432c-9801-3d1a845775ac", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.187.58.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc86202-4c94-4483-8be6-2f7aa8483134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.113.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18452f93-b108-4d44-b2d2-eaba8d7c2c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.40.182.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a211b4-a795-4138-99b5-69e62b7e3c67", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.70.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a549659-1bad-4934-aa22-fbe05e469873", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.80.234.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab158010-aaae-45cb-b2b3-152d9860c1a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.108.216.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c91e39-c7e3-47a3-8289-314d1ab49d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.122.147.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87a6f9e-6378-42f6-9e86-a8a9204bf4cc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.144.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f2362d-62db-454d-bdbf-8f398ddbec79", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.164.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7f9a30-d385-41a8-aac2-21f55f49200e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.238.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b690e4-f5b4-4ce0-a1cc-2e2a074b5eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a7541d-6d30-45ea-b474-01acff3016c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.33.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc0ee1e-b924-4681-8f12-e5f9b5406441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c85318-a7ed-4cdd-ba15-3ad2ec0ee581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516c7f4d-6f20-45a8-acdd-26fd7c82b7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4563e1f1-ad7e-4679-864c-271c92494a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fada144d-d916-4605-a1f7-f6453a432679", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--713e36e7-d382-4195-881e-06486c7ed5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602372bd-8fa4-498b-b415-4a53d8f3057e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575ffc76-5646-4979-ac4f-c8433fe8373e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.44.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4098de28-2ff6-4b63-936e-d759ec15a4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e661153-e98c-426d-bf64-48f06751d8fd", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a49f50-0978-4000-b58f-7641008a4031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f650f0c7-4dcb-4085-a4db-1e71166762e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.56.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027daccf-7e0c-4251-acc9-5206cae1d596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--816996cd-0e75-4f99-9383-e71bb9d8419c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c89f857-4e4b-4780-99fb-a205530abdb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4d756a-4fc2-43c9-aa30-488f47864aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ad5e39-7618-4dda-9994-697e2904b68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1183892a-8ff9-415e-86b3-aacbb1fb39f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.58.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb615d46-8e11-48aa-aeb2-80e16b4c5075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc19484-af66-4acb-b7c7-1e5f3c5742f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0781e157-8272-4a07-b37b-c3021578f5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c1fe45-64f1-4896-be17-337552fe961a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57df3ec6-b603-4e58-aa2b-def2862ee89b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb9c4a86-7f92-40d9-902e-90fc5796c934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.61.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78131cbb-e5ea-41dd-a61e-92b856e71216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae4e70d1-d042-45b0-b9e0-17877d9b4de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e78973c-f947-4c26-a6b7-be3bcf8c5879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e91780-082d-4eb1-a7c3-acf555a245df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfd7968-e00b-454f-af27-67e6837e8b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b402f5-9eaa-424a-babf-6b9df87aecd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca4919e-07af-4301-96ee-bafb0284716f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4864287c-3fd7-4d13-b876-a3b98dae9719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c627818d-16bf-416b-93ff-b1340fccbb30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6983a6fa-7485-40d8-af17-4e2f05b313b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.77.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e71104-09a3-48fd-b314-513ac8f84b64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bc5cb0-7517-4050-94a8-be2cbee3eeb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.234.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0969e1c1-70cb-4928-96f6-eb459e598d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.235.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c874b61e-781a-436e-88ca-b0160e396e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979cb6a7-fbc7-4b2c-a6c0-e9d997c482d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbbf561-37bc-49b9-8061-bf04167d738e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb1475d-9620-4e66-bdf3-b113b72d3661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.249.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c82e076e-2db2-413b-a599-45410e5f3003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8efde4-0798-49d1-8071-242dbd32bc7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec2c061-310d-4eb9-9d1c-abc2e6b5c7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7146394d-d678-4d5d-8879-3aae5f4d5039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f0cf46-d3af-4264-93c0-bd6ea7853fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88658fcb-5a0e-49f1-9486-d62cb377ceb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731acc15-66b3-483a-bf42-16625e673eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e156e3c-e5a2-4600-90ae-31dd1684e47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.114.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743a1e76-6f21-41a8-bf62-7ec5162e68db", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.4.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcc3a1b-c8a7-4f5e-9824-a62402707811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.196.78.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d004504-7e6f-4663-9e89-f1e8103d4690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.212.120.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--368b9757-6be0-4f11-8246-932ba8f8b170", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f66076e-d938-4dd7-b710-9af6de65d90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cff7a33-a565-4210-9b03-c96980388ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c46debc-e868-4b5e-8513-91bed26df631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.105.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790f95ae-bd52-4c7a-852c-60c3007ad767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.109.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e657081-366d-44eb-9a1f-c206e451612d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e2355a-1dd0-4635-9218-905e8cb59ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.41.137.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c4d94d-bad1-4789-930c-18bdeadcf90b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.43.18.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128fc797-8973-4d29-901e-90ed7c145880", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.167.206.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18863f67-50d0-4666-980e-632cb14a48ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.183.71.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd52b1b7-f03b-44fb-bb44-661f4e4bd227", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.209.12.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90532c16-a75e-435b-916e-780d12659800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.238.26.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7250e92-6b47-4d16-a29e-1bba138ad763", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.56.162.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f823a32-ae83-48ba-88f8-8c41bc786c3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.91.20.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17be27c4-015e-45ce-b8a6-93fef8fdf1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.68.228.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2d4ee3-46f1-41a2-8a7c-0d7c7532a340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.79.116.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870a57a1-028a-44c7-9bbf-51d717c2e68b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.138.6.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8979b5-bc33-4b1e-a6a7-2a7b75c99827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.240.236.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b724df49-7d74-4f1f-a807-a50f2229facc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.241.79.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c78c0667-8b80-4bf8-9c6b-30ea3e59face", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.26.147.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b284828c-764f-4134-95c5-7896d9975f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.46.204.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24d2873-d6ec-4356-8577-c53c0acce389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.134.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32791ca2-8081-42ef-95da-5e81816b9c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.147.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7cbe06-1ab6-4e35-ba92-80381986493d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.153.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e374fe1-065d-4f93-b8b3-3bde3cb9635f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.154.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57d6a89-5c3c-4f32-a67c-2ec67adbf63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.45.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae672c9-6996-4356-8ae7-f6f06da9d34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.97.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff22a89-6265-418b-abf5-0602d3c12816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.52.12.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c68024-1e4e-4a3f-a47d-3d593554cd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.89.53.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de6222e-68ff-4793-b781-5493d3fc7586", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.125.67.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f32f3bc-e56c-49ad-bdaa-fb50ffd3fab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.130.39.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062926fb-59ac-4ea3-a81a-efb531eccd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.171.125.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--404a2d67-0c79-4d7b-ade4-5ca125be3b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.180.1.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a412351-f116-49c8-b30e-d954c6d8c707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.204.147.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e007c52d-7a9e-4860-a4dd-0ac2548d4a43", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.4.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292dbc2f-010f-4430-84b8-2ebdcd6d9459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8439d5c-040f-477c-ad3e-78fcb0fdc290", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.31.210.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21f3315-d4bb-487d-820a-c09de666d5cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.43.239.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb79ff9d-4441-4daf-8f33-b52d1336838f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.117.225.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b61e8d-5e10-4ca8-be4c-eed19d854db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.118.203.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df87174-480c-43a5-8d9f-f5a8e227242e", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.160.3.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb570f2-5944-4831-803e-6ba59360019c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.176.215.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a12fbeb-c3d5-47eb-afcb-60d22e3506c5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.231.15.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98660ddb-a386-4595-8495-ac99407aef6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.35.192.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0d9172-b7c1-4fbb-a910-c6c0f2c2f71d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.54.173.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d094d9d-a083-435a-80ef-16d51a488190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.10.227.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a937de36-f648-43cd-9682-17593dd834d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.112.134.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853d743a-86bf-4e68-b634-b0420e1a2a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.136.194.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb8a33d-3512-47ce-80ac-f66a9e3314e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.77.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f49071b7-f101-4faa-b420-ebcd9795a7b2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.141.253.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74879345-09ab-4960-b124-3402a61c977a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.167.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16808358-fe2e-4c83-83ce-a438acd5704b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.233.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2c5cc0-f098-4db2-b4dd-680028ba012d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.180.182.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e359dd-3369-42f9-9f84-8a619bce8579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.21.133.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75432cbd-2fbd-4422-978c-625efda45990", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.219.248.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1599653d-a91c-4149-b4ac-f1ab24abb241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.225.107.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aabacb5-56bb-4290-99f1-308ff32b5a58", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.231.157.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161b4d48-12bf-4b7f-8897-edb654cbd6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d2b45d-9e31-4763-9920-c77f912bd60a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.31.164.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b9de853-7ee7-4f13-a1aa-149f2fc67067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.200.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3350438-7930-4cc6-8b39-29a906439d57", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.203.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3326ceef-64bf-41f7-857f-635423d5de73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.205.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b20de6b-c7f9-44f5-99de-c7d13712eba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079067bc-0f95-4beb-aa12-0ac095cdb393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53bfe5b-98d1-49fe-8bb7-f79e28c41e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.213.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e654a4ca-4f4c-43a1-93e3-f34abdbc54fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.215.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3721490c-b196-447b-8f09-ccef2467e77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.59.7.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb81c4c-d265-4000-bbbc-f2c54b35f9bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.202.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382e884a-93fe-453f-9b3c-cec775f8a9bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.226.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed554f9-6ddb-4bf1-b91e-01a5b49e77d2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.158.124.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf08e82f-845a-49d5-bc19-21d8423f1746", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.193.81.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e1401e-34cc-46cd-9895-a5db24a4ede1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.198.131.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622ac3c6-0be3-48ba-99fd-682b999f3c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.220.236.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91193d4d-7894-40dd-afd2-7e16f3719b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.227.31.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495be2ad-a4e4-4fde-89c4-de41cae1e0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.44.177.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da47f49d-9679-4417-a8b4-edc4c0cc8cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.89.119.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ff67a3-7024-4753-bb78-ef625988be87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.124.149.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c489b4f5-8acb-464c-9733-9666937a5fcd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.141.139.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d81321-28a0-40f3-b52c-59595230a38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.20.210.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd17ff0-24f3-4967-93b1-6e5f210e650d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.21.53.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e864e33a-614a-423f-8484-776f0503368b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.213.152.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031d7939-995a-465e-888d-2d567a21519f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.26.173.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3111000f-aebb-4c5e-b65c-f8f99f0eaf83", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.31.2.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24523de0-e506-44d2-9afd-5605f89361d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.42.117.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3550a9-93e2-477b-8a58-9959b8d350e4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.42.32.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5d780a-c16a-439c-ad22-b160dfd78079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '126.38.54.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c9e3e6a-3fee-4ca6-aa6d-8861b20f14e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2669f950-8926-426c-a973-917e2fc8bc20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.0.104.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2e8fdb-de15-4f43-98f0-de5c4e73212f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.1.34.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51dc1007-1f4c-40b2-b27d-f41053621b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.226.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf50320b-3b83-4b49-8142-b1f35f9ce360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829df83f-47c9-4488-8faa-321057e7ecd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a014e734-b93d-4c3c-8e26-cdf57c7cec67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.229.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d134a3d-75b4-4fd2-be14-105dc31fed58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.232.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ba5954-2624-4350-b262-4ceda48b607a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.233.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54aff6f4-aa8b-436e-b2e1-c2d0373b1462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22086675-f718-40d0-87f5-aea7187588c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa389913-0ec2-4dc1-8267-18f359ce804b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.239.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649fc9be-2f14-4cb3-8ffe-390aa0bfd696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.199.225.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6997b34-c358-4b42-b55a-d48c2761edb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e5a4fd-8d48-47d5-acc3-426f126dbfe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1492f32-8a74-41b4-b2c2-f144998ed574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f7056e-496f-4573-875e-9d120a3b79b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.203.204.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac99fada-8fd4-4cac-9abf-1af71f918006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.222.173.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7408f7b-ac2a-4e1b-a572-b58824c14478", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.224.206.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50188bb-f8fe-49fe-8d10-2fac1db88e54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.226.209.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83cbde8-8d6f-4450-93b1-7213854db979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.217.169.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5bb0ae5-1989-4e3b-a806-01826bfc5cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.1.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76440a51-b10d-4cd1-967f-829a478ccea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.219.193.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf4a5aa-a5f7-4293-8909-0abd54305f57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.220.251.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--950f9695-aabc-4daa-9674-d7691ba72143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.250.241.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e31e784-ef08-4ee2-a67c-505227b2508e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.59.69.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce864b7-69fc-4617-b456-87a00e0ab5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.117.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abac014-422b-46d8-83ca-8f54e8654f71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a174c07c-f87b-43b6-844b-ec79db4e155c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1750912-81a5-4de9-a0e7-98975f002b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e084cb6-05eb-43e2-9871-727d5394ecd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbddbb5-7cb5-4a2f-8add-136102e72d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.124.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33402f52-5d29-4be1-9cf2-d8b8a314f002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93ff6c6-a0b2-4c36-9ce9-535aab72776b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce185e07-c0df-491f-b0f0-e49cfce4c95d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7cca139-9811-492a-ada5-329c557c9c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ec4fee-0a9c-43da-8b62-3d975c50585d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7386fa-6918-4505-90d5-d3ac489b7d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251f770b-19d4-4eb7-a43e-39275b1b5706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.161.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc324e19-1a1d-4f71-99c0-81f14d979898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.162.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2324b15-66b2-4945-8dea-f5b6b4826275", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.163.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6b1b98-0dbc-4f41-91d8-e8adfbb3adb2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.131.220.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dddbaf81-967e-4893-98fc-ff738c6ea154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.185.119.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5888b05-c855-4b82-838b-c419d49a1004", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.61.152.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f472814-f8d4-4c3e-988e-b3359aa4de83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.222.251.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54aa3381-9a11-4075-be84-5df77fc686b5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.155.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2b9815-b127-4532-8bca-3274fdb56b38", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.125.236.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--465b4382-d35a-40ce-b456-21af03bbc0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '133.175.179.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7ad4ee-cd34-44a5-871e-df1b0fdba7f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.105.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b079f7-bacc-4e6e-a14e-73064fda1da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.118.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5494d280-3d10-4fb5-bec1-781b86c6e1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.122.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b817b594-f3c6-43bf-a89d-6c7f19f7c3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6736781a-bc22-407b-9e4e-8fc45b1d4a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.125.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703fd198-47a2-42d3-86e4-dbd484c4fb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.13.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea23e87-398e-4a30-a694-86d56cbcbb5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.19.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31015190-21c4-459b-940c-8ee7f36d4c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.20.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28787961-b817-4613-a152-b0d0479b1032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.155.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af79acc0-831a-4b03-b8ac-f2133dc11df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.159.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258b5463-8355-4a2c-a72c-d968d21415a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.162.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad00c36-92c5-4c1c-9088-60d23ce967a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.214.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--607e2dc9-2f4b-49b0-9242-af937b8e6f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.231.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af015634-1550-46ac-91ee-a5fa5d7d973b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.120.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944d05cd-ab24-4fc8-bbd6-01c8c6a90b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.174.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5950b1-a20e-4708-ac28-4841036d8ef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.212.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afb39f2-cd58-468e-83a6-960ba3a1d809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.29.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0197eeb-98e5-41ab-a5b9-db12dfb1b9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8472cd5-e3e2-42b2-ace2-06cd94a74e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.112.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308a0eab-2bdc-43a7-9970-a70e45f483de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.16.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcbf2deb-dfad-400e-abad-fb9943e4bc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.96.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc672fc-5dc7-49b3-a8ce-cc1b9f5321ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.181.4.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da06d670-5a09-436c-a481-b036d03eb364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.40.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b72d42-3df8-4c19-97e2-12caf8e2a902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.233.112.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38afc6a3-973e-4b62-b880-e31a6ef7bdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.120.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a867a012-e353-480a-bb30-7e84c84195c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.122.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bd7a44-49d5-4579-a314-a5d553aabdee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.123.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f99daea-2b15-4ac2-baf6-636f07563082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12df99c9-66fe-45cc-a84b-11def36d32ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.124.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9307023e-4048-480b-bcf4-4d2cf126eae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e717ea-6b67-4302-8d6c-e8ce7829e56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a048cd-9104-4e0e-850c-459784f92216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785eb345-c36f-4251-bfdd-4604d542ba72", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ecaf8e1-79f5-4609-8b66-d9a09f1e900d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847c2f2b-aedb-46f8-802d-018621b83f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af9e1d5e-fee1-4161-8d5d-34a7d7547cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9d4ef6-7b21-4473-aa83-51e9780e1ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.125.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350b5034-bdb7-4abf-bb00-59a824e0e47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--239d6ebe-a1f3-4c49-b17b-2489e7795897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60f7d86-bf7e-47c7-a781-e3acd311322e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--414bf6e5-154a-4d4f-a725-04f445e9b21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7952452a-0689-4a5e-a79a-367ae424d728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1df8dca-b80d-4d51-8c55-e485c25b294a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44627168-4633-4a08-b080-1867adad1458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791591ca-dc1b-41a7-a9b1-34155b47a364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22334fc8-429d-4a19-91be-bc497413e317", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--808ba64f-1004-4002-b764-785a9460a430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--304a7d9e-8b52-4428-9be1-07fbc7d29665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6151be8e-78a7-4d18-8b87-1cac50523202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3718ddf9-1607-4d79-b5b1-8f2ec9cb80ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c03a47c-b07a-455b-a8aa-07a820d34fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79668d2-0259-42f6-9cb6-80de9dfc5bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57dc813c-b1ff-4241-802d-9fd016ea833b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.126.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7748c4-1514-4659-b1ef-eda20fe1d66b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd36671-2e22-47fe-8b91-5f26120fda2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8af57481-2afa-4754-b58f-a251ea6f4abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdfa597-419c-4753-b282-f6cf7e481290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.127.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8ecc8e6-50fc-453c-bdf0-770ce2c02920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.117.199.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd59a92-c0ca-46eb-b1f2-a936c028507e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.35.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66887e35-8c7a-46bf-a8ad-199ef478d2eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.144.42.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a954dbc0-d2c1-428d-b7c3-c858485bca7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.76.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bebf5e-0dd9-4ab6-a0b2-85758be022b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.105.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e33d140-903e-422f-b32f-18beb6a22014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.111.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f145a66-5e91-4d7c-b336-6778a5b9e956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.139.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4284eed-caee-4565-a911-0414d36553dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.148.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fc7d3eb-e8c9-42f0-863e-b176c55c3ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.148.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a1a858-17e0-4ba0-b772-06be996e468c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.177.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d74837b-8ce2-4a17-997c-9ee49ba09c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.198.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267a9f9f-f20c-4b39-84a1-50717de438c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.199.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f8accc-a8a8-45c1-84ee-d0c531dce99f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.2.0']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e87264a-87ab-4d3c-a85a-d2203ae237d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.213.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29d7bca-2c30-4d5d-a4c7-b927ab6ce264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.226.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be03c9db-fed6-4318-a0d0-34829f18d11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da92545-0801-4c57-9991-d6858c35ed0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.33.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6942caa-db2d-41bd-838b-a984252e1d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.35.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a92c172-1de3-4377-b315-48525a44c1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.36.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089fa77c-b2fc-4551-989f-f4a4cd27aaea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.54.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce886efe-5798-4a6f-8c3f-3e4525aa8df8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.73.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c2de4a-0d5f-4f22-ac1b-b9919cb904b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.97.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f520fd8-48f6-4d43-a894-1e194f6e7250", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.226.113.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313068f1-5847-462b-a3d9-e108991a5174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.59.54.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a33656b-c8e1-41c9-9dc3-c8b3eb17461f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.101.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd69fc0-718e-4e81-a0ff-dffbecc3c2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.104.0']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cb9302-a9b0-4bed-b992-a1c62ddc49ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.136.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc781a0-202d-441d-97a0-2596ddb9680e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.15.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce82211c-4ff3-43c1-ba02-fc137d66bf95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bf241c-0657-4845-a3a8-cf07693d14e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.215.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddcbdb7e-d1df-4042-a834-984bdb9428c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.216.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4116ecf-4720-40f3-b86f-e9308e698c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.94.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c01e0a3-22d2-4c50-9709-a5f17f0b6f71", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.237.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a3edec-696c-4da0-aeab-3336586f19ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b434026a-599c-4d3f-8ca9-6bf5d1176492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094fec8b-b4fd-4678-a44e-79659e839076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a478c299-2335-4b79-9a2b-e6156dff974a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119cae75-219b-46a6-b8ee-682e08b1af24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9514e4-ba52-47ff-b362-2a75f28b8eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.249.132.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--114638b9-a1a2-4f30-9ada-2138dc2829b9", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.173.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dce0b91-60a8-434b-a450-fd4b65f573b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.182.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6e0fce-6420-4941-b652-7155071b35da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.225.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72aaccd2-e835-4493-bb65-305131c5a161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.255.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09e8dcd-e37c-481e-98f9-fa783e199833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.65.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--495bf104-acf2-451e-aa73-158441f61c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.85.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4aee56f-f75a-4e61-a88e-ccf85c2963b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.91.107.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87963725-9b8a-40d5-8420-2a2c589334bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.99.79.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8761d4f7-a68c-4b47-9a05-44ccfd78c1e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17edd0e5-1e66-4b30-86bf-871fd4cff383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b189e188-d6c7-43ec-8425-ad2d8a881a3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f499d0c-164a-455c-82c9-c831599a06ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.159.204.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1f3c58-9241-42f9-b28b-d96d565b292c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.159.213.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ec7607-4fa5-45e2-addf-0e59b8aec6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.159.233.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce831c8d-f52b-46db-a6a7-090c1ffe5c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.116.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1f1a6c-1543-4e87-a979-d8a69923efde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21bc7ba5-c996-4b2e-83a6-84f367a041b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.177.206.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40a92ad6-7cd5-41fa-a90b-8c00cfaba9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.180.191.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eaa9c38-dc83-4b38-acab-55c3d11d1916", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c51099-2f2f-4771-948c-2d9388c5140c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0acae680-3004-40c9-95b5-50a52de57bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--693ee1e2-5618-4cbf-b03d-f9e18802eb0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.196.120.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7d44f25-26da-468c-965f-d09afd0b020e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.69.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22fa53c-b147-4522-8d2a-72cfc17d6a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.214.251.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41aa726e-4634-4037-8767-4e0941b466f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.226.100.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989c7e89-540f-456b-9672-b8e10341cbdc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.255.254.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe13d0ba-fee6-402d-a850-38d7470e5f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.101.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be9d7dc-c759-4f48-a39c-8eaec8a9304b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.225.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77c1734-ad3b-4bd0-a522-5981d8f2a9cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.226.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5729fb34-e43a-4399-8b07-daeca30d8e67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.4.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50956622-9998-4e3d-9778-6cb1a30ca382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.56.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c02931-e153-474c-99fe-5c1b72299da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.82.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7f686d-8bf8-4195-b790-d1939d548f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.83.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f822686-21a7-40a3-bd35-d8e0a3ff45ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.100.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426d6ac1-1973-48a3-86ff-3b0009e15c79", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.107.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4e85b4-14ea-40d7-ae2c-47abd476f4c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b9a09d-eba0-418c-b8ac-1fd74474641a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.112.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b6c290-c1eb-495f-9992-b8ffffef7e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.113.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c7c113-746b-4a9a-acab-7d59feb50d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65220a60-4889-4fc7-b1e2-3a588c8596ce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.114.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bb2633-fcca-4fbf-8905-2c4935b6381b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97723a9-7e99-49be-9728-812088637f5a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.115.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe559cf8-4bcc-438f-8cd0-17ac2979f83f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1df1017-f559-4274-9f74-86329d990214", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265a1ef6-cc31-49d5-9d7e-db51e2c7a50b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.117.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd7f28da-956c-4023-8f69-d5addaf3fdd8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a2f3ac-f6e1-44ef-a09b-555181ab24a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb45a61c-f8ac-47bd-a906-11a45dc4f571", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d0b527-1b66-4748-92c4-5ef33d9500e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1896be26-0651-416a-914b-ce39d1d42eb9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.118.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929f9a1d-45e6-4209-b093-a70d3bbd0793", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.121.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b66a72-c0d9-48fb-82d0-9ca4ccea8a53", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cccd8a7c-0a01-42ec-8431-bb091f690a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.123.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64db26b3-a104-46ea-99b2-f48bbdec22aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.127.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0df796a7-5237-4ab6-840e-5f467e3b68c8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.142.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3b21cf-4f3d-489f-b579-c1f2b3139e14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.184.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489a9b13-7b26-426a-b465-1b53cfb653c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.200.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3187d92-1e4d-48ef-9d33-47598d73f026", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.90.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a18dc3-9fad-4919-847c-6da3ba14904d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.99.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ef7570-0fea-4c53-baff-e3be2844f871", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.189.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e60eb2-0cd3-46a2-89d3-93472e5c6531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.116.219.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71f4491-d9a3-445e-9f1b-6029ae0a4892", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.137.255.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c219872f-2864-46b8-bf01-88a1ab9b6b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.163.144.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a6fa34-51a8-4a6c-b113-83ff34feb6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.192.239.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea64619-76c5-4f6f-8d71-9312e71b2396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.22.23.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49640ff0-a21b-4add-a6dd-afdd6dfe4f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.22.79.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c40092d-0390-44ee-b075-709356e2c376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.22.89.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63105309-94b7-44b9-b847-02dfaf4cebb1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.225.217.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea023b4-d682-4c20-af73-61a90037b13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.233.203.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8c28a7-f6f7-4ecb-99f9-12edae35ba03", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.29.184.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3402874f-57c4-469a-87c8-a3d67a8d13f7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.55.31.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cc9c5f-33d8-40e9-8d0b-97b497ed3c61", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.63.196.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b185e2e-2e7e-4cd2-b4ca-659aa6fa97bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.141.255.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1396d44-f8c2-4c16-b849-31d310e7dbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.233.190.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3967305-e406-4b1d-9125-85838435df65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.95.34.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893fa528-1e81-4384-b0e4-4dd1798ff4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f6a56e-fa3e-49a3-b580-4d8c5624fd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.11.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--383addfa-3b25-461c-8b56-1444b0ed3d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.233.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ba1aa4-75ab-4f18-9880-828b8bb43187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3cdcfb-386c-4ed5-a58f-fb13d9d65b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.9.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514c1dbd-b268-48c2-998a-3aff813f5d7c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.15.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbabab3-1f64-4411-993d-0c546329ea67", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.15.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc08b52f-61aa-41d5-9e00-8b0654253edc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.4.31.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6353b18c-edbb-4576-a861-43c6bf498e4b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.149.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f974f2bb-5444-4816-a84a-b40713990ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.44.247.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c1b833-ac80-423a-ac43-cec9a3fdf468", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.115.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdb5f3b-2317-4e0f-8d04-c0141707a6e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.119.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b4c812-024e-454b-a238-7ed45cd42ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.124.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be93287c-2b87-4c0e-bde1-786e232a9c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.147.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c78923-a315-48f8-9f6d-613b2cf1a66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.148.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf57780b-c11a-46e1-afea-8171f0078529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.159.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b83924d-a73e-47e4-a39e-328bb1589771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.178.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--196ea48b-b57b-471e-9891-91bbd52c4d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.19.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c54273c-5379-478e-8400-70607ebbc779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.2.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d5b3a0b-f846-40a9-80ab-f6a0314a096b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba390945-cfa1-4ea5-8c63-61cdb0167efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.58.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70a70966-d47c-40dd-a2bb-8ff9fd690a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.72.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756c9b77-cd0a-48c8-8fc7-fd5390bd6f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.219.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a105dc5f-1e5b-40f4-9dbd-8225182c2018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.240.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c581a0e-ec62-40d8-addc-df3810bcb32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.241.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c5ad1f-9c89-4776-b4b1-44c61e3f5f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.104.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4070bfbc-aeac-4fd8-af9f-dbc7019addf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.115.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3c1d499-eb81-4599-972a-dafc214404ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.123.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde07f75-5009-4f38-9619-cb635477549e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.145.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e52ccc9-806c-4f84-b947-b1c559184410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.160.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53261b52-c530-4397-9f30-64f838e05cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.164.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d6fa15-d4ca-4e7c-9973-cef0e82b5297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.232.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff0f519-9e46-430e-887d-d1607ec576d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.45.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b70cd0-16d3-4dfe-82fc-94fbe0e17c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.5.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ad5786-d5bd-4ddd-b387-cee1ebf28614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.68.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5659913-2a32-43b4-804e-f04c002e3a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.76.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e64afe8f-8275-4c7a-9f12-e66084ca5de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.98.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe0a52d-abe3-47e1-9a5e-bd5ebb2ce8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.147.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a9b156-3621-48f4-9782-5ddfc0edfb2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.157.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0fb7f5-fc26-491a-b245-ae0bd668b33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.165.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4345d6e7-3569-48a9-b8ff-cb030386bcc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.176.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febb5804-4da9-4c95-930a-7f19e8708d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b83b75-beb9-4eef-905d-f42601615cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3038f7-9075-47a2-8ecf-bd2c11d227d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c510d4-defb-4d9a-b0ba-9499e31c4e4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62956fbc-43c7-4431-968d-f17c21cc3e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bf2f62-d421-4157-8522-a703d39b8036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f30b65-b847-453e-b889-07233405371a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca87854-6177-46df-af53-a85918e7572e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcafdd2-7c1c-4bf9-a7b7-39fa87b69e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe01ee51-0914-4396-87f4-99c033d13c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8ec67a-eaf3-439a-acf7-73f85fffaffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6817a3c-fc56-46a0-ae6d-d9ffc6350d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1f48faa-71b3-4a25-9e4f-587562a13e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9a94c6-9a5f-4f7e-a6a2-510e873b2584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6160faab-664a-4e1c-9f96-36ee1dbcdc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f706f297-b70d-48cd-b17a-36ce1bac4ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a6a9765-86f8-4b7b-b91f-d33bc652831f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db92d447-da22-4991-b9aa-85e1a496d4db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a200e52-5316-4062-a822-1c33d458e702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f7c228-8736-49b7-bf49-802098f02425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240ecd38-6715-4d9c-bd78-c51b2384160e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b22ebc7-5f08-40ad-8b34-b85dd1a00c68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.227.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ab1a0ec-79be-4c98-8b9c-08c541ab519e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.126.236.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acca3012-0b05-48c3-8cdc-7f793ec5ef4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58a0447-d88e-4c83-999c-e8a1ed2e7cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.225.124.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d091e5c-7732-4808-9b26-229e7263f187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.130.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf00e7b2-ddec-4ead-8778-5ff175be18da", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.8.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5be30d2-f501-4c60-9a35-2a3b19a670f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c34769-6c9e-4907-b750-b8332034ee0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.220.91.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5487bc82-b506-4226-95d0-655043a95d46", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.223.23.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77702445-52e6-4434-8f88-2cb928ca9afd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.104.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de8bc37d-b042-4796-8128-3e0a072d8bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dcbe26-dc2b-432a-a62d-18df0d1afec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c01e36c-1603-4b52-889c-c42e1f4313a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.154.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef76762f-4aa1-4e27-94d6-2bc4ad308835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.16.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26bd6ef2-2748-409d-b9fd-8908b68ed815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.249.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647f3d74-edf9-48a1-ae2c-b30bda87ef0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.250.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e95ca3-5ae7-43a8-9043-e6adcdea5717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.73.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400f7d16-1247-43f1-9aad-2c57bca53514", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.56.197.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a89b5a0-9dcb-4876-a8f3-3fc18d6d0ade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.211.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd62f717-c0bb-492b-9488-b27e776ae913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfcb6ff-d665-4f7d-98f1-aa6a27ce3c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724e880d-6644-4770-9a8a-d91b99b4a50d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.52.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bdee9ef-56ed-49f9-b66f-95967692eef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670bcb60-8604-449d-9691-92ae231ba8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e8e684-da1b-4d92-8f98-f9aeac60dd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0734eb85-40c4-4209-bc5e-5a75aac61bc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.134.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff2f836-58e5-4b87-8273-2d80fd74616e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.152.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5eac81-9842-42e8-839a-903fc4b39ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.154.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09605c8c-8c8b-4367-aa2d-c872c62c9b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.164.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29088fd4-834c-4a0f-8699-7d6c99bd6f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.191.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f19abd-c223-4eac-a73b-137b63f0c45c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.216.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23d53a4c-4442-4632-b58d-31dcc334bfe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.222.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb287bb-abc6-4c0f-a7d9-de74f8831988", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.235.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--befb5580-3bd6-48ee-adcc-fa66975ddb52", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cf7017-ce22-4554-9933-66f254b9dc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac917c54-2749-4482-910d-eec71fcb197b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61ea14e-d5c3-448b-9ada-51b236e9bf87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c26a7dd-a8ba-45b6-a710-ed84bd1b997c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--192998e4-3c14-4930-aa96-c93c8f31fe67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d0ee73-b532-48d3-b9d8-8aef0d307eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f0e3fc-8805-427f-835a-717f2036ea12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d180150-e7f6-4e33-8691-7abedd10a08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d2d815-71f9-4a52-bdb5-f258cb38da33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9630e6b2-ac42-4bf2-bb8f-b946cd179d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ed917d-0be2-471e-a5f1-bea36e4c2469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be9ead5-4a5e-4d8b-8387-c96cec687647", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b078592-9e1e-4ec8-bbce-e087bbd37704", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cff9d3c-8a88-4e27-b761-73180c59dcc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c63c11-e369-47e6-af63-cf18b1ad5c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a300fa0-9341-4e26-98fe-89132c3746e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf75c8c-261d-4451-b37e-3649b5636dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b72efa8-9615-4ab1-aeb7-cd308e52a6e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e50eeb-2167-498e-b264-108f7c890abc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7bdbaed-abcc-4ebe-a232-35ddc551d7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cf0e0a-92d5-4083-9a9b-cff94892cc3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e62c208-248a-4622-a73c-e1eccb73252a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76822b6a-2d7f-482a-9951-f806c3c1c4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb62283-27c6-4fd1-bc40-de85f23d349b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967a153e-7e12-4274-8a6b-0e304f7c8238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f66041-5fb3-4512-9aea-cde7f2b70adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a24901-2c20-4f48-8b0c-e30da59ca8c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eee7f09f-7c72-4577-a0cb-6accfac8da46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6591cd3e-89f6-4250-bb89-541979e7bee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e4a5b0-6d7a-47a9-af2b-88823f430b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16682013-76a2-4a68-bb95-b6fbfaa5cf50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0bf272b-0144-43c5-b13b-e739f5da3223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e149b09-3f5e-45d5-a2a7-6644c8222558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426916f8-da9f-4e0f-843d-508833b2afc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b706b6-75c8-4a83-a830-0415cebeebdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02f7b22-23d3-4e2d-8160-164e5280ba54", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419c93b2-9724-413c-b71f-6adfbad0a5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd04c38-8ee0-43e5-bd98-57171c7f14e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f79119f-318d-4390-8f97-96251805c4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0242f54f-f93a-4e02-b9b5-112138edb21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235d6569-4813-46bf-80e7-eb4150d67b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0fa544-12f5-4ce1-a00c-1f4db6788c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f06e341-dad5-42d6-ab28-119fa0b01e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4eac398-9a8f-4018-af5e-bbf1d0ae85fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6983f9-dab7-4897-9db7-2ccaa9f4aed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9612cf5c-44c5-4e95-9af0-08a336179375", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbace985-e0d5-448b-947d-995775de3e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1fdfe4-b5a0-4a4b-bd36-3bf2abe2afb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef2d02c0-71f6-4fdb-b7f2-e5d959084483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a3c757-63d0-4aac-8744-a4cc081ea3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85110003-01df-4204-812c-555ffc95d3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--019b4148-c214-4505-a44b-ccb1a2715e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37cc5547-96cb-44eb-b6dc-9af4b042033b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960d2490-8452-4a82-964a-5e2b424e4479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e0d0d5e-f451-4b46-af06-3e3af6b85b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd1db55-7aa1-4af7-a209-0a9310451c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8575aa6-a71f-49e8-8abe-2981dc2c2491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab728a1f-c56c-4191-a7ce-f38542e5f341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f8209e-4118-46d7-b777-c9d13e44cdd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c298de6-58e0-4661-8ffe-8d188daf48fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c279af7-46aa-499e-9223-ac493c8d4231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d52385b-953a-44af-a913-5fa5851417d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d25720-6c90-4a33-b554-0e3f66bcfb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018ee4f1-2417-4598-a4cc-d80cc8bb0bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1840af33-4c10-4d8d-9d79-3c8ccac19d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4ad282-97f5-4d6d-91a5-e9bd4482908d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e4c6ea-c1dd-42bf-be22-d872775b2d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b3214c-76d0-485e-85f9-0ff4344e5c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882ec8cb-0620-4893-8a63-c67ad14ef6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89134d6f-8cc0-411f-84c8-bdbad955f6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433b3fa9-4792-4264-a5a2-0ec8b755c7e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0096f543-ca2d-4748-abf9-f80bd3f82017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abfeb2f-da5b-41a8-9ade-a95f25b35c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8346481-7f1a-45d2-9d79-1fd51db65424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769b632b-f5f0-43f0-925f-7219f211620b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bba409-cc09-40c1-a149-06079eb3aaea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71d0f16-b83a-4cb0-9e8b-49d7aec0d4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adc07c9-ce51-4273-b5f7-1a2351fb0795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93af7ff-0a6c-45c7-bafe-4a299c388131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8cef28-2118-49ac-abc4-58613628c184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba0c571-170f-4307-acd3-833aa1ef746e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fdbce4-ba34-49b6-a39d-29a88be9af79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a217de50-b777-4976-8794-2483b6d71b4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc924033-34d1-4ce0-b71b-5ca172051a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9687089e-1126-4b9c-9fba-8ceef74e168d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7940403d-7c18-47d8-a163-06d4ced1a67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f1ea9d-0aa8-43d8-bd5d-a178778f6707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab8e3b8-0aa3-4072-8bf0-7cfc8573ae41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d4df88-1ddc-4f0d-9979-870fccd9692f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21341e43-d3a7-415d-be1f-6fe77d00fb32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e226449-3ff5-493f-b39f-2b1cca2df06a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3993cc-9714-4802-a33e-063425cea39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b3c76a4-91d3-4c6f-b86b-b48d64f79552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3bbd5f3-bc1f-4e06-8492-4f54e435fb40", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7af29c0-8e09-45f1-8bd9-795de9deaba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a6b4a90-4ea2-4c18-92ba-26247e47e52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96faab8-1830-4de3-9ac2-57c7396cbd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ba64f7-f6cf-4224-aa07-e79be0086ba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da49a019-6ac1-45b2-ac9a-21ce07b73836", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c575c380-3083-4deb-ad96-52195f5d4347", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc011c38-f161-45c0-883e-a4bc4546ea19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f34855c-5d88-4b7d-8c4f-d78a4108d031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651b3449-a1e0-4075-92f8-8f9b409999ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32fc5bf4-3014-461b-b19e-4aee45fd0832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17208015-1b6a-4bc8-a138-d929e07db9de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a9f50f-2380-46d8-b2a7-13c858f627e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--894fe185-5f88-44b2-be2e-d72a1a75597c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427a3398-fd1c-4154-a4bb-369cddd67a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3624d1-d36b-4cd0-90e1-4f2670643daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da4f9d8-3243-4d8e-ae69-e20f1216a1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e240f48b-d7a2-4738-b7ca-879e586a3693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de36571-d8eb-4db3-88cf-3ea870fe8fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff28ccc-535d-43b1-a7ae-c8f71d09851f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576c0be7-4192-4997-bc5b-e934eda31ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb7707b-8741-4740-819e-53af98dcbd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa9e932-1db5-413a-b439-1516e64aea3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a92d8b1-8105-4821-a8f8-5daab1a859c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf1e9a8d-3cd4-4f1b-ade7-6387d1343629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--739a7277-27ed-4289-bddb-f3dd68a3582f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46851cd2-efb3-4b30-928f-7942de0b7d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a952114-a4fd-4cc1-991d-4ea8c7efb989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689ed8c3-475f-4932-aee5-64358d5c44ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0ebc2b-460e-4f7f-a923-79b78372aee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e0effa-d0c0-49fc-a158-68cbd242f443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00bd977b-1095-43f2-93f8-5d9a7f93720a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff805d95-fa2f-4c66-9fc1-3a5a896c79b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d1d8e2-9050-4215-9bb7-37ca0d7638ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616e29fe-c69b-4d71-9871-747563287c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264dfb47-d2a1-4a93-984b-ebb6a633d8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9f5a44-36c9-4a76-8988-7c2fa932d1a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4805816-040d-4578-85d0-f25ecb2145b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0df8f99-531e-4233-a03d-e635018f87de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3067ac-b688-444f-9615-c381c1f6c11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--274bcf2d-dcfc-44c7-8248-d7e410a5471b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a300e39-a20b-4123-be2d-b336364b59d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.0']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdf7fe2-66f3-4ca0-a366-8a95d5183c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c3693c-083b-4e60-822b-bd2293ec0e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cb7e85-b161-47be-95d6-707bdb8118d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59b3c19-9657-4ddf-ba93-747c99d21a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04c2bd94-5d08-4bae-965c-c7d9b983181b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff91468-7a66-442f-ad01-d640fed2bc1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560a0c19-8e01-41b6-99b5-39198defc675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb24577c-08f0-4336-a607-f0a46c652f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6fab39-1378-4db6-ad21-1ef7927efe4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9539ba6-f4da-4e2e-9bc4-a6ab687f5657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33738674-b2f0-4523-857b-31405ef9988c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfbdab8-d284-4b70-80b2-170040b48777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b1adb8-a8bd-4739-8fcf-4180e79f58fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b200bf-521d-4644-8bfb-cbda14a9b11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a33780c-1097-4bcf-9f1e-ca712d2d470f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad01c44-56ae-467a-861a-6c231de18cf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9770225-1ee3-4465-b57e-efbac57bdd55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a062d7ad-be86-4c5f-9a7b-ab6b3d5dcbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9204b7a-47a7-4927-9110-536da9a4847c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db95ded6-2108-49eb-ab00-97d84ecdc264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44ab0557-5def-4d5e-a614-02c9254b3a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913fa54b-4ce3-4609-8484-76c243587b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d0fe54c-b001-4bb6-8172-179f598a3640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c81c09-42fb-4ed8-8af0-b410287b2d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0031f82c-0a0f-4885-ae47-180006d13398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c271da1c-8337-40ae-b9c3-b9128a4a86e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d62a30-2532-487a-b54e-f35e5e19a35a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256c2398-3a31-4710-a2e6-3ca80d0b6b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9548ee6-3a4e-4fd3-a860-a17d55892698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24da0422-b9a6-4529-87dc-c4b5b1348105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3fad3a-9cf4-42bf-8144-e3d4c0147db2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc635389-f30f-4f86-88f8-bcd65fe73322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c409f5a5-3777-4591-bd3e-2003120afeb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb10525-263d-4825-af17-75238ef43149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9d5e98-2b8b-4fac-a223-02959e9f3291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6a28d2-7c91-4d69-8ca6-8cc7372f78ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4fca59-1d0d-4858-914d-597ecf5ad6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b1ca54-5d16-4cb2-9f00-f0a37150130a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ae0f088-69af-44b4-99b7-fdbe3f7b2fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f6a29e3-a0cb-44aa-bf96-985ae8f40fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--744cb4c5-ca1b-4db7-8cd6-b3ffe3c648fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e98bb2-d95a-49b0-9647-fc88ed31b663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d26d9c6-c044-49b4-9320-83f6860d34d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487e8de4-c563-4bfb-b527-4c0021bae378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03de3ef2-ba4a-457f-8fe6-12cd96ffd3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a110e3-e527-4e1a-adf2-ea52e72c67eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc4633a-21d7-43b6-be8a-84610fa49972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9f4b48-6468-4473-bfe6-ccd2507e954b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0c024b-a3bd-4399-a3e5-12681cdf46fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71877420-886f-4394-857a-9b0cfe3ecdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd391c8-9326-42f3-86e9-3b10bc6b5173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92548035-ea24-4ecb-8429-0e3ef79644d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67262f88-3e0b-4c37-ace3-04121fb3e585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e53cb9-098f-42fa-b098-6edc34e00e24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6df9c2d-315f-4cce-ac43-1e2426272a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ada7a10-64cc-4799-9507-ee6dc0ff80b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558dc221-ac0b-4bea-8d37-9197a8d067c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215ef840-1e72-43b0-98fe-42e5dc17951a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc1baea2-750f-46e5-84f9-d50955581860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8326a9c-5d15-4270-a7dc-dbf70f8609cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4734e65-6987-4bb0-bc69-dd3bb5fda0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e6b158-acb0-445a-a3f1-81602d34f392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0225f02e-13a2-4ddd-9de3-757b23920f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab91bf7-23e0-4712-97aa-ad6efc1ece55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c9e892-ec6d-478e-94e3-adf8849f56fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98aefff-0092-4e47-ae94-460a976b6335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a5df40-ece6-487a-b953-0541d3408a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd215b4-faac-46c9-8357-470662d5a142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd93bc5-0804-4440-911e-38c412938acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d87a887-703b-4274-af56-30e025590697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f595d9f7-aff2-4852-9c29-bbd43a2b7b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2a086d-2c43-4011-b724-25ac8dd01718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59632710-e4fd-4f5e-9cc6-099f8da0093d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac5688c-bb24-4aeb-b4a7-c936e8b2eeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--855eed75-5b72-4d2f-a56f-a806c70766ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebdfdd6-a77e-4cd2-9202-72bcf6084073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf41c1b-6aff-4f5c-82d0-dc55ab1bb77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c9890d-0a83-4c62-8946-ee2753ae6ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952a1828-7058-438e-897b-5501fefbc38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9427005d-a0f0-433d-8e00-04f4b63b3322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f9b719-d236-469a-9404-6fff4bee3002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b38b37-5810-41eb-9f32-6c175ec370e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d221999-520e-4572-8954-8efac3380422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e11aa62-0696-4a96-a1e8-5e9e4835619f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dc8873-2b6c-44e2-802b-835336e8929b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25897269-c253-416f-8aee-4bdd3e9d5519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c3cc23-90ed-463b-9011-61d6665770c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c281c007-697e-4a91-a559-e85fada17200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a40942e-18b4-4396-8c41-6edfff9db5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a65072-5a02-45fa-9fde-22c5b0051ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86596bb1-1499-486c-b053-398b6895a6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e3cbf4-b4db-4237-b772-475033d867a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa4e4d5-7268-450b-8030-6f73bb8c4410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dac0b38-4a82-4aea-8559-633518cb4f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e01b9b9-0bed-4912-9c7a-4b59d3dd1c9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd46d2f-972d-4005-93b0-56e02114471f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d18595-1a6f-42e1-a9e3-9fcdf3c44825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e691da88-e308-49ed-98be-08f79be24b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf799aa4-9f66-4ccc-9d61-65df9199a8b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd800370-afd6-4928-aac6-d1b6e0a07a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0d89dd-1353-4ca7-b760-3c101d64f1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a306e78-1ff3-4c1c-a364-d67c3bf490d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116948d1-86a7-44d5-abc9-199ff7a65aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4220c5-a2c8-4d54-9e12-9bcb6e2bb842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46a2c36-82fc-463d-9ea3-a85bbfbade96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a548da-68f2-4322-90ec-6726e98aa9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7386b0-ee34-41ea-b5f3-40ed7c3f72bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a36c7637-c896-449d-8c53-170b6e1befb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13019119-2dbe-4714-b8ff-d7d6d5627d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea29ca0-0624-4975-9c65-88fbee88173e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f2fce7-76db-482d-8d7c-dbbeff922c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--577ac5dd-2eef-495d-a4f8-f7e569082534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92d8cc0-c3cd-4f9e-9c83-2458f4e5fafc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597681c3-2411-4bbd-8832-e36e30834e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576dda17-211e-47c8-9013-7d6a7c4af500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d611249d-723c-461d-a8f5-0e2618712a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a83a6af-d655-488f-b3a1-ef9da6e9c2e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2765801e-241c-4e24-beb4-fc83de116b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6510daf6-e4c9-40bf-bfe6-dcbff67b4044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9b9bdb-50d1-43d9-a8ab-62463a690df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71c5bc0-5bf3-4f20-81b8-3936eefadc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4810e8-2a8f-488e-9752-4488058a3498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d5ee79-d180-4b3d-98dd-2815872fe3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84ff500-24a0-4e87-b878-f733bea60800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2963d808-1dd4-4f6a-a8cc-19032b83641b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.48.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9bd647-520d-4f68-b7ff-d921d7a6c0b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.45.50.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00c1441-4fc5-42d9-859a-f38e179069d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.227.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d459ab-4f34-4d18-9649-422b0632982e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.50.231.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de571318-4e49-4ac3-ac2a-bbbc5a2e7571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.147.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f900e619-2fee-420b-b813-3a11fc3988fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.121.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9f0f82-f248-4a50-a0ee-811cae987fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4312370f-4c65-4657-8821-859b1c1d580e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d2dc02-4a23-40a8-b940-5f9a8c13ad9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd568fbc-c4f5-40c5-932e-cb1d0dc7cf7b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.132.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20186e56-0b94-4a51-a986-91c0c1f7b350", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.66.142.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a4132c-81a4-420f-b15d-12a50b7b490f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.102.239.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55861fc5-3233-42c4-82dd-a8627ecde523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.56.85.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41c4099-4879-4543-a31b-f50fc43d1abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.156.234.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a855bd4-580f-4940-97ad-c592af2de1c0", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.156.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989a0437-1d4a-4929-a81d-891f4f22901a", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.204.165.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55738dd8-9a68-420c-9029-a9c42c60c6a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9523f19-f63d-45dd-b810-ea9b78a458f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b785e33c-3c58-4e74-be2f-0fba2be41435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d20819-b93b-44be-a44d-b9407f4a85df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b560551b-d5ba-4202-aff2-30bc9e1e5d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088c0653-f5b1-4de8-872c-859056acbd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893cd1a1-6636-4bf0-9236-bb846627c770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.36.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71bfed7-12cd-45ef-b5c5-011ebd2e0ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837f3edc-f111-4c38-a668-e3598d970308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b21aa0a-8e95-4756-95ee-00153d7e48d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe612200-bb3f-4f2c-aa67-a1ea93edf20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08aa523f-47ed-4eba-8064-5dc98ba05a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bf7add-37ef-4732-96f9-157fa731534e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7326e629-b8c7-4bf4-b6b9-e208fc03f3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6a26e0-59c3-4a8f-b625-4741679aa9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcdc56c-543e-4a4a-ae25-ed34f8a05a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd569868-987b-4031-833e-a4fa4c6f2ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c267749c-c916-4223-ab73-b9ba1bb9f90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1cf16e1-8d63-42ac-8032-12ab30da1703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ce5a47-b501-4316-a8a6-421abae48b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae50bb87-95b9-44d0-a8bd-72f8f35d126d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171eb50d-710a-458c-aa49-4458adac53fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197d253e-7df7-4178-9d06-867a92a73599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c953a04b-7cf7-4674-b23a-00926003166a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301802dc-6ae2-49ae-b099-d2975cc089cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21160c95-14eb-4de4-9127-a52534051714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d34709-35f4-4dad-9088-9ce7f1ccd911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1978c2e2-cd80-404c-8049-947b1d2c1d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bef9c0-6f7c-4163-8f81-2c7cf1756127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e094318e-cda6-4086-91c4-3831a8ec7081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73c1b140-2129-4b4c-bf3f-6fa55740ccf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35105e4e-c46c-4ae4-aacf-549982b22c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc352fb-3bc5-4258-8f4b-144f1a6371b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0ae00e6-7a29-4eee-9ede-082f56e9a4d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e8a22ef-14a7-4f33-9b00-2fc946d72b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb675127-58f2-47e0-a486-e5098668e2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066ae2b3-bdd4-4160-8275-30e017e938bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01427b9-78a1-4f12-a222-805a979892f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d036d176-977e-488b-8a98-6410762b73fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.44.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f47f010-b8b2-4788-bdaf-4e4d91e98744", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.154.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d065a2-d3fa-4b87-9454-ca4cfbb0af13", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.135.174.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7082d02b-df1b-43d1-989a-2de0a4affe46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.158.1.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae733d4-b4d9-49a6-85e8-795e747caf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.19.28.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f66933-7a31-423d-af6e-293a2c3097d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.242.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed29dd83-d6a0-461b-bacb-4a5fa9e4cc50", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.63.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538352cf-796f-4f23-a76d-e7e8befccc29", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.69.244.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a14764-9e87-4d40-829f-27ccebcdf176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.250.55.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137755b1-b107-4e43-a1fc-97da31ecb763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5706a9d2-2305-4709-9c71-40784c3d4ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0079e77e-d9ce-4653-a97e-0ab7956a530c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c790f4-afa5-4454-88aa-e0baafcd244b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a84f9a-0d32-49ab-8696-97ea4c5a4231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d96b9a-86a6-4091-903e-8b7b5c148ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cdda1f-ee3f-4d81-b5f8-3005d967e86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.132.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd727618-affe-471b-9d61-e5577d442bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c1faf0-f9f6-47b3-a59d-170fbc600079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099a4dda-9635-4042-baac-bc458f902d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.134.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0674ec99-47ab-4a92-917b-e15877bf62bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ba6b20-dab7-4b8e-a061-10a9ccf7f000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8fc991e-ca82-488e-81bd-81e1b2f1ee88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c00aa6-c656-4d79-bf76-26a26e7924f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd93471-f5ad-4225-a39d-0cf81368115e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342d1cae-6e7d-4807-a2e0-5d35666613d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d8f908-7776-4615-8d8a-64d2e82c639e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74e77c8d-b868-447e-a0f4-b698f256b421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ae615e-6cad-4f34-8827-c7a7b1db06fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df82ad61-05dd-4bae-8c1c-ad65c00c3895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8f30c4-38b4-43e8-843b-e8527a563306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af93d9ef-e111-4225-a0e0-dd2286ddf90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91bd1d79-e911-477a-a809-898a200c5743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60035aa-eeed-4ab7-b422-8a55d70bbb62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.142.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9dd488-5061-402c-bead-1b38631b0322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3c0d95-4dce-4983-b942-cca4c8700a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70319f93-9a34-4085-8392-14921b7bded9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.146.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2a3eb7-5c71-4f0d-a437-63ec93d45271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.147.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da160b50-9c35-4e05-9e42-c498f668bdf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5f64c28-9478-4531-aa0a-207d23169f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130b6c64-6890-4815-aac8-c966e9fa417c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70822ef0-0d6c-4c71-86af-16f1b4917fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1501b54-cb74-4f1c-b3fe-ead5e2ab66a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05c5310d-a911-4329-a3e1-38262e38e6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218cc31d-a6be-4d6c-85f9-cde53f62cb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff25a47-58f3-4cd3-b782-42c01124b2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8da1833-f972-4abc-bc0e-1af5f9785b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ca2eaa-cd4f-4adc-af3c-a8f9db396336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a98775f-dbad-48cf-9bf5-63307c2ff31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b28dda-8ca1-4573-b562-731049b7d7c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9007a39-7581-4cd0-81f9-7c779e2e2ec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229a191d-c0f4-4994-87f8-a214b8f55863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34eeafb-421e-4b70-b032-7e1e1e8ef722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e988566a-8b1f-4b91-b84e-581945798f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b265e6-e34b-4d38-b9be-5a585665ee35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fec1dc-b50c-450e-b4a2-6266ae6a6ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73058ffc-f42f-4ee5-8112-65097b7a2e6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.158.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3059d964-7e1d-4706-9a7b-10b3b5670b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6436c14d-1d55-45bf-bc16-4613c3b9c883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791d4b1f-6121-4be0-89a3-f625939a6d25", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.163.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29db90fa-541f-4c85-9444-c437029bf705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.169.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166b45d4-c6c2-465e-9c56-1dd66c0b74df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.170.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3a068d-62a7-4dd0-b92c-ca3ecae58994", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf3ef5c-da9b-4ebd-b6c6-05bd8c522599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.171.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418db91e-3e87-44de-80d1-abf1ab5ffd8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.173.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7071be99-dabf-4477-b9fd-faa65e0129d1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c02f11-cf70-48db-9b11-0892396f6062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.174.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e507365-15f2-4cc7-b353-4e9068ccce8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b23f22-b6c0-4c3e-b66c-8900bc625320", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2d9b6a-3a1b-4543-b888-2310a1599055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004a6d75-e25c-47bb-9542-2e2d06726e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f2e6576-aac6-44f2-8f95-610ae0393d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad99692-02fd-48d5-80a4-965ee0973eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f014b4-5cc7-4695-a52c-11fe9a63241c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb1a49b-66d3-4b48-af33-7d9597fc552c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ea1390-d523-4f6b-b1a3-63d0193c1335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b88169e-4797-4ff7-8a92-3f73a3e9dbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c0c2e5-0fca-4001-9118-f6ff15465c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.198.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5242de30-3021-4576-8d8e-37c89daa0a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.199.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--681de24d-34f9-4b98-ac5f-fbb6266e3ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270c9cea-a853-4f00-8c3f-39d249964738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c552d0d7-4fab-41f8-9802-a81b500aa6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.200.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f984ec71-12cf-40f3-bf28-5f03a7362b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d62247-5182-442a-872b-9d75ec0d921e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7982d043-6127-4e3c-b704-375c793a5426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.201.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beaa3248-9317-4ed3-933a-73677a46e764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb045746-9b81-4675-b870-a81c25ebc60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.202.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d75f3a0-6454-4250-8fd7-80b22e17413d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.203.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7263552e-6cc7-41a0-882f-dd04459f0bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b016e9b-5a20-41d6-972a-0b3366f09746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141625a9-ce17-449f-ab34-6df123f84594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357ac26b-10c6-4a0a-bc65-3e67aaa4c8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d82e96-40a5-49a2-8e2f-36e9d2783a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e898eeba-fa2e-4c4f-96ad-0db7f8a3e771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52eff7e0-a80e-4302-aff9-a4591d54c126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9e5562-3946-4971-8d43-6900d55054de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70a66dc-e0b1-468b-9fef-9b51aba04f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43508a97-4069-47d2-9f97-9b61867d12c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143d9448-6a4a-4f65-a4b5-b467f0f93e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2145f83-7672-4fa3-a9d6-b4127a2cf15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8005c22-3f78-4394-b803-261334374de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8470e8e-c22c-43a5-b191-ec5fe965d4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ee9d18-f820-42eb-86b0-08363d15dba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbccb12-397c-4327-88d8-a50e286cd5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3309e128-b764-4adb-837b-7e69e55ca030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd80ef5-b814-4a80-b74e-8a2a27bc3da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78273df9-8040-4dc1-8404-d21ac75922e9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.212.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c2b3d3-37c0-4dd0-b757-2d670d2f85ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d097c589-e879-407a-b1be-6d24027e1456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bdfb59-8dca-4374-a692-f00f6cfebb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552f1d86-d21b-453f-aed5-4105d02c2e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.215.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83135b9e-09bb-4798-b388-fb44c855ea9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.217.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--772da283-73f1-43fa-a5f9-09e1d93117f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.218.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1c79e7-1fb0-4230-b4a3-7b8ce42bf7a7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.219.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca6dae2-9775-4b64-bbcf-7f5e5b090e13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30087dba-ff2d-4adc-9629-e6200e36b5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34505c0d-0301-46d7-a025-cd947959b85b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745e7448-2b09-417c-b868-5bfc196a4bda", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e802efbc-6d5b-48e3-92c6-8de8965ffdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.226.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8122182-f091-4fbf-a6a6-7843e845427d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.227.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d1fad1-61ca-40e2-9122-092393a9208c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b4307a-9bc9-47db-9752-f4857cee1443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66104fd4-bd0c-4ddc-a8d6-491adda3fc46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe351f5-f4ea-47f5-9086-c45124ae59eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.234.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c53e9fb-95f6-4f78-92d7-4d2588f88cde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0bc240-1af8-4442-a169-022b0aa96772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0582e62-a226-4a17-8ff4-137f8baee005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bb8c29-0f0e-4862-a6e2-0f2e78ebe04c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbdec8d-15cf-4e39-b91c-601017b1fe7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c4f396-e665-4586-9a3f-0f2a3196b196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08890881-d191-4d59-ba0d-fa8bf1b8527c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e0a1bc-4022-40bb-bbde-ac2bbd26797d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d55c3e-9725-461e-ac75-ae09f5d88a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8190932-de43-46b9-abbe-b814a30a39df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.236.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8b7caa-b458-46b5-8abe-26d66a5198c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644d74fa-1ab4-43d0-aa48-9bec86f26e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1542da-e9f9-4c78-a7a1-92edd59e89f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f825f586-9e6f-4fd5-a4d6-07c0c7501c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8962b0e3-cf85-4486-9266-b9e1de1db557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7072e7-6d3a-457e-a126-41f953223a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7afc2e7-af28-4cab-9fee-0695655c82dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.252.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c73c1526-5ee5-470c-9396-8ea2d9a7797f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.42.170.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a392ea0d-097d-4620-9e0f-e46c70ffba79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.191.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbf161f-40b3-4dd3-b678-9b88964009ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.22.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cf5919b-e9e7-4044-92be-8fa993909165", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.251.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae4866e-6b81-4540-b5a2-9d0f366d4bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ff7e2d-a80b-442e-bc91-c0e32b0e6e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.127.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffca9c78-dcd9-4e21-863e-ccb1aba68cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.38.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72164b2-e753-4391-95c9-0754c6eb5095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.37.227.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f057c4e7-045b-4e58-9012-36d5766ff51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.67.105.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c18954-1f8b-474a-9c31-68e30967d0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.80.240.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68dafd91-08af-4bd1-96e4-ca495a43055e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.80.240.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad848cd-2425-468f-b06c-c2a0fb4b7235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.0.30.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0428ff90-3885-4267-9de8-dba78ecff061", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.115.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90229a06-aaf4-424c-bdc2-7e5c77fa340e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.119.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff21837-278f-4f4e-a04e-8a318e3459eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.146.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdad6528-00ff-4cf1-9ba6-2813f79b3568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934d530c-348d-4d97-8ca7-a6178167cf6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.16.180.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9163c00-c71c-4850-9e21-6191b946c765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877826e5-c502-405e-aa15-df22cfb59222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09143ce-1537-4d9b-b491-4c308d51935a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e03e8e4-9bcb-4429-9b84-443b7dd3bbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1745c4f8-2b4c-48d3-8ac1-eb721700c18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db74dea8-6b55-4872-9448-5ea5347c960d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1d5903-a16c-4d6f-8727-a0065eb532fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f32c24d-0a63-4a0b-8b04-37aca1625769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c29dec8-fdda-43dc-8cd3-f4fc9f607c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c1003e-b925-426c-87be-6b38a7b1fbe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.57.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e956c9-0a6b-421b-9b6b-342259d1fde3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.198.162.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d876de-f253-4bbc-a838-26a941709293", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.241.57.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31b7569-664e-4056-9f36-798237ddf057", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.72.196.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388aef47-dfec-4434-ac01-4b377ec1cb82", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.12.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9608f4-b197-42a5-affd-a4a0f774ee89", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.13.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e79ea0a-d2ed-4938-a6ee-7e2788eebefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39240690-b956-4760-ab03-32b69af3b615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893fa333-bf2e-49de-951a-4006af448e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee078af-a6cd-4fa5-88e9-7e0409cb1eba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d37ffe7-63ec-43ce-9666-8443fe7109e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--979d0606-da5b-42b3-921f-dbc340bc182f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8801fd72-663a-4c57-8e6a-0f6d048ceb22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca0d30e-3740-4d0a-8be3-6e3194467bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8527406c-2b6e-44c5-9159-e9bf76616874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a00c178-d2d7-495c-b56b-a5e18311f6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc294d5f-3b7a-42a5-8ec1-194cab51f29a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64ecbca-a4c5-467b-a586-c39a3e7f27de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0042a6ff-66cf-4270-b393-0a4605740498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dd3317-2bfe-4a30-929c-85e2dbfb5cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfa2d0e-a50c-43d2-8f61-41e8b562e356", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23242dc5-42ae-4a23-9ee6-062471b14844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357ea70f-115e-4bb6-b43c-a8c700bb88cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9dd1984-c319-46bc-8224-c261fa028792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdbe27bd-4d77-4085-9cc4-f066ce53cf77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14376b84-4281-473a-b4dd-ac1977ba4c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4dab33-c49b-4bbb-af1b-ef368b59540a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de544e37-8416-447d-a81e-f8330e629266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adf869f-24eb-43be-887b-18350cff55be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b0a5e5-44fe-458c-8e98-a7c30e4a777d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a7fc29-9d60-40ca-94f5-2d04042ba2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29088a8-3023-4bef-83a7-3e79e5a7e924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.83.197.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2922d97-db7b-447d-9210-5dbbca21457a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.103.71.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b17e6d-6069-45ea-9a71-e4cc21c9c839", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.244.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3544b46-85a4-4f81-b261-6be80aa7f9d0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.4.245.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5faf49-89a6-4123-a1f0-972fe0e0b41b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.55.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1859683-fd1c-400b-9597-78564e829fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.216.26.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb64d5b5-7f63-4cee-b210-4a7882a426d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.216.47.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--866bbe3a-4b06-4a8e-9303-2ccc08443edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.227.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9bbb1f-37e6-42b9-94fc-3e003b0ccff3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.238.236.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed590c69-0a4a-49b1-af05-fdf7a0054a53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.245.205.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ef095c-dbc8-4896-985f-78062e60db14", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.38.73.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aa98fca-9f27-4001-8fc7-4c98f177ddfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.0.0.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2c561c-5709-42a3-a839-b9b5ae3222d7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dae66d6-9493-426e-bde1-f70bcde629d6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.40.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b1383a-351b-45e1-a672-bd29b3d4289c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.15.67.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad01b25-9c73-4ae6-bed1-030b356c78b4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.156.37.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f312871-b50a-4df5-94ce-c9f8183dc8fd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.254.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d6ec973-6a87-4a1d-8c3b-c753685160bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.11.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce4ddb32-8ae0-4fe1-a45b-bc753862521a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.161.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1801150-72cf-41b9-9d12-a77a199a3675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.190.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72abe7cc-90ba-42a6-8334-38c7890d22c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.2.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b30917-c91f-4f9f-ac64-dc29b3bf8c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.208.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef07203-1c45-49b1-9218-6aa45ab48c1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.51.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0807d2f7-58cf-4e09-8120-a0c68981989c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.104.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b783d9-8064-40b9-9e1a-aaa3c530f04a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.123.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2baac6-e0f6-43b7-b5ed-c41ae706e448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.128.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1570a86b-9489-46df-914e-934a2f08c180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.130.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bda958d-cf5c-4966-a989-c0c703b3b7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.144.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c27d68-26b6-4ac9-a710-b97cd8106f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.247.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5535baad-77f9-48d6-828b-ee5281578046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.34.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ae2995-d6bb-46a4-81a0-050087e7369d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.8.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d04666-64b6-4c20-bdb5-8de09f5769f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.88.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd260c82-6b2b-46ce-9dce-bdb999ad95d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.92.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961391f4-4631-4230-9846-6d968d6a2dd8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9302b06d-b306-46aa-b56c-648262b19532", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8642d7c8-3c73-408e-836f-bb4782a82918", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7b9f81-1f0f-4694-9f37-6d73f0917ed7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0665bd3b-1d59-4a8e-92d6-fccde37cc0aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0c2708-e926-4c7d-9cb6-15ffa53c3590", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e583b4-6e91-4d52-ab4c-77cfcb0544c0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af182ef-b501-4181-a72e-817f67d0d6ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d5f3f9-8399-47dc-9cce-37792b4a13b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e0582a-2445-4010-bf27-9e9a758fcc7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de500e9a-682d-466c-b20b-b6f1515b07a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a34aea4-d9a3-4e69-91e9-4b59fe356fd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68b4603-1325-47e7-8041-935b308cde4d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82ca354-4052-48b8-95d0-c7f82cb57416", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08b535ab-71d7-4935-8e7d-2381d9ee6125", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.55.39.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d85ab1a-935d-495b-af92-700b78a0884c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.101.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd8b95b-fa00-4580-ba87-4af7e19806e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.66.49.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d46177-d3ae-47f9-8266-2b159bef111a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.120.255.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50e1eba-9408-43ac-81ab-3b41479017c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.173.3.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97c6e46-8470-4fb6-8896-2726d08c247e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.141.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee34afe-ef01-4809-ad7d-3e2f6ab493ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc1ec41-8a4a-4816-822e-2a6a34397baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.69.227.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425ba2b3-a13c-4fc5-b3ef-a58df2bfe168", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.21.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8f9304-f45a-421f-8dc6-c7ee124e322c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.195.52.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2222517-b5ed-4a3f-8854-a96f8f5363f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.106.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ec865e-c995-43f4-bfc9-408bb14010f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.188.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74081409-51c2-44c1-9b52-aa4d43aa436f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.58.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18517b68-f95f-433d-b57b-74c538b67c49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.70.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73267cb2-3a8a-44e4-aa0c-572459b7f3da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.77.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8407e56-4e3f-49b8-a266-53e70a975044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.9.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15445ec9-086a-49c4-89b1-344a2025fc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.0.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1790da8-c94b-444d-8274-dc3bc08f18be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.0.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80817c01-8723-4f71-8dae-ee1c691274ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.111.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb304b8-11bb-44fb-8b19-5ad6ffa9dad2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.132.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e84a71-7fe1-4143-bee4-1384642bfc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.134.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9adb793-56c6-4fa0-9b38-b11ff56eafee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.159.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ae6ae1-dd91-4bd6-866c-bc8ae7696655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.199.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0515686-dfcb-4daf-a32b-ba05b9351d06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.214.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac1d750-be31-49a4-ac56-4f9c870c8192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.217.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c8e4c4-b21b-4293-b792-fe35adff6079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.232.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e9378a-d378-4d99-b91a-0aae056d727c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.59.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0599941b-acc7-4a0a-a538-4202715dfb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.98.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07adee54-db96-4e43-a097-aa55f4ed8d10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.136.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77da08b7-f54a-410f-8edf-aafee44d4a99", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.148.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b01b19c8-8be5-45d3-b83d-f7263dbd0f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.16.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ddcf81-aaeb-4ade-9aaa-5efb8019521c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.193.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f98406-1620-4dd3-bcd5-dd40365fe97d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.217.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a078d48c-f5be-43ae-8b03-ba7aa0b6c28c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.242.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b8e715-3de7-4416-b1b6-a2d8071d0189", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.245.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f59b6860-f59e-4df1-b359-779e35c4182c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.246.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb4d4d4f-0e19-4729-98b5-af586036684a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.65.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9c014b-3de8-48aa-8b12-0538faf588d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.68.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1fce02-f527-4d2c-b7ff-bdf8e3db6891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.1.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31b4190-afe1-4a62-9cb4-9c97a99c0f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.26.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23944d10-6965-4d6f-b6f8-40d8306f85ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.27.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a1e2bf-d7c5-4dd7-8c1b-ad86fcba6af4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.84.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49a2455-2471-4c97-b941-9f9b035ec9c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b3da1e-6d1e-4e92-9a6c-9475713d7a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.59.212.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38bfd24-608b-41f5-8676-bbe1b9e10716", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061f73e5-c5b6-4f13-b486-bc5066482d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed88399-4810-49ef-921a-8651ff9f1f9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090f9b12-cb7d-4406-8977-8f827d746395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5205863a-b25a-4526-b4b8-288e79e89a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.10.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe91ad74-a7df-455f-b46b-d0b125fc1b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.101.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e738a425-b065-4f2b-bafa-6353e453f81a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.103.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc8bddd-fa8d-4b16-bbef-091073ee8288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.11.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bba814-3ca8-4944-89d6-cb0145e0dd63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.145.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f65f259-e28d-48ed-baa2-e55e2510abaf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.180.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0a262b-76ed-4c31-90d4-f92e8a5f3c3f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.184.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291f52a0-3113-487d-a00a-4c156da25e49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.2.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e50bc25a-9b0b-4bd3-acc3-7d01c6c4bf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.230.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce53d88-12f5-41f2-8116-af3bea82b31f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.232.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a106e55-51d1-43b5-8ee5-709c0d1d4141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.49.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee54374-72d6-4eab-8742-f93163bf5cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.60.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f0fe70-bec8-4f89-a9a7-9feeb8213adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.7.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd2f17c-e811-4413-bcab-891588ebd735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.87.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f266947-99ea-4610-91ad-ec8ab6056671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.97.69.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f10655-7ad1-442d-9a91-2c6ee84388d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.14.66.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa68e803-ffb1-45fd-b985-a11a953b3ccb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.117.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de21825-1db4-4c34-a055-c5ab85dc91a0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.134.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b4ba4b-1ccf-4fa2-b871-3edb2dd650e6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.197.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a438a886-ee66-41cd-b936-3731983aca24", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.35.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56181f80-29f2-40a6-b703-62204e767c60", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.44.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90bc747-9f9d-4257-8ba5-8d1df60c6320", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.59.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212f55f1-463d-4a0b-93d3-fe9f5ae7e86e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.61.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07aa61e7-fc72-4cb6-b1e5-79c8ec3b0fc3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.61.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b29f55d4-6da2-4b4e-bc0f-0b689138e994", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.73.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf790b6-8be5-457a-9267-232c31ffecf8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.144.78.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b795d7f2-8869-46c4-bf30-144524b703af", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.126.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbec53b3-8ddb-4746-9f4c-7b0acb2158d8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.24.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ad630a-21c0-4de8-8db3-338a927b37f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.214.5.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc45f27c-23a3-4c9d-a4fd-7c95fe8a6e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea42ae7-eed2-4719-87c4-46b42f9ac2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e986978a-2150-4d7b-aae0-ef96ec60d4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2558d359-9a62-48bb-bef3-493c376cf741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b922893c-395e-40bd-a57c-ac463b8c86a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6335451d-45c6-40db-b590-3dc5883c5f8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95e28e3b-69aa-469d-9ea9-75788593217f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c73157-f570-44ac-a1f0-37698b9db74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd101d3e-1df3-424a-beae-698e406d4c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b6f2c4-8d32-49d4-9f43-87ff198223a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd1a1bd-8806-4ac2-9469-3ad6a8fcdee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e6f6c67-6ddb-4912-aac2-806451ef27ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ac6e77-cc49-4a43-8eaa-c39c169f0c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f2030b-5283-41c4-8d2f-6bab6692f18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e832b3db-36f8-4990-aaff-3883885a8562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca4ca9c-0b6e-41b1-996a-19604ecd9b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11227df-158a-4239-b742-c9bc1ba5d250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859fc799-eac0-4601-8a17-656467c54702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b77b31f-9f75-4639-934f-196a31b55024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a6d7e8-001c-4a03-8045-edbbf63e0492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716d4abd-0aaa-45e4-b1f7-8aebe3b41eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9feb40e-82bc-438f-af65-cee5495bbb7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb2fc915-d45c-4ab0-827b-44ae9c64e313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1b3b27-d5e6-4fc9-a2e4-afb753ff24c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d26f765-7209-4f48-b4f2-ef52e0cb3314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5356068-4eb5-49d6-8ce4-4e3fea5009c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2482ae5-e1d0-4406-98d3-3ae15a06fd40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2319a1b3-2c4f-4431-b3f8-7c8db0e6cab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c231d174-7c46-4834-bac3-b7862206b99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7013af0e-cb68-4482-9ee5-6aac14b91d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51ad54e-183d-4ae2-9ac8-a9c5f366df4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298b337a-024c-4862-a8e1-4de44af444eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79599d5-d47c-4bc9-8586-fc5a1205b4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ff4ca3-0cb6-4e61-a0b3-11ccc3d9fc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507f12ae-6f88-4e6b-8564-ce12054330c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99cf8b61-6db4-4e87-8957-70a2ea390847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1b1332a-3209-447c-8064-f273b60de17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea86704-efa5-45a0-9551-2d2927280a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c801c7-bb05-407b-8cac-5448f66a7901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4e9d8a-f6b8-4c98-bac1-9964fe665ec9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0536346f-8b6c-4ab8-ba71-0dda788fe1e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efb0f346-2a0f-4379-9b36-dc072a9c922c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1fcd781-3ff3-4e20-9b22-1ec8cec726fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e20c65-f13a-49b6-bdde-8582f288a721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19fbe216-70c7-4aea-ac18-36b62b49f570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6490ad19-6b13-46a6-9186-379ed0c504ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99140def-4f0b-49eb-86e4-a4aee8d5cc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696efa5b-d462-42ba-8a5e-9ea76454c4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aaad87b-cb56-4380-93fc-b01d1fef7b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de82b1b-0f5f-4ae9-8b0d-a42797325859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1469fa18-2c3b-4169-86af-97054c4318b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecb8e53-0fcb-451e-bcf6-4d540b919432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5546a2-5c1b-441a-9fee-9cb4ead25dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dec446-c848-4912-936d-c7b1469241e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d4b5fcd-a944-487e-a736-2296b53d7382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e71eeb8d-8954-4260-bbdb-31098d94d663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37882545-4df0-4e48-8fff-a42f14215a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f95633f-454b-4ed0-a830-59c700ab15d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6089da9d-a629-405e-a190-78f68a50bf76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69fd33b9-fc4c-4b47-81af-bfc739324b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0156dbcc-df46-44bc-9a6c-0322502dcab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e88aa4e-aafe-492e-a37f-05f7a26f0ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9308aa9-df47-41b7-838b-f2521112a4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bb629c-293e-4a02-bec2-8231f1f96bb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfefab70-eaad-4cb3-b8a8-b4ea155be838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b78b72-7b7e-40bb-a600-db899413de1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fd6618-36ce-436c-ac85-fef2f2cabaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de64213-d8d3-4eda-b789-e52268dbb132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d9fedb-a85f-4938-bb44-e1b7a9ceb45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79933a6-6e5f-420f-85ee-097096e5b33f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d410b8b6-80d7-45ae-bc49-bed15bb71de6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbee8be-7db0-4139-a8db-ba4680dcb815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c2c200d-080c-4253-bcda-6cea25584735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f266fbe-12d0-46b0-adef-74be64bc0c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f9d2a0-d11a-4b57-9ab8-68b77b840a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5915a58f-8f4c-482d-98ae-05a74bd92673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9f708e-5d7a-441b-9dd4-311db090ffa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34a248e8-5cac-4f5e-b1b2-e8afcc4182cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cc011b-ecac-4a61-b5b2-fdb048af6f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a89d7f-1dff-470d-8db7-b054baa7b869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc71a3ce-d567-4440-ae1d-fcab847cb5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43408e8c-120e-4c58-8bfe-533dfea295fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0fb7bd-47e8-4eb9-9499-fff84e5bd6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c015772e-1437-4232-9e7d-3cb3b955b420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5801733-860d-45f4-a9bf-be56049557ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851f1dbc-4f6f-4a20-b09c-cea5244336af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c42588-a4b2-4527-b071-e62f58550e27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916263d2-624f-4617-86a9-63bd35d4d589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c03f4424-6530-4646-a00c-121f4b655d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f7c144-a9de-4a93-a8a2-d4b533e3e31e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93429f14-fc5b-468e-9cb5-ee35c15f171c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ddd162-778e-4ee2-8830-a48804264c71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3993af-2b76-43fd-a723-7fa13ec3e3a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08bddb47-eca0-4528-918c-3dbb0c378b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063555e6-6a81-4e65-b631-ee273b8c19ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7eb0037-bc53-4f0d-bbb7-82bd5adb9019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de49f54-b984-408d-a108-c9ce8c3192c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95237565-f0dc-414d-8d9b-0ce9cdabd0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf304bb-73ff-4357-9981-0be44d6b9485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a01b3d-c39e-421c-af5d-ddd0d2054b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4023739-8cdc-46eb-ace5-3483230ede90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e6d216f-9a58-4748-8e18-db429e2f642e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a67344f-3644-47fb-885c-4238a0474220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b709850-8d8f-483f-806d-800317969c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a47fa40-a1a1-4bbc-8a5b-81b29dcc3b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91236c5-87cc-48f9-8bee-fba63c23cfff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd347cf-8ac2-4776-b783-585dd366ff25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da3d1fd-6d8a-4584-a6d9-58c7a556a120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ca702b-c595-43f9-bc5a-375a09330e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2604cd12-4b1d-4945-8157-1ef6c35470b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5793e6c-85b3-4251-b710-80db7d951214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b67a7b-a0e3-4f51-ae1e-f0b0d434e724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d58492b-9bae-4c5b-affc-de17a1132dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01509345-8fd1-4cdd-aab2-7abf34b3ff13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa046610-9e8e-4ed7-992a-95e6699548a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dde4b0f-f7d6-4403-bfd7-eab9263e1972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11575c4a-68af-463a-8c04-7478741acee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c35afc9b-0d31-46a6-9b85-e00676e16f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f968ad-1b32-4256-9dec-a9ed803ecd35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4f24c7-8236-4658-ab76-607c5e490c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf98027a-831c-406b-8dba-a310225e0347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9fb71c-d36c-489d-8713-f15ae31b7791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f726e602-476b-4b12-8174-00b6c6c0b918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c249d00-1a89-4ec4-8edd-61c2676f2058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5516f7c-f26f-4241-9c8c-53fd98264f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12aa27fe-7c9e-4522-ba0b-8795dd7e3917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ec5e24-76a7-4e76-8872-4f4401b88e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a9e692-1b02-4fd3-9a2c-6028f8c8a8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--759fc563-523b-4d64-852c-b4c2452bbfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84ea4ee-a842-4b11-8b79-dc8872b6ab9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7f1191-21ea-40c7-9778-c1415034973a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f6f42a-fccb-40a4-b932-21d62bb79d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--955122a4-ec0f-4839-a52d-2a030020de79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2558ce-4769-4a83-b767-9cebe524b2ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b51db53-9b3c-432a-820e-20443fa5a39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ac94e6-485a-4900-a601-9ad197774d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3a0ee6-51a8-476c-b0b2-80671b6e8305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdfe9eb-a7f1-41a9-9b09-1c9a261ff420", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9e514f-4824-4a34-8955-3f321609777f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4804867c-ab84-44b9-9586-fa1447c4192f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f818558-c70c-4c0a-8667-50125a6f2b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec14f6c-ce54-4fa1-9765-f46747eecd59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bed087-768e-4a1a-99d4-bc2eeb7773e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3eac77-6360-4528-ad9a-e8eb5125aad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0374e98-b17b-4539-9bf8-0c2ab6e9b15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825240f8-66e8-4f01-a090-b0289756eade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15be54d6-88fa-4ada-b8a9-c9d9d24e99d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfa8c31-3f0f-4c4b-bc55-f3a777cfd867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310c8e40-9cb0-4405-be5f-46e688773984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45e4764-cdfd-456d-8e47-80303c5b22c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04dfdc7d-4cb8-48c2-bb2c-39decdb4928b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74165a36-feff-4189-8b48-03f4c30640a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad34e8b-f1fa-4411-bea7-ad48337aaaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e27b2b-c9d0-4954-9f93-00a22a512ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1109f306-e1c2-4e76-bac6-7c8cf1dbf0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a062373-98f1-459c-ab9d-bca9145b518c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5669328-2a77-4779-ad9a-d539b18363d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9460c7e7-086a-4170-8140-e28ee9617681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3848a5b5-5d6a-463a-93c6-a55fcc3993ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a7b17c-4348-4663-baad-f272e6ac7737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd4aecbc-9d34-4a94-8ab6-ad24eb999cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa32889-94a1-46fe-a11b-7765e2cd59f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cdc754-42d6-4998-ba17-62d38b5e7c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0299ee-9b2e-4ec0-a51e-f04c3ca5ee75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3011def6-e2ca-4d74-af6a-2174e514dd2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bc9100-2716-4720-b158-02b69725e007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd766f37-322e-4a80-bff6-8bc9d29bf05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea5faf0-a43a-434c-9fec-6216921fb7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfb096f-0e08-4bcd-9e28-54c30bad3389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89406379-3f7e-46fb-9d2b-854ad61fabc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ae7bc5f-aa1f-4533-8ce4-e1e8d497b325", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ad4908-8c73-49f7-983d-00a27fe291eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44905439-2b72-46d3-8fce-ca4b69da1121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e717508-003e-4df3-a446-029fc28a23ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443d4915-dfcb-4c08-993b-0178d1074d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d016b65c-0609-4ca3-a950-ca4939b778ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e78965c-19c6-44c2-8c42-46c787d71042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70993529-b951-41d3-adc3-dc39985e0c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa5d839-0ed9-4ca8-ac7f-c6f9723fbbbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e10124f-6149-4a91-a087-a191ac8e3772", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee0164d-8503-4f40-9a83-2612d39b8c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ec9bc9-1676-40b3-be57-5d5ebc6b47ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a01b48-0162-4c7f-b78f-bf34ab2e9cea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ea27bf-2be3-4670-971d-d6a0d566298f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199c2197-e448-4459-8f4e-e39f524e9bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7662e820-8f19-4e1c-b650-88216225f343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5030c24-efe5-46fe-a245-07c6400e01c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ddfd51-4ee7-4936-83f1-ff60bc4576b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebcd256-8187-4c91-9251-7910b0484ef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6166ed99-c7f6-46a0-8d4f-abc47f53ccea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fa243c-c1a7-46c4-a8a0-94abb0d803e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea996144-e0ea-4570-b720-99587edc4b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8357de59-ba40-42da-b897-10eafffc9aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c012ffc1-69df-4240-a376-0d64b50bbd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2cadd0-f20c-46c5-9bd4-36441a0fef1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbb1e56-041e-4b6f-9ef1-0d37762f781b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d03fb9-3cb2-41b3-8ba2-e3fdf92c200a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a31b6d2-121e-44b3-8e9c-881ace4f9058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146f546c-3eb3-4d79-b12a-24ba64b32a11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06857b4-8ee6-497b-9aad-37357a48da54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2354ab1d-e4c4-4e66-a918-4ebc27f027fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f6faf3-d97b-4f92-93ae-56c7768a7c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf68e32d-d511-410f-80dd-9eac84ec1e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1102eb6f-6a6f-4ac5-befc-81f14b89126b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ffe985-b2fc-4a6b-b2e9-3bfec81cafd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--396987f6-61d3-473f-affe-6a9533bccb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aecb9df1-5be0-4454-a0f8-1e7b4fda5cf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18eae88-8fe3-4500-9554-7b5d12d3844f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3973c1e1-dbf6-4757-b51a-9dd2bc0dc67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b06572e-6b9f-433c-9b3c-9a64ad748488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0373f741-d1d2-4041-b710-0dd6a659b31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ffc597-cca1-4b35-b150-985d191cf1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98b1f2c-0a7e-4142-9f9a-463400649e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0468dfe9-ac36-4b9f-b34f-68f3178ebde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85da1b21-0d31-49a2-8270-d4073c2f4a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e341b9a-c98a-44a0-b7b6-4dede739e157", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b15cf3-10de-47da-ad97-e2a7def9165b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a7880d-4fc5-447c-90d1-f4c2f6895c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00e9fda-aede-4766-a721-160d80343789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbbb21d-7588-45b2-afd3-845904d1d09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3925be-691a-4095-8a52-abb978de2d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190885b2-70bd-4238-aaf2-2c71a8543fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15017cf7-9c73-437a-92d3-1779886c6ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6710187c-f15c-410b-ab41-97f2a0f37927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068accfe-2091-4821-881a-1de7e6b7d398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87167f7a-893e-4f97-84bf-2790e68f39b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8babc062-d704-42c6-9be9-f97b26d5ed07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a41e300-dabb-4a1b-8544-7970579cd636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c73571-315a-4814-89b4-d83e9af92b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a10bdf-bd06-4670-8887-1a35e5156b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5724410a-75d9-47d9-84b8-21cf41b2c119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3dd7f56-fc20-4c3b-bf5c-655a9fa25bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5a03b3-d0d3-4790-80d7-4ec3a16173bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da21c62a-b77e-4c91-af7f-218740372d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df39e01f-ecd5-43a4-90de-d3600bb9853f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8bd9ad0-907f-4c27-8a0e-07e3987ec043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1074af-682b-478f-8689-accd595e508b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.44.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9462dfa-0581-4740-8cc2-a94f27be2fda", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.240.58.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45326e22-0e81-40bf-a3f6-6ba60057ecce", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.128.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--768c6a7c-3bc4-4cb7-a0dc-30b2e42f41e9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.128.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1426dff-ee04-4714-85b4-24d37f0ab257", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982734fb-cd63-4a0f-a450-59d595e9cd4d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bb2925-3a24-4916-b036-1702de7d684d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.132.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43967ec3-4542-43f3-8402-8129510841ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.134.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92426609-bb03-43ac-90c6-4ddfd8b6c962", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.134.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f12be2cf-feac-4567-8f5b-83be92588a39", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcfb08b-88ca-4f30-8aa3-6a3252af4771", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.177.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f090061-aef3-4b0a-8e7b-1a20e050e337", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.179.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa30efe-7006-4ebf-bbac-88a3884014dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.180.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf16480-9f54-44d8-84d6-f48fd23fd8f3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.181.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb1a586-8373-4178-9cfe-4e6dbdf6a1f8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.183.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b7038e-dbdb-4b63-b7df-b28f70d5ab42", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.192.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--445c249d-6dbd-4394-b105-2102ac4dde88", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f659aa5f-3a23-45b5-b027-7248f9f17510", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.235.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--093177ce-9a7e-4613-9e24-c0fcb20752e7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.236.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8754b25-59cb-4fad-8e39-c3beb4e85d88", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.238.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d136b6a0-fe4b-4887-afb0-cf5d9adc7418", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7fe06d-4e98-4931-88a1-2d3f7cae6d70", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.241.239.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37fbb08-ee7c-4cdd-b7ac-9cddbbe874f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.114.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb772c6-1654-43d0-9d63-0d23531f1cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.160.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1622399-5a8f-4e76-b892-93a30753e87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.171.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb8fd12-0a48-4abc-847b-c7bbd298f8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.248.103.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51bc5543-6c36-4c4d-ac92-3732318783d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.251.115.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--844e36e6-2729-472c-a946-f18bc2d5f3df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.223.54.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3e7867-e7c3-4e86-b3b4-0316525274f2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.10.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d42da3b5-7c53-4e3f-884a-27c79a64368e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.11.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d048ee8e-9de5-49e1-b817-083f6730f728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.160.10.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96084ac-1a8f-4bf7-9abe-9efec5cf344b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.163.24.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373d357e-2524-46b5-b73d-83a280dd2c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.169.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0617f017-062f-4b7f-aba0-83be67381dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.190.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aaaf55a-7217-4db7-a4db-b389ddc81726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.202.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6185d2-cb80-42ee-97f1-98c4a5c3c795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.138.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1de60b-3636-485d-ad17-43742b898611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.161.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a238d4-45c4-44cf-95ba-456d370b64fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.171.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0153f2-9fec-473f-9b8e-a7309681e519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.176.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f46799e-5152-42fa-84a9-f1fb7abd7ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.232.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40136c3b-da38-43cb-87a5-e4a62498d723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.64.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa02d0e-7874-4bbd-9596-9a0ae48bc009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.68.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f001a3bc-ec1f-4e1e-a33e-f784674111c5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.140.164.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7f2dd6-e376-4c45-af7f-3747df9fe7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bc8864-24c0-4a94-9a4d-cd1130707fdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.10.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434a434d-4531-46a5-9d41-ef13d32c6af9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e173ef0-2af2-4b7a-816e-a6a6178679e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b65b87-daba-45e4-9168-88bb48a866da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131bb784-7832-42df-8ea6-55f74cbf4926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776681dc-d29a-4b06-9b3e-c6e174c867a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089e60ee-e242-4807-b6ce-a029b2f09d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.118.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb887deb-009f-4579-bfe0-70f4391dfe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76dff190-1f4e-4c82-aa59-94dc9a8e9ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d61dda2-b47b-444f-9c77-a8c9034474ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9992dced-52db-4c77-8a0d-aad27e19afcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52902b48-e4d0-4c8c-a787-12f7189ce7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.12.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52b40a7-8f31-4e55-84b5-840f932690f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0be36a42-f63c-4a3d-aa55-542c697cac3d", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dc93db-b227-405f-9e26-5fe558c6eeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0483e6e-cdfc-4d80-bc2a-40e8d4fdfa3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ff9d89-e1ad-4e7e-979e-e53628a47a45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ff3d2e-1d21-4b06-b0d3-024182cb8fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961ae2e8-5dd6-4a2e-8396-0f446c4cde2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d603f5-f991-4314-9739-97acfe64a3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3a7035-79d5-46c8-bcec-8113dc23a9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbf2381-a60f-403e-8769-b89271e144bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e9094c-0582-4d58-8c2a-299a67dd10e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f7cc14-7f36-4117-8e54-dd8be4b0fd7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c73387-a0ea-4838-8ec6-f988ce99a22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bccaabe0-bfd0-42f7-b30e-a1260fb899d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c5f7d8e-8cd3-4d5d-bd09-4441777c2a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81261593-9ee1-4b5b-95f9-e43ef9e48579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3456ec38-d910-4f5b-81ab-2d9073ddb8da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9da7c4a8-ca33-4fdc-859a-4c5fbfbe232d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a1bf1d-ed07-4d2a-9f82-9b3d94a7694f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17601083-dfe0-45dd-aa2d-ba88ab5eec35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9673b0c-2888-4caf-b26a-371ef36c2be2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0c6032-efbe-47f4-9365-c0d32d910e11", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4a4994-07d6-489f-b260-b2d48d3e6fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d437afb9-f353-4705-9368-a97c93551a2b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.147.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cb9d91-81c9-40e6-89fd-53d29ac13099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12595fc5-923d-49b7-bd11-553429b4dd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.151.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ca0b1e0-6b75-4833-8c04-3f9d86f1c15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463681bb-279e-4be2-9e08-aea6b7515dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3f27dc-3240-46da-a6fb-6170b00ab5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29335463-07a7-4fa8-9cbb-c9051066d87e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92479af3-d58f-4e31-a664-5df6f207831c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79a64893-5c4f-4ce4-8670-6414a518ff2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08af1498-14db-4eaf-b844-f18d61464c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcdd34e-6be4-4df4-b120-201017199af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacfe907-3859-4b5c-9955-832676f6f101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c7623f-d8fc-421d-9f63-1b902a61346f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cfe583f-e0f5-4c27-88cf-84ae0f2838d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b4d32e5-bb26-43b7-af12-c8e2f72a4d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7de590-8fd3-42d8-ab85-9d0e1ef6a262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30e0575-48b9-43ac-97b5-62e6824cdd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f6333e-81e0-4342-9566-15ea5089dc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b46229b8-efa4-4110-b334-07eae03e81f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d0cb2e-4984-44e8-ac19-bb0fb66f8b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896133fc-85d2-4d16-b8cc-cbeaa0d9533e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6533b8b-2453-43d2-ba30-18107303e91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413f3848-f752-4dee-927f-69f32642ea73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c706a0-0309-4f18-b8d1-60f101ecc94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff16a388-829f-4021-9407-e8b1a87f8612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1e4f29-e3d9-467c-8529-89e77301c326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b230b7c-ec05-451d-b799-6b21db080be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52329c9-2e29-4dec-b8ce-4c90d6c9fa42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa7f140-1a4e-4204-883c-a6c9049bc264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17dedcf7-6bb9-40a9-971d-ed2f85dfe9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0c5ecf-c81e-4175-8b46-cf31bd9a550d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c1ad8c-7791-433b-b581-37f9591ab1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc751885-f74d-480d-ae9e-b3ff8d825ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c1eb2b-a3e0-4a05-bac7-c8847a47f043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167d48e7-e396-430d-bb6f-9092c65068e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770ecbff-dfab-4b3c-8e96-6d8f7806fa22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e22ab88-f519-4f3d-a844-738b8e4736d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0509bb47-5078-4aee-826b-95f4c2ed8e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad228fe9-456d-4f92-b463-f9c02c6a7358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d54e43d-2970-4456-9094-e8ec5fa3b54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a80a84-94a9-454c-8408-7fc8a061f776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b3a38e-37b1-417d-a844-2a9963e3686f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8f1edb-9bd3-4856-ab31-13352d4c8442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d18a70-3205-41ad-9d75-d661c3b10b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30085ac1-da5b-42a5-bf9c-84817a7e623a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bd02d5-9e64-4b4a-b75e-50ed4aaf6a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e10a08-ccbd-49ba-8592-2c4fb62e239b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37d504b-80c4-4c65-b433-880cc03a93ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93629682-934d-4c26-8e16-244cf3df7614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9940364-e721-4ec3-a2a2-9ae3a9a5645b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19286844-e83f-4df8-91ad-c2af8d1cd8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e6cffe4-b0cd-4192-90bd-d8914e2685ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a11d1a7-9157-414a-9986-d8b6c3d7dd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cff098c-24f9-4ef2-b327-a345b6f35f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a092bac0-4e49-47fb-ac7d-a71fa08c6e45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0432ff9-fa23-4c75-9fb5-9c582dadb652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc9ce55-37a1-40b4-9213-73ad6e03f12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3256c845-f5d9-45e5-9281-2f0710bd2259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81df19d8-bf71-4a4a-ad8d-f18dda8bc0bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0188c07-3ad2-4406-b0c0-f8e4248968be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbaee9b2-422c-4b1e-86a9-1a3eb4f8dd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c672152-333d-4ec5-8698-8aaa2f1a3cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222f0917-acb3-426a-a3d6-316456c8bbed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b39f8f4-1b64-4226-acf7-3b8711a2539f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1835e6b-550c-40fc-aa01-5c35d4eed51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f1e4ce-a5ee-4b10-a639-3f3b038d2e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fec117c-3796-45d3-9c90-462db1ba079f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2dc5a6d-2ea7-4e0d-9e0a-14353545317b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.176.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87eaeb19-a868-4dde-ba88-e844e61acd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976adf9c-5a5e-4333-bef4-54a1f7463280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177d503e-13d6-443e-a472-36605597d56f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ace01ac-eb40-4120-b879-735a50b31f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c407af8-e189-4ce3-97b1-71d1f7d10450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cbbd69-f3e7-4b5b-877c-1926c5077495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eda1f04-b6cc-480c-b1a8-9f0f5ac973b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01df0c37-a0ff-40d8-a88a-9216bd089b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd20292b-9481-471c-8b5c-75d194213b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939b192a-002f-41ae-b727-fdfb8502762a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b624a82-438c-473d-bc49-03c512209370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b8d0a9-0280-444d-9549-730920cd469d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af132b59-ae1a-4ffa-a17b-7b56e071fb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbd0e35-2f91-4835-b124-b569a89ab0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.187.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d263d866-1c91-4047-b76f-24069ec14234", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.20.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f8657c-1902-404b-b21a-d2da19a77681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2696915-e2a3-47f7-af15-01c0451b6c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad789788-ad4f-4ced-9699-73fc567c5b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632a168a-a7f4-4ba8-b566-661180353f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.202.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27d062f-2c8b-45e4-b8cb-9d27b72e589a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51491fa0-ecb0-4c54-a407-109bdddcb6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a98ac818-04c3-4dbd-a43e-8e2a1d588dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--901e3daa-7a0e-4f55-874e-2a1ad690ea2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b81a77-1002-4b56-a9bb-c873cb19a244", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5739eb-5814-4250-abcc-626253214466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6968bb-21f8-4256-a009-f604a2c389ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbe8c2f-6fb7-4279-8338-e00eeb83a739", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a71328-6beb-48ad-931d-d19bb0ecd405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7960633-be4e-4fcf-b014-422e008be339", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.236.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4784d60-46f9-4e1e-b0e9-ba3d60336176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5c9aa0-413d-48dc-8fdc-2696da1ef1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.29.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4297d04-e1d9-4b65-aacb-6a2ac3e67d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d18fd0-f715-41fb-a9cf-af583dc993a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d6ca90-5757-4dd0-ab9e-3c6973194d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c5b955-422a-4d50-a469-0325af3aeea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23937396-9a3e-4451-96c1-c1a0db7ef49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eab7342-7bee-4d6f-9641-247cbdaff9ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bea275-f2e4-41ac-9390-1f3141f1b1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bfb3ee5-35b9-40a5-a371-221c663970b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ccaa71-38b4-48ac-bf86-26765cfb4f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbd61af-31d5-4dea-975c-1848ff7f61f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3ea9134-eb33-44de-81b8-4a2abe399d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a99d2c-ac3b-4ed1-a0d4-03fde760a024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99d8298-aff6-4717-91d2-00f3f2460121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0bf7dc-72b7-43fc-8aaa-326fdab404c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efaf92ef-969b-451f-8578-fe48046ee627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd516dd-3069-45d9-a1c3-68a7510112f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2161911f-e2c5-4c8e-b30f-cbdfa2266866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4339df2-b70f-4bdb-a80e-d0175ff177ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ffe64f-de5c-41e4-89ba-7811396caa51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252e3170-61ae-49b3-b021-4d874f5bf078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2c4d7c-12fd-4867-8d9f-9e0ef0d55e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0678bf4-e8ae-4a08-81b7-eb0490b021a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44f2737-f262-4584-b54d-6b5ea9527f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4735f046-a531-4bc1-8342-830139260fd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88cac386-bc0d-44a5-ad76-c1befcb7f8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d759cdc-1416-47ab-9872-d2119a7e5764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f84ba3-4b58-4c48-87a9-671e44b6f7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f795e2-7c49-41e4-a9d5-1390d88ec92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.42.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc0939c-f932-4f57-b04e-ba3c1f8d86b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.43.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac77a316-d388-4454-9a9b-885e6776de60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.48.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9b7294-a61b-4c68-98ad-27f1681a3c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0d1c95-9619-48d4-8cad-988a798e746f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72a8f84b-ecb4-403a-acde-4b20d51007d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7eba2ab-6c16-4029-82e3-246a1900efdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba7fc1d-fec4-41b3-a1b9-d2bc42539977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07643479-28dd-47a4-9c87-bd77cd187188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6558cc-b3d9-4efa-83e3-e53189a0eb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.59.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08edf383-974e-41fd-bf41-922cdb2b2727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.6.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b3ad58-d9d9-4f2f-b592-b8f62c109ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.146.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766ca5c3-bfdd-42d0-8442-5724e5dd9c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.181.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52af8387-5a58-4ce1-bcfd-e928459fd100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.185.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b999e69-a41b-4295-9f65-f7f808824034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.19.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1693167-10d2-4afb-968c-446fa28b6927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.44.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbacf3b-cf55-4662-b8b9-1c47f6df7f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.47.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af6b760-0cd0-4efb-9315-2392239e9ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.72.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56a6e30-6c82-454d-b58b-337c967e5026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.87.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f3b189-ae66-4dbd-b87a-8d94e6494084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.132.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fabfda6-4600-4e17-b360-0f25560231f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.148.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3bf13e-f190-479b-acee-5e0f3f210c31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.192.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95ae67c-4491-42f0-8cab-5ebb322d00c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.84.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7a9e90-7748-466e-9d32-0781a4adc073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.86.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f911c4fc-0a0e-4ea0-9c15-3bed204846b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.111.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fedcac72-e039-4511-be3c-a9accb073143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.120.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601fef37-82bb-4ea7-9ff4-bb8e1938f4de", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.169.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb14d4e-c8c2-4c8f-8f0b-9bd40f1065ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.178.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e759138-7ea0-47d5-81a3-58982828d14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.83.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4414ec-81ca-46c3-ae14-d0b26f4ee4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.176.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54d5cc2-8883-42bc-bf7d-bfd789c76870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.209.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae689587-15b8-4222-8e38-9034f6ddb2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.245.210.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f55f432-8c11-472b-960d-ed7d18dd3cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.41.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817c2512-a975-44f0-a2fc-509a132056f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.62.41.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bdd7b55-98bc-4771-977e-daf8e5a85cae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.114.156.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dac27b9d-d1f4-41bb-9365-4a132d8183d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.151.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2234343-b980-4ac2-87ef-187e1c4e016b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.22.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a191343-20fe-4b6a-8a8f-3ccf252433b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.238.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9e93d1-cf6d-4ed3-b741-8ed8cfaa7247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.254.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fd05b9-6f6f-4526-a8b3-dc9888146257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.41.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a8074d-9f7b-4b5c-abae-050bbd531a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.47.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae61d0b9-a669-428b-9426-e46135b2d0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.61.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f8a7da-75ae-4a3a-a232-3156f65c196f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.76.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9384d6f8-923b-4303-905e-46df4d5e7695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.235.35.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1548b7-1b77-49cc-98b3-f8ea3f18360b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.11.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1894beed-bf8e-474c-95e3-ba8be31b3015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.173.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fb3f8c1-f07c-4306-8472-81da36242e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.218.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff630cf-121c-4c69-8f8e-b25ebefaa554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.239.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6a2caa3-566f-4f83-a918-28749c27da3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.86.107.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a708ed1-b9c6-407b-9ee9-860e4b38b0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d669694-06b9-4413-8e33-dd65d0dfd08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7b3ca5-562c-417d-984c-f474d5db0932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240d81ed-0f97-4b43-9cf8-1e6aeed15b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c621502a-e949-4860-95e5-007ceac530c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88baadc6-b3dd-434f-8cd3-b898d507a6b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a791b894-9b36-4294-b791-1d425e5f7a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240fa4eb-76ba-4e8e-a016-24efac81a99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33663018-9121-4b63-8e63-a50317f6e58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bed1952-4a7b-4ff0-80ab-bc109ed3e843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d5dd45-b358-4531-b207-b35e82776b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb0a52f-1f14-454a-a15c-62cb62c1be44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a880e3f-9909-4f29-be4e-19858632128b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00cbd9a3-1e51-4560-a2db-3c7ea2f81b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53cac33-bee8-4aac-b495-a5d2c04e8889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8394d9-06c3-4077-b101-4872a8ba26e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814616d4-69e0-402f-a7f6-03af8e08b008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f38180-e7d3-4a2c-b715-05dcee38b150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76d42978-beea-43b7-9ce2-162ccf9d0f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5924b8-e8ae-45c5-8f9e-24abedd8d55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5e4269-dbc1-4db2-908c-a2132ee703b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12f8dc0a-1606-44a6-a8db-5a159ff373c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f411344-211a-41e2-9677-1f94a4828d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219fd293-e1e1-41af-bbcb-619c8b907b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb381115-2558-42da-86ed-833b92562747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efc88fd-a684-4554-8d7b-4b702d0c8b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcf2c8d2-76bb-4af7-8b3c-5b73c2fbedce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bb2e41-245e-42c7-b915-687397847bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b953ec2f-9e21-4c01-9a8a-68ab2b06e207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c32a1f7-8f5d-4379-af3c-c3f7d5af4352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91df5b2-0f13-4821-bf8d-32fd1afaab7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c86fb3c0-fcd6-4d86-8b87-bb893192bc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad8e782-641f-444b-9a4f-32621ee7e1c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac3684f-55b4-4517-907c-fb67f8d3dfd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf9ba03-06fd-4424-8c6e-2eceff49823f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33398428-c8d2-4817-848c-ec8de9e8b8aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8497ca9-32a8-4f56-ab95-8504dd927150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbf7c8c3-220e-4824-b699-906a04b83d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97ff28ee-23cc-4180-8515-649128132088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92770c3c-113e-4d01-893e-b8fce3146f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61e57bc-b332-4e19-85fb-b0bfdd1b5521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d66f0d-2420-40b6-9cfa-9cd96268c181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704578a3-7301-470e-b67e-824e39a6e54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf111dcd-4cad-4d07-8563-8fe84fb3aef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6171c4b-446a-46e3-a5b7-9feb9952dff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c05032-9dfa-49f2-b114-7824c60b042e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--989ff93d-a0d0-42e3-8668-f9337a700ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8541f784-04cf-402e-aa7a-bb39652d3175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea95ffbe-8ad1-4ec7-b84a-c302e016fea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.1.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce73b4c-7b7b-4286-925d-d4ebb406770a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.137.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91472528-a3db-42a7-a5be-1c49eee2f8fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.158.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4af74a-e990-48d7-8ceb-d0dfcc5ef463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.211.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e32603a-ac13-4e2a-b47f-c58119c05b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.228.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cbc983-fc27-476f-a9a4-bf1361fbe2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.234.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daec0dc0-e6ac-439b-b967-f4ab8536e50e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.3.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b73aab-5979-46a8-a193-fd92996b38d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.42.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ec1a16-f324-49bb-b1eb-69b552554bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.5.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243ea81c-a3d7-413e-b453-fb40933cfd25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.51.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd548832-e7bc-4b24-ab75-7fadc4fcc45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.85.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf9a8bb-f5b1-46b0-985a-387ea9040be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e286edda-03c9-460a-91b8-74997fec7315", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.213.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7904c2-b9e8-46c6-bd8e-d87cb656d64c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.138.232.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6428b456-6422-47fd-9c35-572eee66cb03", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.113.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fffa3b7-060c-480e-9b28-ffa2d967aa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.126.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a47d51e1-c63d-4522-a959-befae2d31c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.149.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96865419-5cb6-4469-8438-16a5ab0eb41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.153.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1865b3c2-c6bb-4a6d-ad49-fadd0e87cb44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.157.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4b9c8b-3a1f-43d5-9445-84efc77912d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.157.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de6da808-e57c-47c1-a509-5e01fa344b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.19.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc5f698-75a6-445c-9314-fc42745b6788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.30.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f38cb6-29d2-4b79-8034-274ecc54bf28", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.79.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1a2ae2-24c9-4fa2-8ee2-c11a88f510ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.87.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb1d3ad-5134-4c15-a945-987841eb70d6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.167.228.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9bbb8ab-25ab-4cbf-acaf-09d60ac14bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8274f97-bd70-412f-baf6-7647e37ee13d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.220.237.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c581d877-df78-484f-9382-ae80bbb33592", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '17.241.219.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56581217-953a-4c25-9d8c-2d175de56f61", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.179.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a56605-6cfe-4e13-a149-08b5eb2c73f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a40584-b891-449c-a329-ecb14b821321", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.37.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c0502ed-60e8-4d00-a9aa-3d8f8d1f4768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521c5291-a7f8-47eb-b30e-e739cfcb97d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba09093e-fa68-4d23-842f-741caa62828d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cada33-3b81-44b4-a0fc-0ad90103560b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dfe25c1-8c1b-4553-89ac-72ccc96e9074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a46dccb-6854-496c-b908-b19e64dcbd32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fdeec6-849b-48ea-8c86-206702b9f3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46968999-5105-4f63-84bd-0cb888a214cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da985ea-3f19-431b-91d7-6a1398077f62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.231.224.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb0f3aa2-ff98-4772-8b24-f4480115efb0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.253.46.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e070c2-905f-4d35-953d-ddf229fd32fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.134.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a234b55d-7afb-4b21-972d-6f939893842a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.152.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3d59da-02c6-4489-a860-e438cb75927f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.163.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bffb9e3-364a-4e87-831a-f6104986b14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.165.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efec1c4-a270-49f7-bb2c-f0275c7d290f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.177.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323e6d96-7d29-46e1-ae0f-fe51c4360e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.224.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fdcb2cf-3909-4fb9-b6b0-8cd8870006cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.79.37.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db705e87-a5a6-4f99-956b-768d5fb3c896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.82.253.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3db5e78-ebcd-499e-8783-efa6f841749b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.180.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4612b2-1427-4ac0-9a6d-5f33eda002c5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.237.176.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e4335f5-1996-40a6-9370-2948f70cf40d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.143.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dec043-8818-44f9-9160-3c3dd99c350f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.25.158.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0ef7d2-0d84-4f56-a709-59cbfc9d4a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.105.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09706c75-4669-49b0-b8d6-7e8ba18c89fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4f67aa-0d37-4203-98b4-f72de5a4524a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.210.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3f8542-83d7-492d-b8e1-8184e0b9f92a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.93.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07a232f3-5418-4a99-aaf9-751cf1264ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.128.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--602aed5f-154e-447c-8ab1-1f5b48266e03", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5603350c-874f-443a-9c04-8955e2d88515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2bbf84-8a04-497b-a94d-342c77809bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e56fcd9-e94b-40f1-8993-d51dc5a0d6b3", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b225879-4014-4ed7-83cf-fc5cefdba2af", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.186.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e6b552-3e9d-4cee-8955-97176a1d5579", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.17.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71ee41cb-b7f9-461a-ad81-2cffed3df105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.211.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b637a409-e427-494c-a4c1-ff58220e3a8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.235.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9d49bf-0316-4a9f-baa0-c12b82170cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e037ce-92d0-495f-a645-05ae856deb28", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.46.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1df49b-58c5-4e01-a6be-88d1b2acbd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.83.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72503542-19be-47e7-8a11-7cc642c06c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.113.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64bc52d1-1faf-481c-ba5a-370898e53fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed42f9fd-4917-4bab-91db-a3dff9539b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dbf5e4-d32a-403e-8f57-9826c991ef25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.117.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--655fb92c-9e44-40b6-b53f-7727f8d6e650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef04515-c253-4617-8f06-5244c4e65265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994373e7-b2b3-4550-9240-55f46f9862e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834565ad-f959-451d-a6a9-7e6b0b3c8b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676cab47-8bc8-4056-b91a-b07f40819d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.225.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ebc455-df80-48b2-aba1-d5d53e077121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.241.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99b2375-d606-4b60-b790-5dd559032ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bb2e9c7-69e4-4401-8426-99c8dcd1c6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.245.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--551ca2a4-0b45-4536-9a3f-d4600456da15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.206.227.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d986441-50ad-4d4e-a04c-3ac027d3134a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.210.65.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e1c766-b4c5-446e-9100-b53b23d3b8b6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.214.209.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e55473-ec6f-4055-8807-d18334366fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.215.144.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79e7485-ef6b-4c32-ae58-6a00f1ce0344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69742ac0-42ad-41e0-bc96-7ec97f6bc860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.143.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99406ba2-01db-4289-90e0-2b54ed089c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e77954b-c358-45c8-80f6-e75081024e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.27.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5615bb-79d7-42d0-82d8-7f7d5d35ca51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6ff42d-e2d3-4d89-9628-9de23cf419cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3758fc1-14a5-4889-876c-0b0f14769992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af68da5-3018-49ea-9469-d7d2fdfc5ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac8809b-624b-4e20-b45c-9b176f6eff4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a13eb3-cc02-4822-98ea-4ef7bba6adf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2734606a-f5c8-4121-8870-f200ade62551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--486c3f0f-0edc-49a3-a781-dd67ac04a3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b7d51df-70a0-4811-b170-7c670f596ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b34b666-47a3-459b-bf96-9d3d39f4a955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59d313e-42c4-41e1-8448-02f52efcdecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315e3097-2871-48d8-a208-56a1ec9e17af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2065c5ec-89c2-4690-8ce6-b1fc17246bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d15a5e-b491-416a-a30e-230b0d2b960b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--714225b5-6041-4a78-8102-d1bd8e36481b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db4fb1c0-4e35-49c0-a7b7-b7402e19d9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501be301-55ff-45f0-bae7-e00d8dcf14da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2940a8-6b05-463a-9bdf-d7507f3b509b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126c08a1-a72a-41d5-8d8d-5478e613cb50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3295eebf-e92d-4fc1-8612-106f904a2027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b66e80-4b2f-4130-8cdc-8f5f23ca0caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0edbe7-81b7-41f2-ae59-36ccef433381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.41.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d28f19d-6428-40f0-a379-29f8f7f8e126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba432ce-a4c8-4b42-8818-622cb5402284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f81d1e-92fd-4e16-a6ff-64ea7b987e0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509cb107-886d-4945-846d-d629b4654aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab92c7e-afea-4f67-9d43-2c66d7ab0802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f3ca7b-4f6c-4da6-b312-44f8149ed484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c86b734-613f-4673-9ab4-8398310c0da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ccdbc9-03af-4b6e-9c3e-f3e16d611f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad24c64-f4bb-469d-8022-1172ac1cea13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.127.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90f8140f-4166-4407-b4c3-01aa37519952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7eb3c60-fd7a-4408-9d96-c75ee054b54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456603cb-7ba5-4a11-abd0-3c83c5ed71ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2cc8b2-6614-48d2-85b0-9af2de96298a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0378bf-e4af-4067-85af-10f95bce7e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5935be93-d44f-4849-b1e6-830a77a48977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed21e5a5-a648-4389-8d07-f8cbf4398fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc39da5e-9f55-460e-b1c2-af86a20da17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b68b92-e728-4d23-9615-f96593d03719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751760bd-a72a-4378-a762-b5fdfbb6fdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbaf69c-5595-44ab-b651-5cad70520d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0349371d-5815-4512-a787-01ade07ab642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ece7174-d832-4c55-a71b-77a1de1666fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1de96d-f64a-4126-8ae9-58d902a76777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4639322d-d2cd-4081-af12-c89acf3d8af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ae711a-74fc-4166-98fa-f4fccb617957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcb7251-8b65-40ce-b001-5a5913353aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ad3ac5-df17-443a-a98e-640b1c9ad3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.15.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7244b1-8c43-4332-a9e7-42de2a5f0fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911693b0-1c56-4942-ae73-63ce817d7dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26df927b-75ef-4b2b-b4a8-eb3660c7aae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75ff169-a904-4ba4-b7e6-a2cee7e238ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.64.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0427d3c-ca83-4b03-9fb4-5e17c6db79d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1faedd74-9ce3-4001-955e-a36cd9e0a3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.71.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2385e99f-0995-4275-bd83-603e7f8ca372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c1646cc-f872-4075-bfa5-16ce5ec80d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.113.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df602cdd-5e18-4930-b17d-f42c1ad44e02", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.114.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab46bcc-4245-49e9-8c2d-20d31d538cf2", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.86.126.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5106f0-8083-4365-bb56-bd6193b8f35c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.93.100.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de06f4b-9bce-4d26-9043-783c4a3f437f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d584a6-cbdf-4093-8020-9ec94f60addc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf653e1-dfc7-4742-af3a-c5dadbfdf1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3db214-c02a-4bed-a1c2-47e0dd43bb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d2153ef-d465-480c-ab2c-a4c7b51f9deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87564a6b-c17c-4c49-81db-82fb4ad0b214", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e834f20-bf5b-458f-9c2a-55094d63ebae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b59a88-9003-4e94-ac9a-d7a5bb439554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8eab825-00b1-4c92-9cfb-c933e419b394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13623a0a-aa32-48e6-aeba-ee2f022bc806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1eab41c-3b3a-45bc-9a95-ba6330980382", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cee60567-63b8-43d2-9507-efbde8c4c143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabb000f-71a7-4b11-98ea-59c8c50db413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f67d37e-00ac-46a3-933a-b03809a3ef21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.96.172.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95b641b-e87f-4b0a-928f-1b922f48183e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1062692-db0a-454b-8f9e-a72ed9db6f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc55288c-0873-46f2-9acf-88281130203c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.244.60.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c0c1f10-e3d9-4dc7-b0de-f409f1d9a7c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.249.10.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebb094db-77d9-46a3-8759-b47c274792ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.254.234.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f694bb6-1a0d-48ab-94fe-26730b1c3733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9840d54-f0c0-496a-a9b5-bb15d63a770d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12af439a-6028-47b3-8a2f-997088e7ab12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954859cb-ef01-467c-8a76-3d6099402bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36aaf4b2-d49b-4390-ba18-886f6fb64bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d12526f-ada7-419d-8a83-14302313fa70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7319b0-efd6-4530-a44d-d583448f4c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cd37e7-36c7-4be5-b946-56449d4ac46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa3736e-b9eb-4aa6-b39d-b1d1f86e73c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba2314b-6180-48ad-acbb-5fd2ba4155cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57c169b-1afd-48d9-a6b9-ad9c0d231b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7a4440-dd85-4d9e-8452-4d452be8e6bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df79b29-d66c-4143-b98f-0e6ac2203f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9cca84f-6801-44ca-913d-3e4cb343ce98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.225.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d677281a-fd0d-437d-b639-a17fd1218531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.226.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3e3b8d-2687-4a9b-9131-bedaf3c0f428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e605a0af-c19e-424d-a958-05b98a159ee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3c0444-932b-47fd-9dde-26e23ec9375b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.100.160.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36c86d1-4a6d-48f8-b67c-69233c79a9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.173.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4857e1-2979-48b6-be6b-a2f00c3d4768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.38.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558e43c7-2cb9-4a93-ad66-6f82e31ca209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d708d334-cf78-4831-b280-b34238704ca1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.35.25.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0e5a49-8463-4785-9ad3-118d5dd8d722", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.32.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb3fe85-3a93-4d20-b6f7-1282df0891f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.178.110.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461370d6-977b-4fd1-9bfa-9fd544dc02a1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.182.39.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095c0e23-1dab-48e8-8203-3b17815cadbf", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.198.110.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b55be8e-1afc-41df-9f94-24024beb8b6f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.24.175.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858742aa-eead-4ad1-b8a1-82fd6b21ede4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.43.151.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5819f4-f2e3-4391-9a7a-907f6bc2db59", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.45.200.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65becce-a20b-4a21-8c6b-57e984eb7bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.101.56.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c311ef-2402-46dc-aca1-011a663f3f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.118.48.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adfcb63-1d4e-48b4-8b0c-cb732c7d638b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4eff06a-8a58-4ae1-8414-5f1d2f7ab72f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c52945-cae0-4f76-b0a7-13ee24ca7264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.123.2.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c401ae72-1396-405b-9bf8-86820d3cde38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.165.235.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67523906-aa23-430b-824a-94f55f1cf575", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.211.42.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6552243-2ea3-47be-8e0f-27446c24ac03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0d2c2c-3892-4108-abde-79548547a945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.128.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164e8d97-0fc3-4937-8bfa-39689d3f1196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b32cf78-4152-4ade-96e0-3c53e78801d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9502a13f-cd91-4ca2-b17a-fd39591e73c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4966a4f2-d097-4d0e-96d4-59e49718bcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3967022c-0b84-4750-a940-7cc5841dbdee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc677994-9d4d-4895-875c-c404082e0540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d03ef4-9e0e-4b37-a621-7140ae4ff771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.136.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc18f939-d6d9-4a5e-92bb-2c493ada8bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147c09cd-67b3-46a6-87bc-c27b9ace0f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9396c88-84f6-4f14-919b-dbb5b2d323e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24280a1a-2b3f-4cfd-b5d2-94322650952b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5690da16-50dd-4409-9803-deed49e5f167", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746bd605-912e-4937-9c6d-bea1c4e68165", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9bdd35-6037-4296-b1ac-379802785372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a6dc32-948e-4449-a877-1975a65a8ae6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd62878-61b4-4503-bc91-bdec4299e1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22fda544-adc9-47e2-9529-2630ae4a4be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46abafd7-4961-4048-97d3-cf5af8f786ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57d185a-47c2-4e3e-a417-97e8b5c32181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522188b3-569b-42ca-907d-4e8f2ecf9af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7ff164-1f9d-43b6-9683-52064faf7d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--988023e7-a9cf-45fd-b0ec-9055880146db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9cd0c2-4e41-4fa0-a5d0-d6b68dbc7d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09622e42-eadf-4392-9534-516c3b1ab26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc227ba-f10f-44fa-b239-3fe5c170565a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02acba1a-bf25-4cb1-b064-1cdd5f54564a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f6a9971-408a-4341-acc1-553c6c16b7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b262161-97a2-40d7-a783-10936941bcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b634a6-82c4-4593-bbf0-e70c543be1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d1b6b4-8bc2-49b2-89bb-17b9a70adf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5149ab-629d-4a0e-9c24-9b58def1f8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c3bcb4-264d-4743-b3bf-01172bac9454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7850405-061e-493f-bb7a-b90f205366ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b48ffd-8f4b-485e-aab0-d5d500687d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398cc06a-8aaa-4fb3-990e-5ba044c5280b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33820302-0f62-4028-90d4-6749f101977d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c390eb1d-0c95-4160-a6d2-6151017b9096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac15373-8711-497e-94c6-cae482d9bec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ac8ea7-3821-4149-bacf-39cf3cf100fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc2fc52-051d-428b-8ff5-3bdffefa2c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7822e26c-4c9c-4ad0-937a-980308c7b722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65806068-ea91-4308-9090-05056957eb15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f2a776-94e5-4124-aefb-b3c21aefcec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91759690-a6bd-4726-98c2-2e86812e6272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25c73d3-ebbe-41df-bd7d-e655287e21b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3288978d-57fe-4f3a-b282-78a4287827dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31ae2ba-3dfc-4761-91a1-ec20fc0ab077", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.11.196.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6aea87-e326-41fa-9a42-189c3b027ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.125.169.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f1bc013-a74c-4ad7-b06c-7fa915089d9f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.182.154.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92b306f-a8c9-4d85-9ace-bc4341f42b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.30.64.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a40766c-9c6d-475c-ac20-7eab9158613a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.43.83.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f085d3-58b6-4ec6-9ff9-db10005ca47d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.104.233.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd985ad6-8eba-401d-a797-19247fda48df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.107.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b949aa7b-c0f3-46bb-bb1c-e90827be5be7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.99.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734e3cea-e57e-4ef2-825b-fb96b6971997", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.208.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af26c8cd-6213-40f2-a687-317ce57abbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.255.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b8f7b2-b4d5-48b4-adca-c72170777182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.46.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d24169-8d46-47c3-aa81-0c0adba6acfb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.51.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f900ae26-a715-4eda-9d6f-d44b9e574286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.152.13.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb95b22c-2272-483a-9f49-61ede0b17f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.53.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75bafffd-e723-4ea3-84a7-11dda02552ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d794ce5c-ed76-451d-a6cc-39e795c6fa75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.16.54.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a33cf6-e60b-40ee-a1fc-4813b8287c01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b5705c-4b01-4436-8732-0e6d7ccb21cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d297ce4-3996-494a-b8ae-add060848f53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.238.234.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca77d9d-2a0b-49bb-a047-e0a07084cfc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.254.238.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea541e91-9ea2-4c36-996a-31f03c50e636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.192.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b550ce0-8685-435d-9b5a-355dab988b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.192.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3846c9c2-4b8c-47d7-839d-e82869009936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.218.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74f189d9-db81-4a57-81fc-ea77ff1a416c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.62.55.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2417ec80-bde7-49f9-92bb-49d1ccea3eca", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.0.124.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bbe620-089e-4960-8dad-c30fb54a8c6e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.127.65.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a73127-d42d-4d79-beb4-2bde460f4e11", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.184.242.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34f84f0-607d-4ab0-bdd9-3c5d5e416a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.191.237.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c39d68-e1ed-46b3-9782-23dbf737cd89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.24.234.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3030a186-bf9f-4d4b-bd97-df7f50e9fc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.33.186.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2cb181-6106-40e1-8a1c-0229b83433eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.146.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcfc18d-0581-4097-8ead-52a8981dec96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.168.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6312003d-3ef4-49cd-bf70-47c60fb4e0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.57.170.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e2db23-9b90-4262-8ca2-e70d10dea0c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8de8f8-897c-4419-84ad-454af4d90819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.232.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7139352-4119-45fe-ae5f-92bd62ea7ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.93.218.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859e9698-1318-4d85-812b-19369f0a61b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.117.112.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c95455c-bd92-45d8-baaa-5df1c6e51e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.118.167.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7457a67-6cec-4839-9727-7dfb3d80e4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5731829-4284-476a-8cc9-c440411ec0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f83c742-aa91-417a-a13b-139ef44acc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.140.44.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a712815-5627-4e14-8e9f-339a17b02031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.189.74.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad5564e-78ab-4798-be4a-f3dcc99697d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b0ca82-1ffa-49db-9f79-93c5b74a0fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.212.56.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1d6fa3-c1d6-4dab-93c0-d2a429025812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.169.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edb649e-ed0e-47e9-acd3-6bec8c68b7fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16c05e3-1428-4c1f-b198-de0ec499c1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.219.170.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--806728ec-8153-4f55-8fee-45d7fff3e757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c96694f-400d-408b-a7ba-6d26d0400cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.222.11.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3338b28-3879-42f8-a7c1-02664acd06c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.223.16.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ded827-baaa-4d52-89b4-503e269c0cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.225.235.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28073e28-a342-4e3d-84f9-3c01a21aba97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.226.94.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cc72e4-1fce-42fc-a79a-9a297dfa3d41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.26.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b619a578-8331-49f3-a06b-e3d61cc43e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.97.5.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791ffaa3-4aab-4a89-bb7a-86dc51d1aac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.108.64.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99499c14-d299-40dd-9368-b06504f70828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0560524e-404b-4ac5-9731-5e130bca7a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.167.128.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353ea761-2e14-4c3f-8736-e314b025096a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.172.177.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb959d8d-a275-4d30-a641-518e3459f7b9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.134.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a9c54e0-d675-408d-bf54-c308259feab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.184.141.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762dc4ed-ed0b-4225-bb63-34ebf5a25c46", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.188.24.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4afb77-41b3-422f-942b-df096f1f0463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.244.187.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8785864-ca56-4fde-8972-a3718ffd691d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.254.122.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603de377-cfb8-44ea-82af-53c62d8f9794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.105.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed0c6585-a0cc-4584-b17e-8ba59214a067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.147.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a43f70d-7517-4e37-bf0a-1d0e5331aa06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.172.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be6c396-f93d-40f8-83eb-ca9ebc2c109b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.235.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec6eac6-c862-4441-8f2c-b76afd5e56ed", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.243.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e98553-5c55-4049-8d0d-3b1fd4e971ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.57.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e40a9a-12c5-49e1-abde-1f42d3cab1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.93.3.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc066288-7624-4cbb-8342-79e6a02aaf40", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.97.183.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b80342-3e30-4489-a7d0-89f23ae2d232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.110.62.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e94a5de-e77d-4e4f-b9be-dcede54110cc", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.119.85.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db6e010-5723-4c56-99b9-2c98a6d7c312", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.188.176.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4697f11c-23cf-4dd9-b6d9-c490b75dd7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.198.192.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35bd545-2731-48b1-a436-ef311babc47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.173.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d753ea-ac30-4a17-9423-d222bb75e617", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.28.101.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066f4129-7bb5-40d5-a534-26c31559e83e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.78.216.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94f8a23-243e-4dfd-ae27-dd17d79dc073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed63aa4-1299-4285-8955-5e1f2d22beec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.16.3.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ee2bcd-50f2-445b-b121-c4675a7e616a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.162.73.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54f0ab0-ba95-4b48-bbd1-39eb1578cbbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.18.89.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f1db64-20b1-4821-bf62-eaab3536f09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed6bcd2-1bc3-4813-9d6f-19111bc04421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.37.91.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e328aac-17dc-42ba-bbc2-2754943d5b0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.43.76.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e709031c-5680-4876-88a6-521055655db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.92.237.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9568a57-0720-450b-b99f-8145024783ce", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.93.50.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--176fd4e3-49d3-474f-90a0-0fe65a7ad215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.95.153.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b9a4aa-768c-4d7a-8370-e0a931e0713c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.149.89.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--783b62d7-8632-4d97-9551-15786249767f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.155.181.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43bcdbb-4a6d-4796-aca3-dfc81c5bc57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.155.244.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3309f65-b4f8-46ad-a3cd-06f3329e17c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.198.93.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0deb4b63-8a3b-42e5-958a-69114f3f039f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.232.212.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3706b33e-97b9-42b7-9cc3-e9db07ffbbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.236.7.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa1c57d-ba9d-4738-ab76-760b3647f71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.237.81.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd7fef1-3344-4f8e-a9e8-2de32ab3a0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.36.35.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed6b04f-b050-4641-869e-0b1fdc65114a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.88.213.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2556504-d6a6-4852-86f6-b7e6f5df1690", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.91.11.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd7e5c4-b84f-4a8b-9449-8af43f64b0a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.113.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972340be-fcc4-49b4-9d19-ca49bbed5a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318c9f75-26dc-44e4-a353-973a2954ba21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb144ec1-6c83-45a9-ad02-861b00475737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83798aa-3c36-421e-b472-51319a95c73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888e34a0-c46d-4a4e-9e7b-9116829ef94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f99eee-91ab-46a8-86c8-79274c11ca65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bce9521-1451-4ed3-a880-9bb4b72df3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee533808-7020-4a00-a943-0a36012ddbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9ce613-9ca3-4a1c-8683-284f03beb93b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d207a953-8760-481d-9ebc-60ddec67936d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e8798f-b5b8-4022-9df8-2133cc3104ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4672cfc6-76fe-4352-b98b-82daff483ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5c680d-cc08-4353-8904-247273ded80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79c0bc8-0cab-4c1e-9796-cfa5ff127061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda75ea0-4b1f-40bf-a628-541fbbc6fb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39aa419-8277-4180-b0e1-5fa906a5ddf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba7b49e-5774-4861-92fc-ad3d273969df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5a035c-68f0-4ea5-888b-28dc95d7e09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb232794-a265-4daf-9db8-f33b5ac18223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eb6ac8-acf7-4142-979d-f4568d8c3d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef0dc14-7d15-4642-8428-02a8bc0b283c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eeb5b18-b144-49a6-bfbd-eb01223fb237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c436ce-9a2f-425a-9899-84556c38200b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b50b1d-350a-4ad8-8fae-5f9e5e6984b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61eca21-6a36-4219-9f42-8bf3fe0d7856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbda5efe-44c0-4a5d-8600-542ac76f4f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70c99f5-0633-4ecc-8ad8-936c0f376e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66074d4f-3b80-4f0b-8bd7-93f5c297b25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86343abc-05df-4df1-b392-c904558f9584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1b4529f-d925-4b2c-8185-bece846218f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6349b9-bb2d-4eb9-888a-62c739169754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c787a724-9aa1-446e-b926-9e9064acb091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad84b31-ce83-4d29-b3dc-900acb80d107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8b0668-6ed8-45a3-b3ff-b347b6720f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d028f3e-a5a0-4291-8b5d-3028a185d65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5832811-a7c7-47ef-82ca-8b2b6b868b6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1397b7fd-b6e8-4bc9-a060-d627fbc42240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84c2919-b444-47db-8736-4dd8c525e0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b6df254-b8a6-445a-b59a-fb4712cc0335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f8991a-fdf6-49c3-b4c9-6be0a7f9cab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.157.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac42a1ef-de4b-44ad-ae85-a135c7556895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.154.78.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da15f10-b201-4757-adb6-46e2718b58b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.201.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faddcf96-0bc0-43d6-930f-faaa24b2244a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.106.103.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5118a4-1893-4cb7-9fa3-1bececa1da9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.107.80.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5fee21-8976-4f56-9a96-bbdc38c62887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.108.209.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e2fd1d-487b-4319-b835-e1ac38e0ae99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.113.10.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00f7e602-ca45-4160-a47e-4f7e35cd877b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.117.118.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674bffff-a16c-4ebf-9a41-31977b7b737f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded47a16-ae19-46c1-8a43-9dc041d88e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598d9fc9-88bd-4b87-ae6a-881a7bc4454a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.125.103.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ba5e5d8-9138-4c6e-9595-173a09e6c183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.126.180.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b712a061-674a-45d8-b8f8-e9cd5923bcb8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.128.227.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a6a78e-aad1-454f-bd87-79e9277c3906", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.128.227.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c65ae3a-a6e1-4d7a-96ee-d91916c82584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d16df65-176e-4ee6-9d53-d3a52aab1830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.134.49.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae6d84a-af41-4fa3-b044-dcb2d9e495c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9965ac28-1c13-46ea-afbc-7d3d32330377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e07332-d2fe-4400-9e50-0f4ce6a0a569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0993956-4793-478d-80b5-4506ddbda029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffbde30-6aec-41a7-88b5-517d321f63c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c8682e-7a7c-453a-aef1-6d1ee13e8864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.150.191.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51977763-d163-4363-8c0d-6da8de4c5535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb139473-6651-40b3-b1b2-fd4b2f14553d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.156.73.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--716d0a60-8a1d-4d0c-b9e0-a271586846bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797b10fd-2bc7-4a8f-b894-7ac9406019e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.175.77.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8a045f-5192-4f26-877d-f59a10cce572", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.182.8.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7874d0d4-1954-4aed-a26c-43fb91e5d2cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.114.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--484805b3-3dfc-48ae-8c22-6995da8a4c8c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a752834-c210-4c87-84ba-c39a9113d11c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec929324-d79c-4bad-bd8e-6a534dfa828c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d9226d-f916-4d63-8657-da5cfa5d1220", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6d43cc-8bcd-4aa9-a305-4842f32591c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd8cbc9-6d53-496d-a6d4-7244d33d5685", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e75d766-dfb8-4612-a13f-2685bae8f4d1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6fa77b-dd12-47b5-a846-3492678e6787", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68dd4a4-1668-4c07-99d8-7b63f0a2cf42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07267a6-c861-494a-8b38-e3c3ba87a2c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2008a3c5-3deb-4224-80ca-158a865f7d60", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fb95ea-0048-4475-a0f8-6d038a66db56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399749b5-65bb-46bb-9475-9b93614e8a5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90272904-83d8-4383-b0b5-ba44aec2d924", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bc0be1-b5b9-4fa4-99c6-5cf0f01a2be8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa48d84-a88c-43ec-a938-42359630f3ca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b418bfd4-10aa-4095-b007-5e93d75ad0a9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fbe582-28fb-4962-9f1c-5f88a5f3ec5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfad93b-743f-4719-9e9c-8f3b317ad1ac", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60ee7bd-788e-45ed-82b2-94821fa6883a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.194.178.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5272b8-0eb4-485f-8d28-5f668163ee19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1705fbcc-bf4d-4c38-87a5-3d7ffebcf78e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0eac0af-df16-456b-a516-d10d5ddde092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e546924c-6bf1-4099-81e0-923b5bc8586c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2dc7ad-fd41-4433-bfe8-26fd06cd058b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8787506-c196-4379-b460-99df9368dc64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b3490a-6b5e-4246-a058-c9fbaa3a26aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a611c035-2bb1-41e0-b229-c9e99b0e38bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.203.237.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0859a1ca-2d06-4b95-99fb-970f7fca9cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67364e7f-3774-485c-a0b1-79a73aa2f0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5c571c-5062-439a-9af4-417a68bb49c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.216.145.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d765cde-db93-4d8f-adc3-b21ea2c680eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9b5d30-f063-42f8-a1b8-c70a3cdec965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--769bf9e5-5f1c-43f0-a497-7bded18c6a5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.138.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d39d1182-e430-4b77-af4b-4c9e046010e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.219.133.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdc8ac6-3833-42b8-9a06-8c924862a6a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.223.152.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d304bffc-dcd3-4016-8321-71d147eab3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4589e7-6821-470e-9584-c448494eb557", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.41.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4a97c8-1ee9-4201-ad8b-e289d425e2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.196.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e845ab5-1833-463d-87a7-f4e837576534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfd71b9-9af7-4e75-b372-2f04b3216137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.228.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ed34a3a-01c7-4840-88dc-3bcebced2d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.93.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5542705-f02d-4d7e-b9d1-c43b98e3150f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.228.72.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c867f780-331d-4b24-bf8f-6100611db34d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.230.219.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c9778f-16ad-447f-8fdf-a466798f3b63", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.233.3.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dffb939-9bd0-4f1a-8556-5a4e2f66350a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.241.208.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea36e3f4-f2f6-4aa9-b133-78a9071f0a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d839a089-bf5a-43aa-9ea5-4df6819b7ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8992566-5bc1-4e37-a2d3-8f67e1bdfcd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59c16cd-b074-40c0-8ff1-0b41e153ebd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1f1bbd-e9c9-4fbe-aaa3-5e1bdc2a3a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360c752c-c257-4afb-bef6-8430ea0cc62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532897d6-783c-4fc3-9aff-7b476a4ecd6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbefaf2a-d341-4756-b93c-48f107649271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07048a87-4afd-4138-871c-8c90944b022e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ea142f-787b-48fe-9bb2-0a3cac0f14a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2e330e-a76b-402b-b47e-032e9e65b674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9870aa-e752-4ff3-b38d-a074763aa4f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cba03d5-59ea-4a86-b933-53c3de5eb790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0efaf1-a549-4ab7-b801-0480b9df4cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41608758-1136-4a6d-99b0-13ce2550d7a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--612b5449-e451-4a73-b6a2-ab786887aa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96ac7d7-0842-4358-9725-6bf2c96d03f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35dded89-4088-4718-a38f-89b861c97b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5828b7f5-23ed-4bf8-9e30-e25b3fa62c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d11cfc3-c850-45e1-928f-89841c21c657", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.243.5.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3c3fae-d5e1-4335-a2e6-96a37f48e459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.246.130.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbde5361-9feb-4865-beca-6c9a99153671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.247.137.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ab529c0-f647-4c41-aedd-4723c3e187dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.19.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49979ba1-a295-4426-be4a-990b5c3be2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8fc2aca-38f6-4741-b652-2bf1f0b2f187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a13827-a148-4f8f-9587-6567ad47cafb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc333249-99d5-44d6-8ae0-3e07e45c633f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3def3108-a6ec-456b-8fa8-fa6b3cecaaa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ef49e8-1174-49fd-9374-86d97b0a2889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.255.100.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086ec909-1e51-4712-92e3-4c3f161fc1e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.36.81.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7a6240-9af3-40f7-adfa-c748639def69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.38.148.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07ed939d-bc75-454b-b70c-cc65a5af6da8", "relationship_type": "indicates", "source_ref": "indicator--6e7a6240-9af3-40f7-adfa-c748639def69", "target_ref": "vulnerability--0aa844a7-7234-4786-8181-cd1e7ec582c2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3303a59b-05bc-4573-9c33-dbd7163781af", "relationship_type": "indicates", "source_ref": "indicator--6e7a6240-9af3-40f7-adfa-c748639def69", "target_ref": "vulnerability--668dbde8-32b2-46d1-9fb2-5cf4c09d4e99", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8a2244a2-dbf0-40e8-a1c6-cc59dafb4ebe", "relationship_type": "indicates", "source_ref": "indicator--6e7a6240-9af3-40f7-adfa-c748639def69", "target_ref": "vulnerability--a18ddcd4-c910-49c7-b394-de5f3e1b30c9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a509a86-f44e-4bce-88a7-2c72316a402e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.134.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7ae5b0-9bf1-4f3f-b570-919dfe6ef5fc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.65.202.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53d67002-fd27-4875-87ab-56627fbd930e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.66.141.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f715f3ea-af27-4afe-a344-bbaa7028aca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.89.249.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601cd139-464a-437d-baf0-9abc9973ae46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.91.127.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae379202-e854-4c5a-8d85-ca624c13c23f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfe72a3-4033-4889-8458-07894c89a0a2", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7398bd0f-65ad-44a5-aa09-2cc866274bd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e489a0-9c10-48a7-a85f-8892dc37f076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f62f9442-5505-45ee-84ff-71369f6f9b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.195.1.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--440b81a2-ae4a-4c54-8e7c-04e9d9cbdf5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.232.234.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e28ce5e-2660-4ac1-8689-24ab4e5b006e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.31.95.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ed0260-21ba-405d-a73c-87d83b7ff335", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.68.83.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ea957a-9cfd-402b-ab5c-14de1fe57331", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.107.88.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd57e39-1c70-42a4-b51f-4aaaa9617042", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.120.189.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--472736c3-927b-4388-8ac6-b2635a49aebb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.123.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ed7fbb-fb4c-4aee-b4e5-508af582a9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.197.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfebdfb2-5ab3-4168-83c9-d582589f7cd0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.45.95.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b968a14-9de4-42ad-818e-911bc8ec40ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.49.58.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25517ce2-bc9c-4105-b8f4-929645e9d33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.120.53.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e117736-778a-4f89-98c7-343545b50c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.132.232.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d485004a-6e89-43bc-ae85-9182abf10411", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.215.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889c6909-5d42-4eb1-8a26-bad71b735ca8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.68.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84f7b20-333f-40d8-80c8-4be8283f7351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d145988a-e836-42dd-8d9b-64c78f90401e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.88.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--824185f3-83c4-42cd-bedd-4d64ccbf06de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b626822-9688-4e07-90a9-03c6e730f172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6aa1b7-4d20-4778-a311-cd4dc2a940ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a972945-f477-4876-bbc8-3fa7c85848c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08564d06-d18e-4875-8b8b-2da343b674dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.240.59.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba75828c-3739-4af6-99c1-ddef5554ab9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.112.4.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3a0b53-372c-44cf-a493-50bd5182d8ec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.152.66.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f91c5df5-a093-4920-ab33-58c77a0820c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.154.113.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a91ae2e-b0fe-41b4-813f-c4a73ebf1a08", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.178.42.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c47cc5-99d5-4074-b2f9-7f1693990cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.237.116.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f75bd26-2385-4c09-938b-fb64cc2dbafd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.244.116.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92df19be-68f0-48e6-9778-386e508db925", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.119.63.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d38b7f-cbaf-40cd-ba3e-e764b2f46648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.136.56.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09909320-19c0-4c3e-9457-3a67c1cdf9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.117.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b216ce05-fa90-4b23-8b53-acfeb21c490d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c013ac-71d7-4a54-b107-a1cfee464d96", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.181.4.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fe11e2-e0ad-48fb-bf62-18f62a4e1792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.186.90.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7711021-13f4-45d5-a268-17a6d02b073e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.202.48.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bfaf01a-e6d8-476c-8940-8393be69cd02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.202.76.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6339e8df-6458-4b0a-bfbe-d2578a4e7512", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.206.30.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbbfabd-fec8-4bc6-aeea-3827f3c5e61c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.242.109.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85c2e1c-f7fd-4626-b844-5d192c3dccd4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.200.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a1b1257-e542-4b83-b5b8-82ae02a6c7dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.59.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb10189-986f-4e03-adba-3341d04098e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.241.76.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4733946-d598-4a44-85c5-1de47761e06d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.5.31.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1049e34d-89bd-429a-9b9d-90bd0890d3a6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.57.62.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e5aae8-08a3-417c-b2f5-e448aeefcaa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.200.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac466377-487c-476d-b920-47b2b1e7b283", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.142.2.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53479f6b-fb7a-4e09-abad-0d9116c57f1d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.144.148.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90672c3c-a509-493a-aecf-5c27128206d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fcbc117-455a-4faa-afc0-9df70314a660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353e3710-2813-44ed-8418-6d72d525c573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.88.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28de793e-1309-4f75-b151-e032892bfce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0cb764-fd43-41b7-b222-9724f7c28f44", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.201.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070c6a42-198d-46ff-bfd4-e17613726756", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.207.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91d3e2a-6873-4584-84d1-98bf35e29fe2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.226.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea78076-ff2f-4c86-810b-41b33c67deab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.163.237.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8c19fd-abda-4441-a99b-dce080a7a3c3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.244.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41aa8a6-240e-4420-9c31-5936776e2914", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.175.111.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05b6d58-1a18-414e-a1fe-2e632e1057cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.194.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbbcf89-f728-4a62-8a04-62c0aa89efc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.210.198.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e51daee-380b-4665-9092-4ea3c3f1bfa0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.213.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fded3091-0cff-4114-87a2-f16b9e99229d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.137.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8aaa31-8439-4882-92ac-8b864ff53dce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5947055a-c22d-4548-98ab-e1222f0ed6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff9666a-ba9a-4bab-9a80-2d446ce48a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266e1ecb-e3c3-43b6-9335-9f8ed9ef9af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df24251b-cf39-4174-a362-3ee33bcc8821", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.42.116.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70dae22-f19a-4997-bc1a-aa79dd767bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.46.210.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91680d35-f059-49c6-b8a3-e44226d43259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.208.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137d6488-3d4c-48ca-99c6-5410e98f3cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.214.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b239735-30b0-476d-b5f0-b4c0f6d14db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16334e5d-d61e-4b68-93e3-8abc4e1b251e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747d0128-5171-4ed1-ad74-56eaad33393f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6213e9-f738-4285-a5c3-6d1455404d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c2f259-d79a-4e1d-aea1-21dd2cf029d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a697130b-9b51-430f-8f1a-ff6c2d1738ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.124.20.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3101d0-98ab-4682-9641-83d7783d25be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e06e4a-613b-429b-9994-3a9a8bd3dfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f353da9-5f9d-4f6b-91b4-f59672d74c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0972b9b0-a1ec-4bde-86c0-84d10c6c7181", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--449cd51c-5ece-4da8-a07a-c87cff1c5831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf04b0f2-b6d6-4f5e-9d22-4ef250b2ad9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9104dc29-65ac-40a0-ae62-17604af8f22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84180006-a43c-481e-9a45-98746d500a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c104d843-886f-415b-ac35-393fefc4259a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf463b62-ecd8-4a30-8b33-ccf4724d34ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36c853d-0b5b-41e5-8a34-764032b02301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518fbd08-1a95-4152-8e03-348af096d515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de51088f-02b2-42b7-9cfd-5d6e17141f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d56145-a597-40d9-9b6c-43544af100bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d003b3-b969-424d-a05e-e593086634a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841a551c-6932-43ee-b1c6-28699decbf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe639b16-8bc2-4f83-96da-8de21d0b33f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ce3f5b-c883-43d1-8658-5448a22abe74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7baf9c10-2080-401f-bac4-7ec1c5eb174e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--417efc83-f363-472c-bbde-8798d01fa943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f909c122-b0de-4aa5-acb7-ff8284d24799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b700377-f2a1-426c-beab-269febc88c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fa9df5-5b1d-41c4-ae81-1cf00c19c23e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4d711f-a89e-4a9d-b201-d185280d8e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ec3929-b0ad-4b3a-8921-15f2f29e0372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f4b933-7d08-467d-b298-e413afe444c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0122f8-334d-4429-b036-73a74d37aa76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b207e381-0385-4e77-afea-490bb9674954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916e2489-727a-4418-a9d3-23c356a51961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c1d13b1-3dd8-42f5-8c4b-dec63fe9bf0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5776eacd-5266-48e7-b6c5-f1faabe43d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41b5b24-2d5f-4e1f-9a28-17c3332f29b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d67d27-8fcd-4591-861b-fda5e97b6076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6a2094-4fdc-4876-9fc0-243ef86d4aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de58db16-afcc-4afe-873c-433ba54df077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7e62fe-5aeb-4253-ba09-1174894dfecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf78aad3-fae6-4b3d-8222-fe27209b7cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faee7c67-da3e-4966-b0d5-225fda3c680c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.169.194.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7830202-9fe5-425e-952c-6d40a66b79b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbd2687-7926-4e18-9547-66d65713940a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72411567-bb83-4918-9eca-34561ae20ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4bae56e-bfe3-4db1-a17d-2445114d621f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.176.29.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd93519c-efb3-4fe3-8bc7-88f9599c1f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.179.52.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5172e4f8-ad05-4c44-9370-d4da7d2c5ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.22.147.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71911e4b-7a47-4abb-9830-68c2a65ababe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.238.152.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6305ab89-cb9e-486d-917a-4dc3d527c094", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f575891f-3b7e-4aaa-b789-830d55095721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.25.217.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5887309c-9a12-4579-9094-72bcd5f6596b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a427d09-f9e0-49ed-8706-356eac8d401c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a567d8-ce63-4845-aa7c-d7490af5062c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf98e783-747a-4f05-a4ac-9adda111ffeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75530bfd-2486-47fa-b301-4e103a117f27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0020e1c-45f1-4ca7-b4a5-e34e586e9ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c79aad2-5e3e-4afc-823d-a5c2b6a0a380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07c79c0-db76-4d25-be54-7b2776c346a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.30.14.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6df9213-c9b6-4cf6-81e6-14b5b4da6192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86bf151d-23e2-4945-9491-f8637cc0ff41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a586af-5cb7-44f1-83a6-230b50ab4acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7ac3ef9-f187-41cb-91e0-8b570c218253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.209.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6522697-d427-4e36-bfbd-86876bcf099a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e829bde1-9c57-4787-8544-a9b016ee829a", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c916e14-ea63-4bdb-99e5-99ec161652dd", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740f182e-a180-4024-94dd-9ae6816989d3", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4636a053-36f3-4a50-b006-b4b72decb386", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de6c4b8-c883-4a8d-aa91-fbca1a7a4cb0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75931eef-d729-46e9-a5fa-7f261e02317f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6fe0e2a-c7de-4af3-85e0-82d0607ad5e6", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a758d0-5afd-4e9c-b133-399d122f9acb", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03bf4b83-2423-48b6-b352-562322ecc2dd", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24e8f9b-e67f-4d68-8d9e-51430892e77b", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.113.39.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7e64066-ee5b-455d-a4b3-d4d93d52ddad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.15.52.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9466c908-6900-4d7d-ab09-8b89a5b10f67", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.163.160.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b90eec77-c99f-40c5-bf4d-fdb2b4e27d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abc70801-86c2-46eb-ad01-b9d928764d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2704367d-4e9f-470f-8fbd-787289f4275f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.180.12.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a40edc-6769-4b20-8145-ca61532d949a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5638a4d4-c095-46b6-9ba8-be96a8e3be10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fcb9d7-c3df-43d0-97d8-9ab893624b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac574dd-fb61-4ef5-8f87-236b94aa2690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.178.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34283832-0d2b-4f95-a2aa-e03d72aebcfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.19.186.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5ef173-0fdc-4bca-8f52-2a6e2a383a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.195.210.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24612a93-b136-4831-9814-0405c3f2a3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.233.64.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5596026f-a280-4d62-b3a4-e0c2a224e5f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.28.87.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2c5ad7-2eec-4a79-86fe-09b23e477eb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.42.205.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--451cd66a-1bb9-467b-b23e-e67ff21cd536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0d4e78-9c61-4228-8e88-8a76ab68ab92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b1a8ab-47e9-417e-a6f9-7c27c03b2a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a62f86-9c53-4b28-9609-50682b177e65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.50.235.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac800e4a-de6f-4aa3-86df-9de3c42f411f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.59.206.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76db950c-3ec3-4a0e-97e1-b4106ae32dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e75d66a-d123-41d1-ada5-7e85e8950ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9775cfe-64eb-4f19-91b9-fbea60ea948d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48815a1f-f8a1-462b-bf06-61998bde4f86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23eaf841-96c9-432d-b8aa-ee6dd55a3b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d441c7f-277e-4f41-9adb-e0b6cebd7e0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f989754c-4b53-4839-b03b-4bf76cc0b248", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c90474b-f3bb-4773-b5f6-5d6db975bb48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54cf0429-b34f-46f4-ae57-2dac0bf46bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d1fc395-0549-478b-8d64-e431c04d7ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8ccef7-2a71-4dfe-992a-8177dc3f2e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a05c2ce-c274-4d2d-98c1-7d97ede7857d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f624ed-694d-4957-a8e3-b5344474f0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75810635-5b96-4a60-ae78-8b15fed00282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a1ef85-14bd-4da2-a371-83a1af6bde7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f663c3-529d-4f07-abd1-647f7823fa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e872d41-c3c3-403b-b31e-bd0bdf84be9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6dc0bd2-fe13-466e-9fcd-f04a879479eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e6bb8e-8778-436b-8f2a-55e712c495f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1330e8a-ce36-4441-9665-bcc02c5a4e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45105f3-7777-4e22-829f-fe32dd93f979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43910f31-abad-446d-9909-afa380fc7e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2fceb2-a927-4481-a4d6-9eb9f9707c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1529a54-5b38-46b6-948e-fb5ad264ab78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8eabe1-38f3-4936-b9aa-2a9c8eee497a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.88.98.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffeb89c8-44bb-4559-b592-751cc84d0fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.123.216.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26c3122-1b96-4f38-9f83-a2f066c4e544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcad4658-d9fe-457c-8a2e-a9fed0b86593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.140.214.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d867e1d-6289-4cc3-8265-60bb92ee24da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.158.90.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28536d9c-5110-4108-ba7b-291ff169e9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.160.220.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9e69a1-ab0e-47a4-9d92-e16bc9f9554e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b172640f-d712-4c43-865c-72dba5bd38a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265d26e9-46f8-42b8-87bb-8272035bc52c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b36c44d-653d-4337-ad65-50a4a56c85b3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41b022d-14e4-4b03-9277-bfb027ac75a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b0e790-dbf3-4c41-9d05-2b697921eca7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.191.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdde8035-0bde-4a57-bcae-8d217f66934f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ba1413-8152-47c4-bab4-c1d49471deb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b290c3-d885-471c-bd31-7246e34ac748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1114958d-a9b3-4814-ae18-8823b35dbc9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4049475b-b018-4967-b5ea-b408b204911f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674c59d1-44ce-4f48-9b66-53b67882d217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7297348-d9b3-4c7a-b42e-d54eeb89d76a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.191.139.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd07c5a-1689-4db4-b1b3-c8a41c87712a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b052bfb1-22f7-456f-bd15-2b80781df3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.206.182.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b75776d-ce77-40b9-a9e0-55642e10203e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.208.2.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c676482-6008-437c-aafc-9ebfb758c434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c348bc53-e111-4ea2-9dfa-f87ef1a13108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240623a7-cfe9-42b1-b41b-be984645837b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2de0c13-094b-4dbe-b59e-a4974cae1b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74467ce-47a8-430b-9b3c-f86e30e8d882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881ace7f-c686-42d2-b101-ac4e89764191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d6c26e8-1cd5-4924-995f-14e76f25efc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0510157-0d78-42bd-b631-021c9b739010", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.234.95.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69b906b-af8d-42e9-af2b-a44318c03fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0261860-69d7-4ede-869f-693b4500d90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.26.87.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8810c72-cd75-4d5e-bc2c-164058e03c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.49.187.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0f9751-9e8a-421f-81cf-48bcfb0d556d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.82.148.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ad9c92-1882-47d1-a598-095c18639d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4c5af0b-9762-4369-a92c-7f834d4d4668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac375074-5668-48fd-9f12-4b5133cadd04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb32660-a1ae-4cb0-9de9-a527c1d1c2b4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.188.116.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a95a9d-6feb-472a-83da-9d1618e6fc30", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.189.155.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb4463e-1897-474a-8c82-ef49fec7a48c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.196.150.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca3d075-84f4-4b08-bc8a-231065472694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.189.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a15e1369-94ad-4fd5-b6cb-091a63f185a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ea1575-e698-4619-be68-bcb0a9231293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.235.16.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0edeff63-d73b-4563-adc5-f5aa39f1a7da", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.248.207.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bbca50-c790-47cd-b07a-a1c6ba1d03db", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.66.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daebbc73-cd2c-49b5-822d-967ba1c9c1f2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.93.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f751ba7f-c9ce-41ec-b32e-38e096f7a898", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.1.93.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a4d92b-9564-4b1c-99e9-4fd69319d9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.11.181.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3536a734-7f47-4c07-9425-ccd7e8bc0ea0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.154.207.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649acb8d-4786-4781-a771-8c18e4819ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.120.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ad9f76-42ae-43fd-816a-e0429356c1a4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.56.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7afd47e-516e-4b4a-8e77-09bdbfd01492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.65.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aec76ae9-7920-449b-938e-d3f9b1ee66f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.66.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d24ec76-f8dc-4a27-b7f1-7cd2bed7d114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.76.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbaab66-53f9-4a2e-af56-9ca136384977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.78.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a765342-7c10-4a1a-96d4-440f063ec8b8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.199.88.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73192e4-94d2-4868-9565-d1914a417c01", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.20.247.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a781f5da-dcbc-4639-9bac-7ef598f87d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.211.102.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ba3e58-bfa5-4f0d-9843-0952bc53ad16", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.141.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2614a4f5-9e2e-40be-9b8a-fba584511a60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.23.249.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69cbcca2-68a0-47a4-a7b1-aeab2feaccd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a1e489-ba58-411f-953f-dc000f1f0952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e32948-77e6-4619-8093-b06f80e22a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4f0219-11f4-4d12-a2b0-f04fe1873f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc112fef-a651-4537-9fb0-a91de99c24c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413a1809-d1af-44c3-ba65-e5f26049b8a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e850992b-d88a-4529-a486-9796af7dc7ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2336045-9b55-45ad-bace-836e12b82256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df5da72-0625-40c9-bfc5-dfce5278cee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458ad36b-efe4-4717-9ba6-b21c191d4bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b48f2be-2d39-4b80-8967-baee2aeb77c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93fb998-02bf-417c-b6ea-37fc94ab4297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fa8d02-0388-42ae-9e41-69f4a7f30632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20bea89e-28de-47cc-8e95-679085806a25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be12932-e633-4103-a6f3-3671cb95bc0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9dbe5bc-897a-4245-a265-179287964277", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05745d22-3b3f-4afc-aa0b-95d8a50d2b76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7485030-b287-40e0-ada3-754c7e8d86c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb70c70e-6f2b-4a59-be7b-38eaaa239b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16396833-ab0c-4027-a126-0f0acd89e01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00d35532-b56e-4be1-a78f-1d72e63a9a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d28b8b-35f8-4c07-83f0-78142b2baa79", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c652b9-a58b-4eda-ba51-6735c03b91fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3905865e-3dc5-477b-90f9-e00c3e37cba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fd201e-89fd-4ec0-a053-9bdbd377afea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58364cf6-caec-4f55-b24e-8dcc4b36967a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b9dcdf-dd3f-4f22-80f9-f122b625c6dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f861143-687f-4ddf-82f2-eb7b728589a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b632eef4-5f95-4d32-b42e-9099ce356a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ecd77ef-7188-45ad-baa1-b57f3ed45d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1916d004-d404-4a0a-a907-81dca2c8692f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe43b64-ff02-4c60-a5af-4c9da762fbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3389ae9d-7a2e-467b-8ab0-d630a242662c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6d3221-4624-48ff-92cf-232b3b5483f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb8510a-e8d4-482d-bac9-b9d61e4a7793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dad1be3-56d0-4fa5-9934-31471db14ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6756296-100f-4e88-bb28-b74a5d3a20fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7d2fc7-86f5-44bf-9b9f-b492014b08e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbae941-4093-4dac-b176-8f97bbb59f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559751b8-d2dd-4faf-9804-21190044e1af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fcaa61-aae8-4cd9-b563-d0050fa339f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12d22f3-fb03-4cfc-b645-86e03f30885f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f31c1b0-e16f-4ad1-905f-9a17e5c18003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9a5c29-8133-489a-9719-4b95cc57336d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4cfc28-c24e-4c3f-8c78-008d361894cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf663083-6e13-4495-8386-bdc5a7ab1b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb798cf8-2bc7-4b1d-a3ab-20462ccd789a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c3b185-1bd0-4306-a627-a3992d297728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5afbfb-9a7a-42b1-8729-bd5ef2919954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd752a54-ce83-46ee-a443-a24ba5bc7ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e45ae80-6605-4b18-99fd-803d47a52d60", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c2db85-4b29-43c3-b205-2dc90223202f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83cdc5b-cf36-46a9-922b-73a56122c28e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece491d6-1ad2-4a96-9115-17090a60dd5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cff440de-d116-46f2-a4d3-fb05245bc657", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4014118d-23a4-4a97-8b40-b9da184bd8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1464ff0e-8c53-496b-8e6d-accee42a1c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51707feb-f1e3-43cf-82f1-807c840ea303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d3b51d-6eff-4ad7-bf5e-8760ac98b85c", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c9c062-2cc2-4b19-9523-d6f4e8f44e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afce9c30-6d0b-4c83-a624-fcfad5f76a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a26f5b16-8a44-45d4-9714-498db82a8ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f88ed4c-a0fe-45c1-80bf-4b1e60deba0f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1d3b53-b9db-4d1f-a442-98b272b3e40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14409f7-65f3-45ec-abaf-6063970f2ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef74838-04d4-49c6-9d6e-7965b484bf38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3e76d7-3b7c-4b02-b6ff-39aa0d38d6b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0abd524-35c2-4456-a3b3-2c7d1bee9d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7e990b-6ef5-40d6-8b7a-79f33cfb270e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f86b250-8e64-44b6-9ecf-7a1f2d25611d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a61e6e-88b9-466a-b655-3b8fde57051e", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a580f94-e7bc-44be-b7cd-aff348b9177a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f722dda-7c56-4045-be08-a6cb0a553713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e31f2d-a753-4cbe-ba7b-1ea86f7dea07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78796cab-eaa0-444d-ae7d-40790c0716c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1d1ab3-7127-434d-bf2f-7c05ffcd9b29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a486a0-7ad0-4fad-85bd-08783ae1fb8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b52906d-0173-4f3a-abb6-99c80476ec0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f20a7246-9cce-4c56-be86-777521918a3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5f31ade-88fe-444a-9201-c1d4d48e5802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ddf469-ab2c-4479-9d46-f5769e0809b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623217b9-3a67-438c-818d-251e78a1b6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00db8548-3b4b-49b1-b220-f308529942b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2f68b9-6d25-4564-b5c8-5a52fbe463e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd8d05f-ea56-498b-86cc-620fb0efa252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.255']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4ada6d-dabf-495e-8d21-58a6cf53003b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b3a3387-3ab8-4a4b-ac56-5f4b1fbd9c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d0990e-c920-494b-86c8-aba3231ac25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00e7e90-f945-4cd8-8b91-47d8d88feeed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51e6484-f53f-4fa9-b9e7-83437bfd583d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c233f9af-2651-463c-b6c6-59321be725f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b478e862-1e03-4213-96d0-07bef60f96a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f15da2c2-8d1a-41ba-a4f2-a818148b5490", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7359f6b5-c71f-4e57-93b8-e96c1e679d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bb09a0-2ef0-442d-bb8e-d3f629d650fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9832b1c6-8bdb-451e-9dd2-b7e39da3f2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b833bef-3269-4eae-be33-f30b61b8ddcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5893d56-cf34-43c4-8f58-04943115730d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be36a69c-575c-4ea0-9024-869de9cd1ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acaf1816-d1e2-4cfa-8509-3ca81fb54cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469639d7-600f-4c78-a723-58494405d97e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37218f54-284a-4496-a9f1-c95352da000d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ccccc5-21aa-4960-bda3-1b757de90864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffd8ffb-5b16-4db9-883f-d01a5d478076", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78de3206-b989-4506-ac29-5e3a24b6824c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240e4ac0-2fec-43dd-8f93-c506de4d37a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64e7d8c-6064-4e9e-a23d-de61c557aa54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648dcb45-6c21-4d43-9e85-7c354f3cdaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec87f249-8703-4602-b2f5-c5f6d7366b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fc4ac00-e8fb-4a9f-a6db-c8ef51f064bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07fadda1-39a4-40f2-b299-c5102863552a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee0dc7f-ae73-48fa-b846-20489f32989b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a663a3db-c7fb-4592-92d7-f42dff01ec78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1fe81be-2c4a-4ad9-8cd8-59503a053694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e3eae5-8daf-4a4b-bd43-d7dfedfa79ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb5d08e-15fa-465b-86a4-d3ec0f79bb43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813376e2-a113-43af-b29d-60d9289dec37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372be098-c9d9-4aea-bcb8-380c5470ed3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7ac492-e83d-48f0-992e-6a52d4d3e444", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5712608-e255-42f0-9fb7-d2dff4fcbf58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd41a1a3-0c7e-4378-a54f-d6fb7e0316fa", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrparis", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b6d1c3-14c3-48da-a948-e9649ef47baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca782e74-71ff-4b7a-b6df-c5cfa71eeae6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4663cd9b-8392-4fe3-808a-bdb16f4ca8f5", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b081e06a-3faf-4fd7-b916-bf14cdbf8c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.38.85.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd998518-0579-4d54-8b9a-c8884aa75674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.134.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec3d5dc-137f-47f3-b09c-7aaedec7d2b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.172.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8132708e-552c-48d3-8305-0711d0da55f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.135.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c235c1f-8fd6-4545-b640-8cb9b5ad4bac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.177.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8857054-78ee-4a40-8221-b205befefb27", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.187.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--391f20f1-e027-4d7d-8cb6-89d8b413a1ab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.219.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6513c9-ef71-4fa7-9613-f2576cc641f7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.57.225.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5536bbc2-69e8-473b-bcf1-c132f6533e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c44f89b-1119-40df-8ee7-a96e24085e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.54.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79067e3e-706d-47fe-b2f4-800bff83b578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8804b98c-7ed5-4b0c-8864-dbbb1f0f8a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.56.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2aa589-26f6-4db6-a618-97ca24a54eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1cea07-e96b-4c82-a2d3-d3044a469c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.60.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50baee4c-6c4b-470a-9ae8-c6cf7d7a8c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.127.63.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ba5a52-0869-4c3e-9390-fc55608f0618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c861262d-33e9-498c-934d-89f2e824ae67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a42402-4c12-4270-b095-e2c68981f481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae0ebf87-d120-4960-9801-51e935770bc1", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef734a7-d2ac-481a-ad63-474f84a88245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3f7090-051a-409b-8f82-a1e33e98ef8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71bc22a-2723-4d25-8633-faa6b03c122b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19eb4ec7-1987-4d1c-ab89-4927d0dbb817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477a24f5-9215-4ea7-b20d-88899548c9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01e2d671-36c9-46ec-8e82-384a96936899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5372afce-7757-4ccf-ac9d-7c4dd9bc16e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cca900d-2055-4a9c-8022-cf498aa685ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db19957-99c6-4b43-a5c1-f66e8994fa24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--448aaf4c-5b69-48b9-9db6-0e0fd389be80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2546724c-7b5d-45d2-9380-3d39832a2c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13857e52-386a-45be-821d-1c342f335907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a84b152-6afb-4033-94db-d119baff432e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b96675-c614-4726-9d79-d07117f9a744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d337fc2-4de5-4f55-8f72-6fb1dc56d864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54022d33-1b37-48af-9b5a-efe712108830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9c2c9f-6849-4ea2-89f4-48db5cdd97e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55501d9-4f3b-4100-acf1-6a9f8571daeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065b6fb5-ac66-4e8d-a755-1718f3ae1f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0506cc94-7006-4db7-8dc9-28f234092aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6e6774-00d5-4c91-83a6-039ae2ea7d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9d67b3-40c7-4a3a-9541-e5247f3ee655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbb0f1d-3b30-4448-8ea9-7c00741230c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b986fc7-22c9-41ad-8aac-931aabb37cad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec58cefe-019e-4406-9ffd-06c5372cc66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0806284d-a70a-42f6-a703-3562fbf0e2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec48ed2-9adc-4a11-8174-c9a9d84fe098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11b89432-2bfc-4d85-809a-e1ee6e2cac3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42cf2f4b-34da-41fa-bcc9-77d8626267e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce4db3c-1ebd-4f1b-a01e-52c2b8a1dcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8295e61c-8dbf-4f11-b6a0-08376c7a4a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6c5d384-2161-409d-bda7-62209139051f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95202754-99eb-4545-90d7-3f938b96932e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fba62e-7ffb-449d-894d-e9112eb69da7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25244cf-7bf4-46ac-9bc5-622a7ccab7bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cfd1b5-e94b-4061-8a9d-8778d995477d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1cb04d-20a5-4e72-a35b-02248c613469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e49d49-b337-4ff2-bc56-53f93260f788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5e09323-3fed-4c8c-8492-168401e4e396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a72e89-8920-4670-ad83-8560f97d0564", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.102.253.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fbdfa89-e5e3-4529-9720-d803853ea44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.179.54.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4eee77b-e608-4cb9-af0c-3fa4b4bc04e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.62.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f5336c-68f0-43f4-953e-74fbfaf7568e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.50.155.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ae5774-cfa9-43a5-a4b9-cf3e7c875df4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40cf88d3-a71b-4635-9ad5-56637b2c6a02", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75384e23-d563-4f9d-8e02-75090a0e287a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f88a32-8b62-4f1e-84b7-093a8157d228", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985aceb2-5e2e-4e46-8b32-82757bedeb6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.211.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da85e43-bbf7-41f3-a750-62e6885937ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.102.116.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5986acd5-d243-4278-a137-82c12c43ce98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6909816d-2c1f-46ea-83a6-7b0e912dad68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7c2066-06f6-46ae-8104-87df2d85b486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.49.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cabf9e89-bbf1-4fe0-95a0-cfb8a885bfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.57.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f3f225-b226-443b-ab6c-8fe415d9535f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.112.233.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f69784a-cab5-4deb-a915-421083d5666a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.90.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--500e59e5-b7a6-413f-bc61-c5d262689e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.216.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b7c6dd5-0952-42fe-8a27-d7b6d9ba713b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae99060a-033d-487b-a1ac-ce127babdb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.217.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4fad58-eb34-4c4f-877d-61bfdfb41e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.225.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eae3d84-2763-4177-8361-6ba6626d0af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e21ddc9-bc29-4237-a103-3fb9ebaa926d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.24.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6780dfe3-9dd3-4ffd-8630-79e036c4e1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa8f3f9-7840-46f2-a58e-2575bc549d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460602d1-2c49-4c9e-87e6-aad89d3f849a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.32.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437a30db-6372-4e61-bf87-f85a959cdc25", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.41.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c64813-af84-472d-b1af-7d5ad8892528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.123.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2815e838-dfc5-45ab-929e-06093a4749c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.67.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4001fba-dde1-4654-b497-c24e4db201c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.170.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cffaeebd-db2b-40af-91d7-e9c91f72aebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.185.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b6438f-cddc-4fa8-8438-b26fc5525d3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14ab0ded-d34b-4b84-b6c1-050c09fd9eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.195.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43f1f9a-5cc9-456a-b62d-883ba7cb4bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.202.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fd588bf-1999-4556-80e6-60f6629569e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.204.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661ad6ad-092e-45a9-9b6f-5286791d0f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.218.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed86afe0-9a24-4647-81df-d192d2beec70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d384427-a610-4c78-9de1-d07f06a591b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.244.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed69d3c-3fdd-4ac7-baae-d665cd2e0c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a3cca9-0beb-406e-8c1a-062882035699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.80.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfcbf40-7e2c-4b04-896a-29e9176209a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3295d61b-52e3-41d7-a8d7-c93113752bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.160.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23709abc-7c5c-4796-96ee-3d7b6ec02274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.163.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e408c170-ae44-4067-8468-9c189bf4f96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841f2028-ae98-4eaa-9dc1-a47b262fed87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.164.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0373ee08-fc27-4d1f-8a87-abbd47ceeef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.200.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b106549c-8c89-4064-b98b-79212bde0e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.193.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659ce4ad-0d7e-4dff-95bc-f84264dbe1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.1.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--352babd5-c4a8-46f5-bd20-352b8061b481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c799b45-e4b0-4276-87bd-5015c389ca6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.10.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a70abf3-8170-439c-ba1c-87e43b2d7cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.13.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4ee847e-569f-4bda-8a77-77ab324ef462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f92db836-615e-4348-8841-b9f1082d83dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60ddc23-fc82-45a4-a636-01fa9d3323f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b23e7e-c0a4-47ab-a344-8d00d6e99f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.14.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b76e93e-437b-4255-8beb-c1938c64e9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd15ff67-3714-41c4-a6aa-4b3c058f63fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca9fe0c-2769-46c5-92ba-290e946eb4c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6035a663-bd9e-402c-80ad-978fb9680514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe42234-d47f-45f0-ae79-37be158210e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2633a4da-1b31-43a9-8897-ffd84dbc2e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a03f900-8d2c-4555-ac46-519cd40931bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79040b64-a502-4c20-82f2-c0c0cd78e2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01f2ce59-4237-48cd-a977-7aadbf56a665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d38267a-f636-4f5e-ac21-1134dc462fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.15.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6617d96e-2751-4146-9b45-564085cd4a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eec810a-5e53-46e2-af3d-f9c64a4f62ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b625a30-a8a3-4f5d-b0b4-e99baa4c597b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c0bd61-8d1e-43af-a95b-980335e4e092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.32.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0989186-d24a-406a-b1a5-7d393dfbdf45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eeb96a5-e6be-4294-bfd0-a3901624a797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.34.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07233e13-1b77-4f33-96f7-ef3fd3264423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.59.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80e2370-98e8-4731-91de-9eb9ae3b1692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.6.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace8e526-86ff-4738-aa24-7cccff514b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.74.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89321679-61fd-460f-8f1e-753f4e046b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.76.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5d8f73-09bf-4020-b324-e3ad19875961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e57b0f0-0b3e-42d6-bd71-934c1d74abdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58e6d5b-77c3-4055-82ed-68fcdb17a669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.0.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c746452e-cd55-4b9d-af8c-917327613558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.11.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4290c4b-c768-4c44-acfb-f5b62b3effa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.113.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1002d0-4c2b-4742-ad07-8900d6d5b63d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.12.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af7f9c3-40bb-4b44-ad86-6f6173f1947d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c953941-d5b9-44cb-9ac9-4e62a668725c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdf77a9-062a-4271-8507-5bb0efa639d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38528833-0aa3-47fa-9588-f14f8909477e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d360794-e9c2-472d-9446-f4242d0683bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.120.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d86ee18-8c95-44cb-b3fd-64fc360dff16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba567e2-a24a-4fc9-ac45-67d6e2c54ec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131f13e8-d296-4d78-be35-7dc91c83b0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cab624-903b-4ffb-8aa2-de8c8ade2f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a734a765-21f5-404a-bafc-370d7d441129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.121.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b26ca19-7b21-44a9-a028-50ad1d23d723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5904b9a5-e273-428b-9e09-a209d09bcd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca233bfe-a8cb-4293-9444-93d9bc3381d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.122.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286629af-7e39-42e0-9799-2280f97e991c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b66e49f-4428-4bea-a15f-b8189ce48a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.0']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe93b879-b197-4f1c-bd01-7bc2d1218522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afe87c7-32b4-4f6a-a555-b48e0becaeaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.127.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becf044b-96a3-46f9-af31-53ca1e098637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.5.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23017cd5-5c3a-4cb5-850d-e8744e074c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.6.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508b6a6c-ec15-4804-a76c-57dd7e352868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2887ab45-1651-4fab-a3ee-f0e6e9a37572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b81c88f3-8df7-46ca-953b-416860411b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.7.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d76823aa-0e12-4418-9ed5-9e44625f660b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1672ca-f9ca-498e-90f1-069059821c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.104.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ed9517-d018-4d44-8e61-6da74f80745c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df22bcb-815a-4f2d-825d-20a60827426e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c815a1d-f740-4d87-994b-89845362e0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b31e58-b7b0-4d4e-af72-7fb484c99ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.105.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b27794a3-6d6c-45a0-8947-82ff029b9d0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5910fa0-6f83-4d99-8f29-b5287807ec97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8ec106-185e-431b-8569-549aef820706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b09cdcf-6244-4408-96f7-6abb939d99b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420f3ded-521d-40a3-b659-44c9f464d91d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.106.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd55bb4a-7580-4945-bca1-5c9ce5892f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ce0540-ad9b-4b21-bfe0-b624b91a9d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc7f3ca-b6e4-4f91-a6c7-46b0daf80a6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ac19f2-57a1-4282-86d0-60f3fef3ae35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f568d7d9-c125-4be2-9a1b-a47c94cd7646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.107.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81837f42-9b28-475d-9d0f-25d6bb5e8b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.48.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01413b7f-da16-459e-8fc8-1a32c5824eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b3bab3-6d7f-4413-8fd5-d120a1741bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb342208-a749-48ae-9fc5-fbe3165e4db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b412482a-004a-439c-928a-47d3264e263a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.49.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272bdc53-bb61-4916-bdaf-535595e4730f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2509a9-df3a-421b-9299-f393aacfb242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.53.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb7d1c4-16ed-43da-baa6-740170e8197a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.81.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29df8b3-38eb-439b-bea5-d361b1519637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.85.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb73375-8779-46c0-93ec-ed07c59b3f47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.26.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da477a98-7e85-4dc5-9b75-af173c2792b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.32.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b849455-3a12-438a-88ee-4037e301130a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.8.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5356a6b-2726-409f-8e31-a179c9b05fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.187.184.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9c876f9-9da4-4d5c-b5f5-a8c7c52db7cd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.193.141.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57bea15c-ff91-4f7b-a4fa-ab76ade6ef43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.213.62.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272beafe-91a4-43e5-b8e9-bcbafbd62414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e678fb-13ef-4701-863f-e20e474b96fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.221.68.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5acbe5-495e-4f1b-900d-7523def1b36c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.226.61.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316ac307-1a80-43ec-8f07-ee9a165a7036", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.228.179.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b472c9a2-a4f2-43e3-914e-dca0c056c107", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.229.115.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04826e3d-942e-44e7-9434-818689e4068f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.162.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedb5128-0f91-4264-bf31-e4be68a2593e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.244.90.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e5091c-34dd-4e61-a76b-1a01462a5d65", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.255.61.0']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673bb946-8bb7-4f35-abfa-2f29194b6508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.21.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28c7c16-2896-4074-89ad-80fcb951fa51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a716d198-ccde-426f-8d04-b1f39e092a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.22.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7da23d-cb0f-4aea-bd38-a98de14fddf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8197301-25fa-40ad-b4a1-6377bc595227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b466df-92b4-421e-a789-a2083251a9f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.23.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be77837e-9496-453a-a930-9c4978edff2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd727cd3-6b3a-4b7b-bb6a-3a4e59efe0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.57.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c6e576-6acb-49d9-bd3e-a03bbebbc582", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.31.232.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b93c17-55b4-4707-83af-a3baf2b1a4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.38.46.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a287bfa-f50f-45ca-9492-84d648e2c9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095ea7a8-2eb5-4790-8fba-fd8c456ac8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.41.0']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688c80e1-d050-4e61-ac49-684252063df3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.115.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74383a65-5753-44d8-a979-e2229a2420fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.93.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68446b3-b895-4a1d-97af-3e637017e7a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.232.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad0b4c2-69bb-4473-8244-84d126a0b8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.235.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe04934-d034-40dc-996e-e6b6be68eb89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.246.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26dc884e-4ed2-4ecc-a970-0fe13f5b6a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.235.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81f0385-be92-4191-ab52-66ae771356e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.2.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d855f8e-03b9-4b02-b04a-19c294a035cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55d1a35-838c-4589-bd76-88664c77dd05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.3.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff097a25-1034-49e3-9881-487076e3b34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dbf1d17-bf4b-45f8-8a81-be1a265c2c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.35.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddaf7d01-f8bf-4074-bfed-adacb199015e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.42.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c430517e-de46-48f2-a5d6-1bc8219316f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.50.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9acd68fd-72a4-48ec-ae9a-575ecae80393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.62.193.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc2f829-74ce-44a1-b5af-cdeb9e4c9192", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.63.37.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f574aeb-517b-4822-b6d1-065b33e11bce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580a0bae-8162-4dd3-9375-4847eca82a0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36dcd00d-42a7-4c6d-9c12-d0e8241fe8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb80b95-a971-44e6-bd40-e9aeb1c98d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68df3fe2-4a35-421c-b56d-f95d36fa5cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ea5adb-993b-44b1-a3fb-65554115b1ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.104.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4820a0-4a1d-4b5b-a9e5-2eb70dad7cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77a0ccd-744a-43c1-bed6-6ca01922836b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5366ee5-5158-48c0-9951-cca36eca2aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c104f6af-3e33-497c-b8d4-d129f3df9a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e20ffc-b889-45a5-a700-a97290c797f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05727844-4579-4d62-ac3b-023d694df38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58435f9b-8336-4c6e-b84e-5305b1fad7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--420a1d1d-718d-4102-9a55-ee28fc63d4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1af312-9dd0-4560-80f6-f5ca651cb26b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787f2a30-4be9-46a3-bf9e-f81b7fa82451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.105.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88ceef0-4729-4d75-b965-3e4b7e4a83a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7193da8c-95f3-4e03-a5e4-19436f5560dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.106.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df931f14-0e5e-436e-813a-86c8bb1a3e4f", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.137.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fe3f22-96cd-4fd6-a55f-af3244ff0f66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.138.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f3cdf94-5ea4-4ed1-99d9-a14bc69f0174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.144.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff60844-5541-47fb-82d8-b84aa8ccf7e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baf0a36-f2f5-4fb0-b32b-f5631568e34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.154.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f63abd-c5fa-4df5-b8ba-bb565c78c606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.168.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52fe952e-d032-4e33-8c06-2c5bbe225145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ce4f7c-0783-412e-98e1-36135305b68d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fa936e-2aca-4012-a0dd-b3ce08524dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.192.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef59f33-972d-44ff-acdb-f9be6f311ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c443029f-0bc4-48ad-a3c8-9919ae88c853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f36f7f4-135b-43d5-a6de-e6e11bc246dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256bf957-ad2d-4f33-81e4-eab1eb398c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a892e9e-41eb-4ce4-a75c-49dc9e8d26cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d14f24-20eb-4608-9fa8-cd2de6707816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0c068d-eb62-4886-b26d-c848b07fc402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5597cb-77bc-47fe-acb4-d7970ca5cf6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a1fe51-9386-45e8-ba86-d31404637149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4d28e9-f8cf-4689-b18f-59b60ce85f2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94ad80d-6a51-4603-9258-b021b968eeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee680ca-fc10-443b-ad7c-f6c268b149b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8a65f8-2c5b-4316-87c9-c4d05318fa8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3fe13d-d4ea-49cb-a697-09cc296f0289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.193.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c43d5be-fb11-41fe-8a80-d275bb81bce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef7c101-eaa2-4990-8b84-3e1ffd8482d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2139bdb8-1304-4cef-8efe-d3bf7e00ff02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ace18ff-8687-4082-89a8-8ad0ac374026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461e76bc-7c10-47c0-8ae2-04d163ad0d30", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba271f54-5114-4dfe-b2d6-67f212a2a1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30958e7-1e7d-499a-b06d-de9422daeefa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b551171d-1e61-409d-93a9-359145b05a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7804146-52e6-4c9e-870c-30555ce1cd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e19b1fa3-1754-4783-9cb1-039a107efc1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8331e823-d451-46d3-859e-bf79d2384e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ba39e7-bce8-44d9-bbec-53ec6d70b0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51e4ab3a-9142-4b39-95ff-888332d137ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.194.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7702fbb-8676-498b-b5ff-7cd5619ae3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3070fbe2-05f1-4698-bd39-1c10c76f2637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51908f5e-6497-4355-8f8a-9a4f4162002c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c88038-d10b-45f8-9c6d-83f14acec729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66dcfaa-760c-46fa-99f5-3725b83d2104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad528cb-dabb-48bc-af5d-822e0cb9dfda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a040376-2bf5-43d8-a99a-2f05fa22a6fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab4a602-79c6-4630-ad42-87ad13e019a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b907665f-d63b-406a-b88f-5514a6c8cfcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874094e9-ac02-444d-8085-fc61d3d2008e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.195.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02489a3-24ce-4915-90e5-b0fc33896c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726f0dc3-5847-484c-9de3-8aa7c9c7fa62", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.78.0.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78ed8ee-90c1-4a1b-87c0-43d2aaeee679", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.72.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd40ed4-d9ba-43bd-a7bf-dfb4e3ffc437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.82.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2986ab30-7fd5-4629-ab31-cfb549772b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.83.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f0e134-2e62-4839-a82f-c919ea54cde4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.88.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045de07a-9297-458c-bdcd-4358aa5ac094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.47.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6bea32-9e69-4e23-b9c2-89c3bc6cefee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.170.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d124b7e2-c95b-48de-8329-3feef3cb4063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.27.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556bc3af-d278-43b4-b9ef-82e3219b1600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.49.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48990d98-f9bf-43ec-9827-603462b9e3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.118.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d087703f-51f0-4bab-9fa6-69d37d9668ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.145.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f3d58c7-7a8b-4ee4-aacd-5e935b57de9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6b1c01-ce03-4173-a46d-52a3b039e853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.167.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1f4af9-d2e9-449d-9e15-2de8da28b68d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.87.219.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f6c7b2-343e-4eba-8a1f-30ee58ffde24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.152.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3926f108-6ccd-4e27-a755-bd841d2e6350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0104ef52-32f0-46e7-82d2-e2e4570a21c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.166.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3363ed22-7a48-4028-8622-ca49c73a3339", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.117.108.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ef747a-fdf8-4405-bea7-b2adcf1a47ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.196.50.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ac5e03-b252-4b27-82ed-acb7fb10e5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.26.188.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3cbafb-95e8-4837-92d4-d5dd3ac7cbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.56.131.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68aeb00-9f72-415c-b35c-dfc03fc2cec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.13.109.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e8a1fbb-a82f-4b8b-a054-3a8eb96a1cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.140.123.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3313ba-3f1f-4224-880a-aa528a126299", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.145.112.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f2c7ee-4cc3-4282-948b-870b25ee9275", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.17.146.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428657bc-1128-40ef-bd11-8b32f4566500", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.249.87.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91f8b10b-9ce5-44ff-b333-d971606796ee", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.110.28.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328c0d86-b8ba-4f53-bc79-6f4e700e1732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86890f6b-65c7-40a2-a270-1d52982355ca", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.152.49.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b86aab-60f7-4854-a7b4-5e296fcaed78", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.184.134.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c871963d-d6f7-4e1c-81ba-b8f0786b06d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.40.188.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d9c0d8-5620-48c9-b6f4-805e4add8c13", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.78.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e82ff07-ace2-4dd5-82bf-7e1391837cec", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.161.39.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d673791-aab2-42cb-b766-5091e8dc7e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.175.125.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c977c9-73fd-4cd0-a51c-a54d35d0937e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5e32f7-3021-4817-b587-98cce991a805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ce6096f-644e-42d1-bf0c-7318e5f4ebb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a418155-cc5b-4fcc-a813-d718651c790f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.56.198.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb736db2-717d-450b-8a99-49938284cc6f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.152.206.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--786010ea-8aa2-4dba-8ce5-478c882720e7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.44.122.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--776f386b-cc73-4d3c-9880-cfaad977848f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.26.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c59731c4-3265-432a-886f-f3499aacae21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.48.28.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c5c9dd-840f-483d-89fe-a2044b69d713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b40224a-593f-4291-a5c2-b4f73f23f0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abd69a0-f00e-4e3b-a030-a566813e55a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdd892b-313a-493e-82c4-588ecaed0a56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba74bc3-3329-4d57-86d8-89086f682019", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d92af3-6cca-404b-a485-58743b865c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--663842f2-a3ec-415b-8e2d-a52a7722e1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c05c84b-38dd-40d8-a6d1-6486144cb058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6845e523-9cfe-45c6-acaf-de262ffb3552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0513a8-e50e-4d38-bb7d-17443f5f4e27", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea69375-c35d-4b97-9405-fab3e84089f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bc1ffa-ecff-4b3b-affa-14680dd5b6a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f53e4ea-7c09-4c24-933b-30212eb25a40", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6e0c0a-0394-4ef5-bf76-17396edc799a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79bea9d-ea18-4224-9a5b-eb1b78a3eba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adef96f1-018a-4783-9e61-99792109817e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ffc75c-afa6-463e-a685-068e4b4d6d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6d842e-890f-4614-836b-d5e1b0d77741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0280984d-a7b8-497b-9cd2-2807183abe08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b52b1a64-82b7-4e6e-9074-e537f94b1e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5442f31b-a68d-4389-b6c6-a06a66b0e12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2727ac1-56f9-48e0-8821-db39cfdf0e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b64f9e67-9700-4599-bc41-89b0839658a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58fb10a5-0eef-432f-9c8d-719541c1b413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16a2fbf3-c29b-41f5-93da-259f8dce24eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92b67664-2eca-4b52-ab06-d444042b6ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5103b7b6-d50e-44b1-b019-c1e760c84bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67710111-f988-4c37-873b-814adb7a37d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e362c97d-d56f-4498-94a5-c780904f310e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972950f9-f8bd-4070-9927-9c3cbefe2567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c6f5c3-172f-4635-9ae4-9f8e588f7ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41417200-2a8d-4739-818d-39cc2f7b4c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a50061e2-bad7-47fd-929c-7efdf3b6ae05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ce0b92-bb1a-4c1b-a31a-fe2ec5f098cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f8b15a-42d9-4579-8969-7edf5ff6ce2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659e3a6d-c84d-4c81-ad96-e4ed95b71a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec03dd3-e391-455a-bc4a-aef0bcbaaec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ac9737-fa60-4f39-968f-2f8822c4a87c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdea7a6-98ca-47b8-afab-abf1627ababd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5f0362-b6d3-4b2e-a24f-d9fa2a653a8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c420835-ecc5-41f5-8082-766d7931b26b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3671fc2-9d88-4b22-b857-08618867cbe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f13b4b9-8cf2-4104-a394-e5c7b6315605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d485c51-9fe8-44a9-aa82-2c889dccffb7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bdc40b7-4ebb-4691-acc2-e941d261f7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff26e9f-e236-4c6b-8986-45da72cee29f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5aff5402-0ad1-40f4-89f1-1c2a0ea47cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73d05ba-eff1-4055-8938-af3e15c4b132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00b66ce-63b5-4420-98be-893cba6081b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881270a8-6f5c-4739-94b8-f282936db381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89aeec6d-4e2e-482c-a4d7-37cb1ee6ec69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb0ec00-ac01-4eb6-bc2a-ef6a45271fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2b1a07-76e5-46c0-a483-8b2c67b7667b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f4e15b-8f8a-40b0-9ba1-7d7e94f5dd16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521bfd6c-1490-43b6-b068-798e85dfdfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c9192d-4d98-4d8b-9c95-c83a6fea06d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb67ec12-05d4-483a-9607-a50fe70405d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a0652d-07f8-4a62-89e3-3a4c7df1e0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40ba5d7-1ca0-4c49-bb85-137954ccddc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89cdf3e-d4cf-4ff0-90cb-f79bd58c4edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18411c0f-b239-4c09-8825-b5195dc11256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f838ba7d-8db2-4544-91e6-edfe37fbc097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d394a8d-6a3e-43f6-9ccd-d54071a33c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726daa61-1e92-444e-93a9-a50e3d4badb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216ecd8c-d300-4745-b2c3-1059f2b53d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dddba00-5922-4a9e-a79c-40e8b0b19da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dcbca45-63f4-49b3-b669-f521767afb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c54e9baa-b593-4cd9-9f6f-8b1ef4efc728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c2f52f-3157-4488-8e99-9cd40e0e9836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de77022-4a71-4c38-be0a-1e9efbf6668a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e018451-cd21-417a-b1e3-68f97213fbc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deaeb4b9-254c-486e-9e70-c94ef69e020b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cb7cba-1215-4ca6-af97-b268f6154b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f966f1c2-da92-4b1f-bf56-1cc3e0d923fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74749587-4683-4589-9efb-eebe8d91c458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1aa2ba-1848-4dac-aaa0-6b7a224c8774", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrparis", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c2f455-9963-4c8d-9cc7-dfa99f6c24cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0006c0-6555-4262-a48d-b236cbba64bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edce46d-d616-4909-be95-b6e6fa4d0956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.255']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f1135f-f789-45ed-b3db-523b9cbb138f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314d56b3-f6ec-4429-99e9-62716e682e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4665f7a4-8167-48de-a27f-50ed659e5a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c3e5d12-2219-4307-a974-f09795edb9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9e5b09-63b0-4be8-9f11-d268acbd133d", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrmelbournetest", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251b2c06-778a-4d4e-86ae-64f2e48273c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36259520-d57b-48e5-88ae-a431ab7df2c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2ea7e9-b6c4-4b8d-99ad-94af8fa5e321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b34261b-e3f9-4d4c-9ba1-52a13ea14e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308040e5-1a14-4bb2-b4c5-e9d2692ceccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97795740-6859-4e41-b07f-da932f3b1a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ddb4d1-b234-4254-bc51-359aedbd49f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7a6c47e-7fed-4881-8dda-1faf22cc44fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa1331f-bb58-4a97-a639-8581b1e190dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819fc7a6-d91c-43cd-9985-80a082ff5ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30b0726-8505-4013-bb87-8d8a0d9a1fbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0cf956c-1811-4e44-9c5b-18709aa6fd4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b901a59-8b83-44de-867d-e64ecd80c06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8efa820-fb7f-43a4-9945-7d89f384ec6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b143351-8c66-41db-9e19-774cba8a412e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c67882-1019-4fd5-9bed-862bac649847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--594d8727-b996-4998-ac38-cec055164482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28968ea9-7b8a-4919-88fa-36c47fc2ba06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9331b48-76e7-49da-8c0c-4b574da16aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc07329-8aee-4ebd-9976-0639932f6728", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e7b1a0-90b0-4984-b23b-d3e6ea6754f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bd5ebb-4de2-4524-af66-89eba4312583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fe6b49-1268-4b90-90ca-72933969249e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5c2a72-ac74-47a1-8687-5b8ce4dea001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e93e1815-d534-42b7-8d0c-f10324f09a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--460fb8dc-2c38-4efe-92b6-ab042d62d11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2920f2b0-bb96-4d42-9b6d-55b9207267e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f6389a-17c8-458e-9c92-c847d85ab289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51485855-3679-41a4-b34c-3f87bdf33843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2443a36-a4d5-4eb9-94a8-b68db5640805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25711b9a-ba5b-4662-bb14-36f7618bf37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.170.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8211bbf-1fb4-4f9b-8987-be672b81575f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.174.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feffea76-7e6f-444e-bc2a-302b549e7d8e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.22.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8372a130-1bbb-4be0-a5b4-b3239519dc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.120.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb6855a-2464-4f89-bb84-ac3469eee3e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.220.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb9b6fd-5d4a-46e8-8049-0a43492bf37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.224.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a745223-92b6-4f0f-a1a1-6af2ff6b096c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.231.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c5b077-5e74-470b-b8bb-ed866ad23ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.57.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfbf08a-8f67-41a7-a249-2b2426a708fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.58.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1233cc53-9f79-4b61-bbef-7413f9b2c431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.86.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7921a6dc-c577-41d3-845d-006448cb0641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.221.176.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e971eb8a-af33-41f3-a0cf-ade08f7ed7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.223.228.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4419588-d9b1-441d-aad6-e49112d151d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.14.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57414446-9105-45de-be65-906a9dd923e5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.230.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32dfb36-48cc-4d5c-9a95-75d71b579971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.244.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c017234-1a71-4715-8130-691c08b30411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.0.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c11451-d5b7-49f6-b136-9da9e8d007f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.31.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6ca78e-5c6a-44bb-8825-8831072465d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.34.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef852fa3-a1ad-493b-936c-05a4ae46a5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.4.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58973755-36a4-4168-85ab-651a8f917983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.6.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a350acec-92ef-4a41-9228-c11335f0e489", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579620b3-30d6-472f-a075-a7bb4acf18da", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5191df8a-6765-439d-a4a7-a142d8ec00f1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a8ca1f-5f60-4853-a93a-ed5968fd24d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e0e978-4f38-461c-b9ca-da4be6f7c769", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3046165-d04b-4312-b73f-6c6447fe16e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45b7936-b85f-4aca-a049-91e813b43888", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d72165b-cc15-4117-b51a-da465102ea48", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2401e54c-9777-496e-9439-99d6420716ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f7712c-fe9a-4a7b-a615-15fda96bffdb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d30f395-4794-4875-816d-51aa04ac67ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae35e2b5-c505-43b1-ae2b-56be034904a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b0884d-241a-4bb3-926f-b0f536000353", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06142e99-7788-4e37-9d53-fa541eff632c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27be43c4-967a-4c5b-adc4-34325f9a7791", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c53d626-7614-463d-9449-1bbf10b40b25", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b8f118-a456-454d-ab33-e9963c0fe9dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.46.13.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2294987e-be94-4359-869f-553800e82953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0217298b-018c-40cc-88ff-440a6219a53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60444454-0439-4c2b-9479-216a4c1d39d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd63983-88fc-4902-8003-98179208d81e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aadcbfe-7f6d-4eef-8a81-6e5367efb854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2ab473-5148-4a2e-ab41-ed35a0e46b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a1a8c3-d286-4df0-9082-43234f83fb99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f87f23d3-d1a7-4829-9235-39798c564102", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.109.247.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad31e58-d244-4f03-bc6c-ddddad05a148", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.70.218.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f76e45-ff00-44d8-b8bf-4fea7d8dc3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.84.101.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--863df56d-cc37-41c7-a4f7-d62d1a121571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--037fb77c-31ff-498a-91ae-64d5e9fa581e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.242.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1904c5c3-ff18-4db1-ab7f-b73cb85bd68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--834f23e4-bf1b-4508-ba61-cc6d83b31fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '208.87.243.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3054badf-4c8c-4451-b3d0-2c74ae384d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.14.89.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f812081-96ce-4cca-85d6-72cfc8ccd406", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.34.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b16c6cbd-5930-4296-9203-99eb73525191", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.41.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c3f8e1-67c6-4b79-b211-3578c118e756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff71703-1751-475b-9541-01b47c3d1d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.222.101.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c3ca63-32b9-41e1-8c47-b4ff4a5e2d8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.37.38.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d88173-b7ae-4c1a-a6bd-f45a84738552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.28.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a63ac5-30c2-4bf5-a695-68f4ed7385de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.82.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4e261b-7bfd-4e56-9151-38c8386667d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.88.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6332da-6de2-4d79-ab36-85da713f1dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.90.232.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b1404e-f96e-49d5-bf3b-6a7ba292e139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.173.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12bee3e6-2d52-4df8-b6ca-358ca3903f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.184.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2814d8ee-9480-4578-8d60-91c2561bbfd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.185.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3729f2d9-ff6e-401e-bee1-84d0386cf645", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c17541c3-aff3-44f1-8ce0-9defd8f5e263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.206.8.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb501900-1ed9-4e09-99a3-3360e1c0933a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.210.155.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e0d1272-d102-47c8-8b4d-03edc24a267a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.211.122.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faaed463-2508-4438-880d-9a5311808d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.180.105.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c12846-3f2c-4741-9d23-ce49befc57ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.253.31.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608a3e73-f4e1-4554-812a-04c9832db454", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.37.174.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3f33a5-5e40-46de-852a-1f7bb7aa14ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.40.167.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69332c78-73a0-40d8-9699-e16375b98058", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ca40ec8-5cb9-4fe0-9174-32f3e06e6920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.127.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f71cea-b01b-4c85-81c9-4a18d01e894e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.216.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91f09b6-70bd-40e5-bc5e-82d5235c407d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe2710b-658b-4730-ac54-847d57e9e312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.192.240.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d3f6a0-4749-4b35-a84d-79b7f7582fad", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.199.105.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d66997-ca42-48cf-910f-68f70116193a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.227.145.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f33896-290a-47b8-baf2-62de313757c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.231.190.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c22c7f-a74e-41da-a747-3b8f0faa7343", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.51.34.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5b1011-7578-4cf5-bc01-5f2d10868d3b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.135.168.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cda3489-ed47-463d-9c3c-7e48c613ba44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.166.84.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab6078d-f669-4290-8748-b3ae71806628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5257fdb1-e7b7-43e8-9dba-6435e0157d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d939307a-870c-4ff6-b7b1-ac9a2922961f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6773d10-46fc-47c4-90c5-def0859e734e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82738a94-9ec6-4677-a0db-649d4d32c82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0cd58e-1ed9-4ffb-8bab-e069a3f62c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb68aa9a-45ea-4158-a9d8-9127195fc017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98085b23-ef09-404e-8f08-c4e1afbd5fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.177.179.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05999800-34ed-4f35-aaf1-4a1c1961861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a994f83-3f45-4ac7-8113-10f0c1cabf98", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fdd998-d50b-40ca-b227-8ca922f12677", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea666600-527f-4e18-8b1f-8e37a3b2f5ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1663b7e4-eab3-411f-8930-b6ca5a17603a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c7500f-4ea6-4e79-a564-4895e6704a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5149a7e9-cacb-4292-b752-f4f3a6a0175c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4674d6c3-aa12-49f4-8f52-6f659642ac58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef024bb-8b8e-47a9-a4de-83165c4d82b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--905f7af6-6358-4f62-8e1a-c511c3fd9746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.170.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef87b5b0-b9a1-4d9c-89c1-57df6d84abb1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.238.176.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc8da82-484c-4a17-803d-7a980b1c5aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.110.173.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d9e11e-4b3f-4d25-9d36-376dfa95ea71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0875ab2f-4464-4fc6-9b61-8570e7f1534a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c23c77-52e3-4961-b511-1f7fc4b1f59b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9f3eb6-d764-4b9d-bed7-805c11a7d036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56e1d8e9-ca01-4967-ad3c-a39ccd2b1eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682de883-a9c9-4bc5-b91f-4aba0543ab6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9e57b4-cc39-4187-a91c-9ba794dfb2db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3344ce-5a60-419f-94b2-57df12fd15ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad34de40-bd15-4f18-ae31-91d199ea3fd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd937d6-6c16-45be-af09-2425607853fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47593be0-929e-4986-8afb-3cb48b78d61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d62eec-c93b-4a12-9598-949d3c662798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b038851-045b-4746-9f07-6616e7a89386", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29688c6c-5975-467b-9213-7d967a20b180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--147efb01-7439-4aeb-8327-8c4b32a30b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444b0ca1-84f2-44ee-a7e8-82d15dbf0a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254708ae-084c-4682-92b6-77a8c4170250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54faa637-bbc0-43a0-b0fd-192e50f30bdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38508584-749a-4459-bd54-94502ec04e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84fc4ea1-df5f-4c04-ae41-5dd6a3b3b0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dee1d3d-968b-428d-b6b9-5477b82c4037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b99fb48-a79e-4d3a-9f4f-30e4d8b82bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbc2e78-8869-4612-887e-deead684dfea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f85360-49e2-4a8d-9eeb-e80bdfd4ff5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522b3027-383f-4ad1-ae48-d930b1d9a35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e0b0db-85c0-445a-89e0-280dba8c5820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d931c9-25de-437b-8fc4-f95518ef2c70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5739cc-cbf0-4443-9e98-68ef41fc6056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2cc16f6-cb6a-4188-aef2-3fd3b2700441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--428698e0-9909-4901-abcf-44874b928bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fec31a7-4d15-4f5e-be25-b26b180a297c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d390a4-2f50-4642-ad37-a06f7454e89a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bccaa0-8aa0-44e6-8241-14525dcd0564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c100e41-3b49-4613-b0ce-73a463e98116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5afe29-bada-408a-ac31-04f137a7a694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48627cce-60a8-4b8a-95d4-0852ce6eed47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315c0d0f-ca40-4cbf-9574-d217a237e810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4591fd57-f3d5-4c08-8145-e62dafdece50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28814e36-4718-414e-86c3-e5c1d92151c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fd626a-323a-424b-855f-a589e039922a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e7ec35-d817-4cb3-ac87-5b536f13d547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf49b1cf-7f20-478a-9926-4d4555c6344b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d942f98-30f2-4602-8170-7b46c9e9350d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66e6a75-4cd2-4c1a-bcfd-b0c24eb34693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25ba759-b58e-40a9-b65c-7e225d50c786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841ed508-988e-4476-ae4a-2517b111e16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8d1cbc8-e4eb-4fbd-8f9e-b8e10bb8ef23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b95fe69e-635f-43f4-8777-f73181f4511e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43638df6-f440-41a9-a5a6-93686f725ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3463fbd9-8e23-48fc-86cb-4331f976b20f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdb9bc8-ca1f-4624-b037-7c18f537f2d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298146a6-2c0d-4b7e-9430-9158e8b1bcc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9058a6b-7851-4fda-adaf-a1fe4c7ce56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b40f999-f082-4871-8bad-d6506a1ce3bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aee1498a-86fc-4429-98eb-0fd92202e5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f082fb19-491d-4ebf-94d9-ac425f7486b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c2f1da-09f0-4e28-bfcf-5d9c753ee50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377bc481-4f79-4e88-8d77-b5c33e45ec18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69485fa-ba6d-40e1-8e4e-68029d89d246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbea5a4-6f45-4103-b575-edf506a917b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8779b7b5-42b7-4269-ac20-0e4524186c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58f47c4-0806-42c1-816f-7121dfcb1a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9de106-88be-42a3-bd61-d466dd4f5591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b708576f-5822-4d1b-933a-b5a0cededb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--991bc305-eaf8-4aa8-b521-26b4e6839a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b09d681-8c08-43cf-9d6d-adf4eac6534d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c962661-87c2-4912-acb9-714bca1f7b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72568f87-f096-46f0-94ad-8769efdc4d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ad92243-c7b5-441c-969c-1902d633c1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2550c4ad-8c7f-4683-a517-564469e5c10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727c944e-3cbf-4dc1-9fd3-4b5e9b5dd972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83cd8f9-a558-4948-ae5f-4a10f35718af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af947e1d-fdb2-41b8-9e97-2b87344d363a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4173a15e-607e-4b40-b990-27f353e3eac8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a8ebc0-faaf-4766-bec8-6eac670de00f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ee65b2-b0ba-446e-b8e4-e76ba40ce2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acbd926d-43b2-46f4-9bf6-3186af1e0a35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5609b167-5225-4cf8-ac64-fd8b43e70e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f66d6e-5861-4ed0-814e-7c7ebea78c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.40.67.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60345ee-a0d2-4532-8714-a1ccce5ed475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.59.16.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b47ca9-b834-4131-802f-deeb54dcb475", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.160.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6397f56-2ef9-4fbf-bc6c-e33d2d919184", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f93347f-573a-42f9-a840-5a18db181a1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdc3627-c4c5-42da-8db1-8d9400c6f078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2894299-d4ef-40ab-9d53-b03aae51cdc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.146.80.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--605dbead-47dc-4c3d-b683-621b9931a7a9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.229.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c280ad29-5555-4917-9992-93ef8328a598", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.38.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afc73aa-3fbe-42aa-b561-d53a832f1ca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.62.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275182ae-8f7b-4c6e-ac62-78ee8527a9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.156.64.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aad73bc-67b3-4f38-911c-11e6fe0cf525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.216.59.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f86b4c-9356-442b-913f-1562a6beb8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.217.248.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c246b64f-90a6-4f32-bffd-cef29455515f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.2.211.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80b5672-e110-4829-9c07-fef2d141550f", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.245.1.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f22d5b27-8544-4eb2-972a-2ddc0cbfe2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.78.46.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80120f22-a1b0-488c-b131-1fa8f4d77aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.124.194.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b731f901-7112-45ec-be60-7c2fec3fd2e6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.145.1.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fd7a28-e0bc-4c24-aefd-a575dfcad3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.100.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c2b3a6-3472-4de8-afea-046bf7591fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.135.118.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2a07fb-cdb1-4844-894f-94f7dab2b0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8bfa0d-4787-4502-9f06-1b81bc63e7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.1.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837458a7-6822-4202-98c2-7f7b9ae142d4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf02feb-4e3e-48ea-941c-f86586a5cf39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065dc0d3-e572-40ef-9201-c09709e3b220", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbbe2096-5360-45f3-9c00-7e3fd0ba9f3e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04bf3f0-3679-4bd4-87f7-573cd30b9e9f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3803ad12-6b5f-44fa-b58f-cd5aafa9c83f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9762075-c17f-4fb5-be60-7861f2c4e8eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.78.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80859fea-4f85-44ce-b2b0-8cb2b6d1b69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--079a1e5a-3b5b-4a43-a9b8-9786eb9a992f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.247.224.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbc0c89c-c3ab-44c6-ad6c-8f1673266d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.250.11.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c195c4f-3ad5-4a33-af65-82c1264fd34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.93.209.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d62ffbe-c5e4-4fe9-9fac-75a88f5d5361", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.0.197.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad9cc0b-4a3f-4f58-b9c4-6dfaec0bf68b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.130.29.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aefbf5e6-21d7-4064-8a86-bf223a606335", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.146.126.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--751f902a-1b12-494e-8f63-a7f34e15981d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.148.201.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a862ba6-25ed-4345-9ce4-a742cc4215c8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.156.126.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--990bc495-ad7b-4cd1-b1a6-fc7219ff8892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.2.109.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6becdcc3-1406-408d-9c65-0aa0b91fd592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.202.81.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce2e457-916c-4b9e-a373-2b741c1e8e17", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.212.34.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a884c7e4-2f7c-432d-bdbe-af5ebbed45f6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.17.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd897cf-b3e2-42ee-9648-9194dc1d7bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3180d60-341f-4b87-9250-e53343fc9b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.226.232.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bb6e4c-854e-45d0-a375-b256552173b8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.228.10.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79757afd-aabc-43c6-b34a-76cab8cbc536", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.8.39.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4185e71-3ce5-44cb-8323-b157d7a04e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.121.239.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99797dcc-e80e-4741-927e-4044cc9de609", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.129.37.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d973214-2629-4c23-9e35-6452552c9044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.186.13.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93c9bbea-baf3-4e13-8c31-919bff3b254d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.223.132.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b6efb31-8dc8-41b7-a6b2-673e8c35675e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.232.176.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8ca465-caca-4ce8-9f92-5c94d8e39896", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.89.169.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5add28-5133-401f-b951-5e3d31509900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.94.32.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2267e8d3-ba7f-4b6a-b994-fbaa2c3a239f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.94.32.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8387208e-509c-4e95-a838-482f635a1a8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.98.122.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cb8ce1-8797-4d0b-9803-2076af4fb36d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.124.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79f73f2-12b8-48e0-aedc-fbad5dae75ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.125.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02a05987-46b9-42e4-9694-86657e9d6f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.38.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708e3d7b-6adc-42ab-b7a7-427a9f0dca05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.42.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6100548b-1060-4792-b9b4-624ae7a9c145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.73.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c814e6c7-bda2-40c7-9430-7581d51c57a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.17.5.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f2053a7-dd87-4755-bfd0-e880af2e5c36", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.241.247.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049281f1-e118-4031-98ac-5920fd4af4d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.242.38.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcafe437-3117-4dae-8c5f-3110f3b8f355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.247.218.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a38c17-56a5-4719-a37a-9e814aeba680", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.27.17.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edecedd-5810-4bc7-b665-57654d02f7cb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.27.18.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f572672f-f6d6-4308-b0f3-b8358249f814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.68.7.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa48f961-b6d5-4bce-9798-20d0dd3a4f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.70.213.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd20268-0181-4c5c-9071-5d92ef540952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.94.206.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d583b61-7e0a-42ba-ab5c-15972173df1b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.153.72.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5c1255f-a351-48a4-ad76-72060b5c2c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.224.92.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5d8a02-5280-4ab1-885a-078a34e71af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.234.105.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35e8dbdd-ce6a-403b-a0d4-198f9b4b3a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.188.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52a15cd4-0719-4d17-a651-44479e615c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5245328-e874-4b33-9b35-309e992bffd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.248.211.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dfa531-1ef4-44b1-8e66-f1444f6ec516", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.251.34.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473a5797-d863-475e-acbb-eaf7530e5f3c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.254.226.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c0e0b08-8f65-478d-8a74-929c31b35920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4dab73a-ce6c-4e0f-8f27-a3edf7176ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b699bf84-af1c-4c64-9b9f-bf1ba35b65de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.204.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0264e3f-2ebd-4ca4-a8dc-4f3b42787ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.95.31.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0d8909-06b9-46e6-9aef-f42ebf83921a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.101.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b94e3c9-8e35-4833-82d8-26d6b4fc3aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.84.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8946dbad-1978-4ba1-aac0-8d44b97ed182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.154.159.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fc3b55-1c44-446d-8901-865ca39265e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.93.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637027e9-de89-48e3-b5b9-b5d18d35f0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.2.113.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc0d01a-71d3-4709-a638-314623cfa4e5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.42.65.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1080493-442c-4c6e-884b-fc6637a9eefe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.147.191.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9240c710-b18d-4f46-ab14-7e164aebe7b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.150.188.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3daa1202-51bb-4a54-88a6-cc7f9b917333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.155.77.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a903c44e-6702-4215-8b3b-d9a138deb4fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.41.245.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8a0af3-4428-43bb-9a00-f1bacada40e3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.42.240.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43255a1-03ce-403a-807e-70f6f981c9ac", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.40.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aab9766-f94a-4c37-a82d-af5601590e5f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.41.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a2c544-2fd9-4353-a498-3d789e1193db", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360b:3678:22bd:a6a9:da2c:b4f6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc264a1-efeb-4cc8-8b4f-b79b401c2916", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360b:ea70:37ce:96f2:a6bd:d3f6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579bb51b-f76e-4788-9df3-c48245e481bc", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:360c:eaf9:b189:b270:72b6:8c34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f15893d-e113-41e9-8cc6-c3e564d3a76c", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a06:98c0:3624:766f:bed5:d67d:35ff:e757']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16dbb12-4d7e-4875-9ccf-620059e589bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e3ffd5-a599-4aac-9ffc-d9240a110f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.142.170.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25cd203c-9738-4409-941b-943867bdb1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.220.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7964cb-a198-4d37-9113-7390ac542dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.143.3.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4c28e5-c9c1-451c-812b-5c81ea3a39ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.144.168.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cbb9b9-0d9e-4e9e-ab12-4e53c4f9b18f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.16.79.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebcbb65-abda-4e5e-a07b-820d2c1ee924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.17.30.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd88650d-faae-4dd3-9030-00303fb80ee8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.219.228.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b8115c-d7ef-413f-9ddf-027a2ebe3907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06189a2f-b080-4dc8-857e-eb63b335a877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.206.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec6a27c-97cb-4e11-a617-57cd7407d200", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.152.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98cd8cc-8010-4a52-b02c-cbb356e7c13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa119b30-9817-4e6c-a474-6e8a3d36a379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.43.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b69aa3-1758-44a6-b2b5-c64d7409babe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.85.2.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e99ead2-33a7-4441-a421-3af229d14785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.86.42.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c459ed-1b8d-4cee-8956-db6527a33173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.109.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335ab3bf-f673-4302-b6d7-0176a42ec017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.219.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--743b2486-3993-44a4-855a-a7559cfe2255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.220.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5fa133-a35f-4cc8-87a1-43bdec670c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.95.252.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a013c6f-e691-4b8a-b166-28a670b2cec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570891c7-1f16-4c28-bea5-822abdc15b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd61f804-e2d9-4efe-b305-63a3cbe84868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ad6b6f-01ba-413f-b62e-212dacdb0cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--370cb574-0415-4683-8146-6f9fbd594e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d3945a-9ee7-402a-ab2c-2620631cc192", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f45974-121b-406c-9b01-07a942f79c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00af9f2c-45d9-476d-b2e3-11f4388099d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1303b8c8-10cc-451a-a678-dfaecbce1d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.254.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b715af92-5b6d-4dd0-82bd-937f71661238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.148.99.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44f5f3ae-0c9f-47f0-a035-831c0c2fcda9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.173.82.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd52e550-eab9-441a-baef-62d2876b205b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.179.197.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2917f747-6bbc-4f0a-98aa-59d9ac22ef6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.176.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ba4fe2-916f-4763-8b26-9d8131b961d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4604ef-9214-44e4-8462-849f115ebd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.209.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36455c87-3967-4538-84da-2f3248168832", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.184.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fc134f-7216-4730-b102-71f5042f13eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.58.144.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--249e90c3-0b23-4be9-ad17-7f589167eccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.59.118.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd91cafc-e97f-4fe3-bf1c-4dcab347edc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.70.71.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24d866a-d44d-4aa0-984c-7bea38735162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.170.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27264d95-fa4b-4202-814c-fee6b52205d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.190.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024858a3-613d-4f35-b43c-0498c0488969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.106.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99878931-e7c2-418d-8f59-1e0a73d5bee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.42.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0af7cd-fec9-4860-859c-f67016348bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.105.246.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f7dd99-1dfb-43d0-9d78-75918af22f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.171.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c00898-83c7-4d3f-bae6-e9c72779cfde", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.123.134.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad2f53c-2e72-44d2-95f4-6e357542766e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.125.209.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca66f8bd-6382-49c7-868e-b12b0c3897e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.128.123.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1d9e1d-3223-432f-8cc2-b80dc8d7704d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.128.77.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3a25bb-3b01-4a78-b768-ff258a30bdd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.139.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb341b53-4969-4423-9b5d-76d476bc18fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.129.195.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6625c0d-fa74-44e5-a4be-d0e66ac541e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.130.241.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccaddef7-0d09-467d-84a5-7e2a8721e589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.73.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1019ed74-9cf8-4feb-ad39-3eeaf1cb2556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.201.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42832cce-f4db-4c0b-ab77-2dead84ae13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.150.75.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127deb94-463a-483a-b815-99492243af56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.153.148.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230b01e2-43b3-430e-bfc5-3e6ca5e7c4b9", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.139.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c92b6fa-5336-4362-8dbd-de19d5c415a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.146.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8b8a29-97e6-406d-9c68-2ec43b9a47c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.236.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb80a484-9b6c-4354-b233-faf2045770a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.59.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237c9ffc-0091-43e6-b127-2b42f6f21451", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.8.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bf466c-8873-4ef8-ab95-c605816d5d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.179.172.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37a02d6-818d-4242-a28f-8e2643ad3294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.119.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb1eab7-191c-493a-8e96-0bfbf83c5f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dda9e68-6b65-4a14-86d6-f701d5a2bc74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.201.52.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2f1eb1-a179-41ba-8bcc-3a364b4b2a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.37.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e2065c-78e2-489b-a531-76a63d4b85f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.21.43.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd3d148-2b99-40eb-b910-f9ef4714612e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.172.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d248c6a-312c-4551-b272-1d76b0f4e800", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.177.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--243910de-dd18-4d80-bffe-de81c22dc520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.222.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774618e5-8828-45ad-b028-b81004d24ac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.224.23.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6011216-69ee-47b0-8bd8-a408f8930a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc8bff0-15eb-426c-b75a-6f93f5c94574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303f2b78-c6f2-4d80-bd1d-7add34381637", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.147.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed742ab-7e97-42b9-be20-8f573f60950f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.172.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842fe344-7ba7-4abe-80b5-7df5eedcbf32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.194.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9649d8-d8da-40ef-a31b-2e3ba8501f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.195.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219e0797-3052-46f7-a121-cb09eed58660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.207.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cc58f7-38c7-49e8-97cd-f65cab2b445a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.27.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e68385-456e-430d-93ed-968fd2266585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.121.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f4ff86-55df-4b2f-9285-e357e4621d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.50.23.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c8616e-ba8d-44e4-9c4b-2942d463aa48", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.175.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e589444-d30d-4357-9bb9-dad6573645f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.207.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11683f7a-4218-44ca-b784-e1e4bc7f88ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.138.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c8eabe-4bc7-4f58-b2f9-8e9e5cf6ad53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.183.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b506164-75c7-4729-85de-835cb46d5d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.192.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c46381-f4f0-4772-b33a-f7a044b0eeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.216.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571cda03-3de7-4174-9b63-d55ee6d82378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.144.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b921b0-9ae2-459e-b162-ac5ab46f18ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.154.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e4ed37-4898-4e63-a5fe-e25819993a78", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.176.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b84fc534-37ce-45eb-8e07-c331b8c40216", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.180.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e67d9da-02ca-4e06-9498-d303e92404df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.192.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb59b38-a2aa-4cc8-a0ce-b966dfd3a974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.49.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03485bc8-8be8-4460-afb3-a647acac7611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.22.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1573012a-5948-462e-8b63-76442f656009", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.71.30.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad54634-65f4-4bd3-81e6-0ecd650d0608", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.73.184.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8f1e93-9242-4708-8b43-7da7a5ec2f79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.190.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31b7b7e3-0203-4d68-8930-9adcdeb9fa28", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.217.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0203b23c-249b-44e3-8243-01ff4e0bc030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.238.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c174bc9-e04a-436a-8cef-59c9a5c983d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.27.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294783de-d2f5-46d3-901d-a27cdd487b95", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.159.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d7a544-27cd-4142-9be8-57b66275d48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.245.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521e6fe8-fe19-407f-9260-b221baaf7f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.162.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e11c66c7-6ff8-4927-8926-a43b6135d1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.193.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c860238b-eb66-41f7-b727-9f1b968d46ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.40.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137928f3-67bd-4824-b9ec-45809b1f687c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.112.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8469b6-c8c3-436f-8c59-3e0a787db484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.88.123.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c422c37-3167-412e-a331-4ed587bf35eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.208.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a190e61-78fd-4008-9eb9-5aecdf8b7bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.51.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c719b7f7-d176-4501-9a1b-a2222546e6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.53.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1deab8c1-83ab-491b-a325-e324ab7cc547", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.165.123.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da49d28a-1047-4be1-8088-08759eae91fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92c343a-248f-42e2-b6c5-6c4657e2f2f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.171.6.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c325c3e0-a3e6-42cd-87b3-566680bdbbb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.173.233.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9d34e2-f30b-4d47-81f2-3d04c6685e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.174.172.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd603c44-cd24-4609-9549-507cc79a1d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.106.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccd9e86-9a19-43ba-9319-549d08f207ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.132.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9deddf-2a54-4a0e-8fdf-a9abde8756e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.198.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eeb3aa2-f2b1-4392-945d-ce77a57d7ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.206.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3899fa1-f6d1-4292-a5c0-72076936c2aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.200.28.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95055a9-c51d-4efe-9581-d70ac3bae665", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45323fab-5492-4b30-84a2-4fc73e3bffef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74fd970f-975b-4de6-8357-3369dbc407a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96035ac5-a072-4322-aba8-f78be3a9c4b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da14374-bc7d-48b5-baf4-a1c9300b2e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ca81db-654c-4121-a26f-1c8c0946580f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd01df1d-a015-4f7e-8c62-a62a6bdfc365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b122cf-4389-4a75-926e-fbe2e5e92b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a55ecb-da33-46f4-b42f-0e32b07c437f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3258c9-45ca-4002-9b34-9a1b61e4b328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb3cfa6-a5ba-42a0-9a2b-600a4feabc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434112b3-aa6d-4e8f-ad9e-d95c71e93f04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962a84e4-51d1-47dc-b780-20f793e9d424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8510b47-a633-47da-985f-5619e8fdbb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd774a34-fb89-4de0-ab7c-04c8ec83aa62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c0796b-3b87-4218-bca6-62dbf544ee92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde29282-c55a-4073-a3a8-bd4219eb8014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--113d8892-da55-49d7-8ae9-1d852f9db98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d547ef-786a-414b-a0fd-76c8ff13770c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18386e59-5896-40fe-925b-b45088fb8f55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f374fb06-b746-43c6-af86-04a5d4e85db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05b3413-1242-44fc-97b1-87134ae1e2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a44a07fb-7f9a-4b81-a38a-3ecad3d74112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de4c9f8e-57d6-490a-bcb1-3f8b7e2f40bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--568d2089-3d51-449e-90d6-abcd1c7e4dcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f851423d-b81f-4c0f-bb40-56a14f00581a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fabf2954-ddce-47c7-8f0c-4b7b0f500098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4abf28f3-4f4f-4c48-8daa-8e8e1704c77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e31232-8fe9-49c6-a7e5-b4c983a84dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2a6c42-c043-4046-a4b8-6463e8f0d823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14f47dc-fdb6-47a2-87ee-6989e14a91c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee447ecf-71e2-447c-9723-bf4d92314195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9743b94c-4743-440f-bfb3-9949ded18634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b450b2e9-053b-4f90-80d8-61948970b3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3abce7a-4013-4cca-9f23-96cbab6008d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a27edca3-878a-48d4-881f-b518f7773ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36de4dfc-8579-42bf-a27c-a5ecabcaec37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a213fe-a0f9-425b-88ba-3bc41728dd35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a844be6-c4fc-4fa4-98b6-0d444fde1f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b0b82c-8257-47d0-b558-0ce8825db8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b72e095-a338-4973-a683-0096f601a1c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad26ef4-267f-4c67-9855-250b5b7fbe98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9355401a-566b-47d0-9064-9be5b7cd49b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee249768-1ae2-467b-b79b-f8653344da9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3fe677-4f88-42b0-9dae-9008d9a294e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0139a860-5a78-419d-80ff-b44dadb653e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99d1d4a-e24f-4ff8-8ad7-c91f697bafff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03441040-b5f9-47e0-8eb6-b0f9c80b23a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bfeeac6-9ee2-4613-8344-2682e185bf2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67ebb86f-7b70-48b3-9b5c-7f8e52b4c496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83a284d-42e3-4459-8044-dab0d4df5272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e97b0699-13c4-45ea-9788-458c7086db3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90914a2-3997-4da4-af30-a75191a37aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91c970b-d089-4548-a5ab-e3d112713c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63eabfd-439c-4433-bf5d-f1cb28c8d5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6adadf23-5bc1-44ff-b834-d4848e86a77f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f99e327-c6fb-4f9a-878b-4c1eda7cd363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9f8f2ff-ab22-4777-9f5e-18fc26dd19aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aadc4ea-a798-42ac-bb1c-9ec8ab3d8710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ed7da0-6c92-4523-bec2-1dc071343306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6838fdf4-02cb-4066-a692-cb8e7cd23b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a23757-1849-4963-8710-75d4a62102a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b25004c-2e7c-4cd8-b6df-d10550fe6555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f284e39a-1473-4be2-a868-c35b5be2a792", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04abf7fa-6881-47d0-b70c-81b26d057f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f3e3581-20d4-46d8-bc87-bf1fca533dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37164083-6b30-4516-8940-f184d6204791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34028623-0dbc-4cce-a945-a46cd8b57fcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e196069-1721-453f-85c2-8c84ff188f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24c91f72-d451-4250-a18e-4b9badac5206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35be4f6d-6c8f-4f0d-b247-38aff43345c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e53fd0d-fb85-49e4-8430-d3e58e197f32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c399a9fb-487a-4aca-b84f-57e3aa47be00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f4d078d-9289-4cb2-9cd1-a78234dd83f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645a0d6d-8e69-4f97-9c03-545fbef920a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84dbd5d4-2a7c-41e6-9dba-3595ec49a1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4c084f-f79e-430f-aaa5-0f1793fe4eea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cc47680-7a87-48df-93a8-20279c9f4729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47c7f1d-246b-47b1-86e1-6ee2d22c54b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7d3f4a-0e64-4af9-96c8-d5ea991dfcd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048a2b81-f53a-4758-b535-c9d466e63fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d29c5c87-9dd9-48bf-a173-df042ad78da0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab769629-c199-4b92-90ad-6a52b35d2411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--284e6755-d369-4713-abd4-233faef1a6a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e337a0c-6821-45da-8f5a-0b79824ed67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fe8026-088a-47ac-9588-5d207e8919da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2bd4ea-9a3f-4b96-bbac-027176a557f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa57e478-47f4-4d83-aaa9-29436578f9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a28e78-c733-447e-b9c7-cf6ef0fea2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b12d14-577d-4602-88ca-51247a22e51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d6c374-3c12-4c3b-bfbe-9e79846ef670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba9d6d8b-02c7-42f9-b837-b6fff52e7a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c20afaf-2a2e-4c71-aa3e-7c874171d48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cb054f-ca8f-4a5a-a1f5-ef6e79a83f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ae7d90-e3f6-44b2-97b2-4748cd480654", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a7602e1-cf18-4240-9612-fc064cc45f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3435a650-d480-4616-bf08-55dec6fe0488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216c44dc-722b-4631-aba8-8688ad1e1216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a508d9-cf56-4816-8c44-79a21e422efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c478955b-c897-489f-9e87-e9fd494830f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f62cc7-d773-4379-8d1d-9be3e30d206a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04cdc3ee-72f3-42d2-bd10-3af8494e3d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003774f3-2026-467d-9b6d-d5ced29cd976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b5791c-991e-4ce0-b817-e6eeb43289fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93c33fc-40c1-45b0-8235-5e8433f6802f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73768a1f-8f87-45b1-b199-dd5e51cda68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e4cb6d-dc6c-4f03-83d3-c309de03e49c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584390e1-09eb-4102-8aea-193289d831c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec225b99-be93-4025-96f0-47b2bfe419a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb93706-517b-4f70-9954-30857fcfa490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083771eb-43f2-4082-ae6c-12bf970c289f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca19650-ad28-4130-b5e2-75dd33ceb8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad0b6fa-c663-4ccf-9fd9-b2f4517be748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72643abc-073d-4145-928c-054d4136dfdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3146b7f-1de7-4472-a377-659425b303b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367a4529-62d7-4e23-81b0-8c76a10931e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f2e884-d74e-46e1-9b91-b1acb66d513a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96466fb0-ba10-4325-a7ab-db6fd1273294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb57558-e532-46bc-ae5b-514aaffcf1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a49156a-2285-49a3-b4a9-c10def5f19c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64a2185c-7e2f-47f4-b33b-df04ec071668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a7e232-97cb-4c63-95da-915993b93b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00800fb-afc7-4c64-ad1e-2a578297b5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b1ec00-6754-4b7e-bf64-76aa76dd742f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2c1838-dc05-4693-a7eb-a202eb01941b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b9a3d9-8c43-407d-91b6-c61c50783feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94179947-7376-43ce-9ae7-92a6c310aa02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc2e90e-dfc6-4f2f-bdd7-38fb9f6d17ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4801a301-e1d4-4ee4-8acb-8e51e7d46ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307a0d6c-6890-41cb-a072-cce3a203dedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b380b9b-33b1-47fd-a853-0b697bbee54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--789ede54-9783-48e5-9c6e-d6285119594c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8206ef-5554-4242-a59a-4336e40d129d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0674c0a-5fb0-45c1-877f-a276316ae020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3661f23c-17d8-487e-bf53-ff625cb3e154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7cc055-bf39-434a-9b01-16d555b686c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5ad64c-d7e9-4c3e-bfd5-b6cd1cd3f24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80be90ab-6875-4ba0-89f9-1eb1f226765d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfce4d2-a74d-4ce5-8d1c-cde3d58ba172", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3880f90-f759-49a6-b965-9fc7c25adcae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d90c453-b2e8-4cc7-85f6-94ca191a2812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94824845-bf1d-4452-b6b4-de84e2fb3db5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d9b5fb-51fe-4269-a6bf-fee4ee253eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6210f7-8301-4011-bfbb-f7655f511a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb887dd4-98a6-4bec-bcfa-91ce74de30f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25338015-708d-4c36-8f11-b36ca64838f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ed7cdb-ced2-4c91-9b99-10e12e723263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f0d150-7b23-40dd-a3e5-27ebbcec2fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c6df7b-8aa5-4eda-9426-731f1a2c9ea8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aae478f-c829-4158-be1d-27269d31f2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf6b46c-250c-49ce-80f8-2a4f0ee5133e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7625f62-52c0-4f75-9b2d-1fc3b644be80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12e7220-2ded-498c-8e5b-ea6fa6561b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193f5bc4-361a-48a0-81f4-c79ba01c61f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--198fcb3b-37fc-4e08-864a-09d3791c6da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c410ee67-ac11-4d7f-913d-e870e2217f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e816d8-56f5-46ac-8537-13d1b9ba2e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b538db06-de61-4743-91aa-82c365ddae93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b72629-95af-40e1-9b9d-2a1c01492eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4645fc5-34b5-4f3b-8a67-aeef89807389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6b4d73-6714-425e-9078-5b383f42725c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb16499c-fc02-49c0-9ed4-54f3dbc2b4ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa880e7-2861-488e-b91c-2d76dd229b6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f10e3566-e60a-47fe-97f3-3563fa853343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4248cd0c-d242-4f6b-9628-fa3b8b54824b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11ebc34-a5de-4294-9220-d1a352362c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2456ee1d-8472-49a6-bf1b-0efd32901eb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6308c9-4bbc-484a-8d52-a7915292d98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708f9dbb-6715-4a43-a2e3-71b7e8738961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53dc4451-805a-4cf5-8008-940c88c86289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86db5f01-a157-4d53-a49d-8676a73a3eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7559fe7-d2f3-4afb-9d3f-35187a1ae97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d447905-e3db-4967-9bdb-b72f299ac850", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a178e7-e6b7-4ff7-a6c9-eb22c6e35db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2622556a-7812-4783-bc74-a25256ac5608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ada1f2-ff4c-442b-90d4-0b373fd0d44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe764ca-68df-476d-98c1-88296ca16c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baaf925-687f-42f8-915b-41c46bc1402f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c95b0ae-50f5-4a3a-acaa-30916257f82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03df53b-238e-45dc-99d4-db2af3eb970e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cce6d51-4675-487a-832d-9021dc6fc0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--201a256f-2792-441c-b18f-be602d423960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4eec18-feb8-411a-83d6-3c37c74009ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff0fa13f-d0c0-4384-b711-3169d5c67385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edca973-0bcc-4b28-a1be-f09e288c1d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba99837-ec58-4d86-8de4-156681796d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310da1c6-5b01-4327-8c6d-1db1c6355217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22be357-0c58-4308-a88d-701bed4d4a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42a300a-0874-4f9f-8cb4-7182ed96309a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324b2990-75f1-4c12-945a-91d6f1c1d567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf0d760-e24d-4da8-be70-b316783ca195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abe7276-8c87-4607-8a9d-df66df26701e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf23dc0-b030-45e3-9b59-1739608fa8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ae9db3-75cb-42a1-a66f-591c055145e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b43ed0c0-44b5-44cc-908e-6e12666c4097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e35ada11-fac1-4556-a0dc-8f1a64f687e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3668ae31-f146-497e-8f14-db114335f4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57617d7-1bab-43bc-b77a-bbe9ec7e1219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3271e2d9-2a7d-4c60-a5fe-914166dff5a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3385b2-cd21-493b-a83d-50e8adaa9e1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ce0d2d-9f43-470c-bf64-66bc96b1c959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9717077b-c927-4e12-b8a1-e7451d75061a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecb27b6-143e-4018-99c7-716bfb5fa016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2fc745-c808-4672-a9fd-115e5a21d2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcfa3dcb-772e-4693-8ca9-f16e11840b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e230daf4-54c2-409d-aed3-ac5ab8b8ca96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c307fb7-1dee-4b1c-9852-2c03d5e23b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7469028d-e7a6-4a3e-9161-56f4f1410c30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80b98bb-c050-44d5-a9c8-2bf1fd8e9501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19159a62-6fb7-44e9-9b34-a6da20620238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60baff2f-6221-421b-a7e7-d328ce76a8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--613802e0-83e2-444b-a043-b581a451b7e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe18264a-1459-4e64-ad59-7be153183271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32227b21-a119-441a-8ddd-f949188c6d0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658c0708-63af-4360-b8e9-fce0af247c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a35b09b-33d8-4d35-a9ec-ee2ef03dfb37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5032d64-fd1b-4211-bb32-04975e832455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948a957a-553a-4a94-8f60-2baff514122d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6046d750-11fc-46b1-9c21-43c7d1632062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcec2765-c9b9-4f6d-aafa-91f57bd7a2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1698f7d0-31bf-417e-8b99-199e8d763003", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca914489-2c9c-4123-a664-cf08f4cdc88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788f8b8b-eae1-464d-abf9-0687d2c245a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ec9fba-6995-410c-9c53-b8dbf3c284e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a5ba878-fe2b-4f75-8d00-abbf1e23fc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7adc4e0-75b9-444b-83cd-4c2692a71306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.212.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d8076a9-c03e-4cd9-8fd4-05d8105d0537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.51.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175513ea-5bf1-4447-9f4b-0a3dd05cd3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.210.61.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8480aa9-b28a-4c7e-a6bc-d77da22b4821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.222.117.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2fa5f0-5bee-4ea8-9935-4b898ceb9214", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.225.57.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0499a1a-c135-4f98-8d69-316839933271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.218.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b51224-e0ed-4c00-9feb-0ef1dd2cd995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.220.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a37595b-880b-4a1a-865f-5d5418ac6c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.233.42.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f71d7c-06d3-4e89-b93a-95192193f1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.174.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e36318b-b844-4a84-b55d-8cc2777e98bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.84.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c394bd-7e4c-4e22-b110-b95683b9f6cb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.252.104.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75d08e4-3630-4ad4-af99-d283e27d44d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.88.118.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5223b6a5-7788-4d8b-9854-055d25a13ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.103.222.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da808470-6889-4d30-9904-012c0fe237dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.106.167.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98bf7664-4f73-41d4-b983-a065b9b6e5b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.112.213.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac18dde-4e46-4747-b38d-a4f1ea4dbca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938305f0-a33a-4e85-ad43-7760d4ea0785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b3c001-638a-4601-b8e2-2fdcbf861360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a65c278-eff6-43bb-9304-6d8588cf2ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d75edf-67b7-4b45-8997-7ba4a7126457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffceabdf-5e54-4373-96e7-2c80e33e9744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616057c5-c90a-4489-9ad7-fdb98abd4714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9b0b9d-fa7c-46dc-b66d-389ba19c97eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.255.97.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b98a397-906d-407a-9b8c-e2b52d2e9f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.37.69.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7fc4bfd-d259-4ab8-8e06-6ccb5af556ef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.50.76.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f7ee4b-692e-46f0-b003-0d4f61bb456c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.68.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07eb3dc-529e-40ba-be94-e553f4282e4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.99.46.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97dde666-f7cf-4064-8a5d-946938a045d4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.110.113.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdbff93-0d20-4d35-855a-0aa99db56dc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.114.52.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c95844-403b-4e36-890d-9d57b46f59d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.53.78.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b717d560-5310-4f42-865a-635ed8dbb2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.58.136.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f36c87b-77f1-42fc-8ab2-d329d82298c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c58e768-b16c-4642-8ee6-0d3e17ad6335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.104.134.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57b5d96d-810f-41e4-ab8f-c045344c534b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.107.55.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff36fde-afd9-4b74-aaff-557e2c4d6654", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.117.79.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d66b67-bb3d-4378-ad6b-0beb0aa581a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.96.159.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--226d8797-d5ff-4e99-b829-404b7f30a0e8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.97.44.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b488c60-ba1c-46c9-91df-2e083995f978", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.206.92.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5b65c8-58fc-47cb-83f1-8fadbdc1917e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.211.251.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98aea9e4-0faa-413c-ac26-de15357babcb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.213.160.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7cf191a-f5ad-4b2d-adf8-423258059c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fc2bf2-3025-4d1b-8707-f4635dffe776", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.112.183.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd2ce5d-6a47-4f41-bbf6-52ef54cffc6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.24.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8734877e-8883-41e8-a750-bf1eee04b1cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.41.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d135e09-326c-4fc2-917b-07e35c5b6c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.46.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4857e1d-7c20-474e-8233-66de9db47a4c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.121.179.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff036a8d-d56c-4ea5-b035-9c516a6164b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.121.200.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295f7094-a12c-4489-8063-020d6c13a9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.168.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb47e1ee-865e-4570-9ebc-9bbddce3e0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.169.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3812bc1-859e-4e5d-8c8b-b2cdfea37569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a26877f-cf71-414f-a6cf-66e07ee3aac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.172.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a93642-0428-42bf-a9ae-d3b33dd91176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cb954c-5bee-4dc4-b993-0a1ef554290b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb20c7d2-689a-445c-a427-fbf7123450f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1373aabc-cbdf-48dd-9288-649a230974fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e488ebc3-8bca-4a15-9b6f-e781dd99231f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceac59a2-dac1-44d9-8796-cac339dd2084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e622ea62-9dec-4087-a011-449b6d9c7f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74db0e7-3de9-4748-a7a4-2c7317e448c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.173.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9e81a5-30e3-4b0f-8461-39d6578f1c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd12681-6e81-4d10-8f40-43ec14a3ec20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.174.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64c6d050-6294-47b5-aaef-6d6e6ce70b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9164a6a7-8303-44ed-a358-b99ec5d9f270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af6b6c4-0c88-44e9-ba9b-7fc0cc1a8b12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38ce369-698f-4652-8827-578898c79a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d2d549-d656-4ac5-af9b-7d3ca6795518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88f15e4-9f93-4cbf-a4dd-d23a3a8821aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.175.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325a8d23-a3f4-4b19-91a9-916ef04cdf55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.178.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e570157c-cb93-45ad-8d7e-5d13f6d51130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a08a538-e3e7-489e-b493-c76f6d07f4a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04d042a-e808-4d7d-9310-db20387f675e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2232a6-00c7-4e4a-b40c-c53b88f52867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b9d04b-3aa0-48c8-84b5-c68f67b5f097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.80.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc43cea-899f-4883-b738-c247b5770fb3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.65.222.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ef8aa7-b108-4929-bfab-93e07afa3732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.161.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6af1c2bc-f4b1-40bf-92c7-797ddbf9f42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.116.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76767380-4823-482b-abde-c54c12e34705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3153c1ea-7899-4ccf-8954-1f5f7b436d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba29ed63-f52f-429d-a14d-636d24bf68dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.124.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec5f0e9f-f54f-4a4f-a757-dfe51721a963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.125.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3831fd55-f5f2-40cb-b3d9-ca330a4db0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.137.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0c2c38-2634-4f60-8ac6-e8e01fbcd7bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cf93b5-dd66-43e5-b0cc-68f2d54b6567", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835a0ed6-0f8c-4739-b789-e89541135819", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d994e81a-f589-440e-b402-e817a046031b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1cf348a-3d2e-40c2-9391-a36265d5c320", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6523e8-5eeb-44cd-bbb8-7e799e955433", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c83078-521b-4e6d-ace5-e2bfe1c3d6fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34760d8-767c-4122-a77b-71c94a031776", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f093e11c-d913-43dc-a087-5cdcea8e45fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e78635-e0a1-428d-a9c8-b1b42ef3ff79", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55301d17-9d00-4394-b50e-1ed48b47f969", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982ef83a-d3db-4d10-89e5-b1c6b0da90f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e3cb490-faf8-4418-83a4-d2eb3cbfd4f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e26b503a-871f-4bc5-b338-a011f3522052", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5abd6295-9eab-429e-bf68-eb97c4a4299b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.255']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc13667-9ebb-4ce6-a073-03c0c640ec6e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fe1e417-abf8-4088-bfc2-150e92442535", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2161da73-669d-40b3-9add-c601de5e8ee6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99eb10b1-68f3-41a9-8e87-ba46344cc425", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b3f084f-0537-4c54-9a49-8b13084ee14d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--522fad03-bd4c-4f94-bc0d-7134d2259c43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b22bb44-c15a-4615-9ffd-9cba6a39c8e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe479ecc-4551-4da9-a8f9-8f8163e8fc46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b397c5-0438-43d7-a3f7-1077f6891593", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b2058e-4a45-4eb9-8ac3-f0acd4eb2769", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff72b319-3a65-4955-9ad9-c7168fde6b62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8954e86b-9a2e-4f90-8b5d-aa6fa48027ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d81e60-19c6-48dd-81cb-49f01aad4762", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0fcc24-f9e6-4abd-9ddc-3e9e15952322", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5d80f34-53a6-46eb-a2ca-e8e033dfd5fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37bf2d0c-2706-4a68-b98b-4415feed8fba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92d5cc3d-f4d2-4123-a751-bf4deef05b35", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea878adb-c1ef-41da-bedc-8ad5e8f8b3ff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd14843c-cff6-4bfb-9036-2ac5ca8b6a3f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a48ce7-bbaa-4ea6-af26-948b1df36c29", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d17692-3925-4bd5-98cf-8c8a38e04631", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd0ff45-622c-45ec-846c-30229ef59593", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f35acbc-bf70-48d7-932e-1b72521979f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d82a4385-70a5-43c9-8ffc-4385b184d78b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084e5e84-8f8f-4fec-9c85-6c648e280abc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.78.155.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02abaf37-7d83-488e-9eb5-a88c15608a50", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.83.182.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94d775d-edf7-4311-9426-742b2b505f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.234.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e081d2-940a-421e-9513-4e3c2c2ad06f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.249.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad92b7b7-6f89-49d3-9701-687a77766a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.90.250.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0188f8c0-3238-4f52-80a7-6ae48fb9f4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.111.220.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30047cc-cde2-4918-b564-d86063a20a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.186.188.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edf49ed-161f-40c2-b4b3-3c5951dfd9f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.193.154.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2eb717c-2a2a-4651-9bb3-e40c6c50bc15", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.242.115.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4cc7cc-2ef7-4e6b-bd62-57b77e036508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.90.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3b4caa4-a42a-4947-9649-01854876cdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.33.91.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a95a3d-00bc-4bb1-adb2-d15e3b402d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.38.70.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d996785f-2f3d-42eb-a5c4-924e86a6a608", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.59.229.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8fe543-059d-4617-9a4d-92d7c59b7294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.60.233.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d92aa2-9fea-4909-ab82-dba4c19e1272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.63.63.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e801d6c3-f7cd-4270-91db-ec897322fe04", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.110.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de642ed-164b-41e7-8a14-d1ae9500c192", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.93.28.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db625ab1-2b62-463c-b542-b241f3325af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.121.161.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b30eaf-2a56-42a3-9393-d52018aa707a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.203.68.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f9e2a8-36f0-496a-aaf2-5b534f6da25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.51.32.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf90f4e-7f7f-48c7-a232-30e4d8e66f59", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.81.126.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8226c4-f85a-43d6-8d57-a2965f532592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.82.237.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fa0498-b76f-44b2-b77e-afa9b6fd7a24", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.83.147.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3817fe77-7551-4d92-855f-a6ae4b906dc2", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.96.20.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d4e379e-88ab-4381-b20e-179a16073330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.128.122.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c7c76f-5aaf-48fe-93e9-a3089a879de5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.32.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2191337c-0c2b-434f-9c0c-a03d3790e04a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.57.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fc1db6-c548-488c-805b-14c7f9a03fbb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.72.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a66b7f1-3f94-46f4-97dd-c9425a921ca1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.23.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb42fb2-132d-4ff0-be72-88e2800197f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.133.41.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3091493c-fc21-4718-bc5b-a211a5c7c096", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.72.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bce51d3-706f-426f-a01c-5f48e1d09b7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.142.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0728e707-7cd9-41c1-951a-32fa919ec699", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.145.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f0715e8-5fe1-42c2-b905-af89926172b2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.183.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef2e8aa-c747-4fd1-b374-d7454059c745", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.104.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--637ad435-8be1-41a9-8cd7-e617560420dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.27.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912d66eb-efc1-473f-8a68-c560b760ee27", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.73.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d73df1-5d2b-4579-9566-8b9e759cfc33", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.111.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a8b1cf-3924-4268-9acf-be1323ed3242", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.212.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8ed37a-f504-49e6-b4c7-2bca9dd97546", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.250.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5c5419-696e-4a31-bb8c-62c64530ff0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.44.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504af974-42fc-47ec-a46b-19db4e8940bc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.170.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e095ffa-c9cb-4ce7-8647-0b9db10abf1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.175.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--422167bb-021e-4af1-a9f7-00bd3fe8dce5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.179.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73178258-e003-452d-a19e-ed9b5ac108bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.181.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0a3fe1-b2d5-4f52-be3c-ed951eb1ceaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.53.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc9faca-a269-4944-9433-bcaaeb7d110c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.212.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0807527-b4cf-4062-81c9-070e753f097d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.214.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65763362-227e-48b3-b844-106eb424dd71", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.215.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110c3ace-a3da-4d8d-8137-9c329e7c69ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.246.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53092e6f-a49b-41d7-a362-2624455552f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.107.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ba3863-4a3c-45df-8789-0c1147a58972", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.131.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c332a95-5b1d-463a-925d-c6ab3e064ec6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.186.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b99b9dae-5dd1-4808-8311-99a665758a4a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.195.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e332de-3707-4ba1-9190-b62aa14f9c3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff3eab9-2495-4f12-9861-40508604b276", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.198.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f873cd-f9ca-476c-be55-7b99937beede", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.3.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff12d8db-7d93-4e05-86e4-cc3078afc4f4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.166.226.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d722600c-6528-4b84-ac98-0aaccbaeef17", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c779d8ab-a419-488d-a251-9a390dac9516", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3dd8f62-bdda-4a08-a8de-85435b27890f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab79afe-502b-442d-8ce5-5938b48acf28", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.102.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915fad72-c93b-4ed0-93f7-d61806f1d799", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.132.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f9639d-a2cf-4556-9088-0f845ac6e1be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44591985-c2c1-4dd0-8470-de69f0a1aee3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aa82454-5537-4845-8fdf-3c27f890d017", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f42facf-ccfe-468d-9ae5-32ae96ea88e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.180.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee1a9c1-49e8-4d17-a137-ec43d56d14d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54617166-aa7b-48c6-850b-f8174e9d2d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.224.126.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240ce53a-8492-43cd-b23e-86d9f4d0425e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.112.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53960dbb-cdf9-4181-afe6-6a3210df8a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25eccdd-e9b4-428d-b96a-8c693d90bd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cf720e-9119-4778-bab2-d337358cba4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943682c8-2243-46b6-bfb5-72ea77403563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402acf97-26a6-44cb-9330-02ea7e7db80c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ccf16f0-015d-470e-b640-2fa1c872c5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc36f7b5-698c-4977-b41d-c2ff22c0634a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce1d5c2-6d0d-4906-b712-4ab5c5c804ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faec0a0d-77fe-4075-9d2a-80184a2d6a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19e3a89-7e87-4838-b25d-053ff2ab2ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--195a7d8a-d124-4dc5-9536-0121606403a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3aa35e-3d93-4dfe-8da1-883b5de552c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587b6026-caff-43bb-a5e6-5d4bd9c98fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd0a917-dd52-4a2e-812f-599699c1bc44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eae33ec1-c22e-4add-8506-2577ef7ddec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78a2413-702f-42d5-9bd3-8e49fac9c72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fbb6f45-1d64-4b6a-a46d-32b0953ece79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a218432-e4a6-433e-a83f-d6694a2faec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653fbd9d-63e8-4dee-8639-8f6965dfd495", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91936242-715f-4b37-94e8-8db7335c076b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c174320e-18ce-42e0-b4ee-826e4a5f0e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2e0eaa-4d2e-492a-bed0-d77ffba6e389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae98d78-9bb2-4f8f-b6d1-e8c48f26fe53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b28d88-b6d1-411d-a659-e0dff7ef6f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16e0ac8-23b4-4b97-a992-52623cbf6c0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16ff9b9-63e5-43bc-bda6-0418f94f9ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a96c18-4274-4be5-acde-78af6a0bada2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f30fac3-42e7-4fc0-b956-dab4175ebfbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b13345-1a84-431a-83dc-070087dca238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29009ebc-f063-42fd-b044-db76ca4cacfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26cf2fd-9861-4c9f-9e26-6787e02612d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4903c68-58aa-4757-be41-9d4346d515a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b794654-1728-4d2b-b789-8a2707ede9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6cc81ed-c904-49aa-ab09-cf510a7eb8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60877a0-0051-46fa-92b0-4c4546967431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbf3b8e-07fd-4281-9b06-fc05bd9b9a47", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.157.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0989b1a-651d-4be1-a1c9-094509da1bad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.246.210.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b086ff1e-5815-46d7-af3b-64c4d557c38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.167.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d6ca8b-25ff-4fc0-a7cf-788c56d693b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.185.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49562b9f-2c05-44de-9c84-44db9844d1b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.190.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e60c3d3-e621-474b-8eb9-afcca4049290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.195.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b1f1430-fc68-442e-aea1-146328df5859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.197.255']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dfb52dc-0158-4f34-b263-5bb965505508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.98.205.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8c5c95-2ada-48b3-b129-85af9f3ecc33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.196.172.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad91873f-e559-454c-89b4-d545cf6ef00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.175.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c770259-65d1-4746-9f0c-a64da0e938c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.204.193.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87572b93-7535-46c5-a0f4-48ffe48a3e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.215.219.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60ad8d85-b538-464f-94e7-a947f93be90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.249.58.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2fa596-dc54-4552-ae48-76cc2f643b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.11.57.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de65f2d3-1660-4250-94ec-fb7d3035ac85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.112.149.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba753f5b-6004-43ee-a3c1-217f81a8c152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.87.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70aee0d8-685f-4b4b-b69e-d5aa48a9711e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a7f8cb-b4b6-4f00-a51b-c84619c66b03", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.127.5.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f18ab48-c3de-4d8e-a712-d342281955f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.185.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e765dc52-1d0e-4c0c-9d98-8d45540cbcfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.129.242.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ea0cb8-5a9a-47e8-a545-c63d7ad17b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.155.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1aab7b4-750b-4f19-a1ef-f41246d3f982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.131.46.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747106ea-5fcb-4ea6-bb8c-14f74c112684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.161.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e292d9-1d13-4ada-98c5-d6bbdbc76ab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e4bcf06-40be-4d01-867d-f49f9a6556ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3b975e-0b2f-4ba0-a0ad-a318087057a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8069136e-22c4-477d-b2a6-4dab595e9927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab4f3224-84d4-49b8-a011-eb660213e477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.141.233.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9ba1bed-943c-45f4-9650-09e16c9d1477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1041fcde-f419-4a46-b1e1-fb045b4b62f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--272ab16f-be54-4306-bfc8-58746bc48295", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d37c9d-5892-4459-bd55-64587c93c434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.154.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65aea1b5-6fc3-4288-bc7c-e5cc02c61138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfae0d8f-768b-411b-b4f9-6dee1964f950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbc24834-e5ed-4b38-94ee-6a768f209f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbe19e3-0858-4a67-acb0-4cb2b02af6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2ba6ad-8634-4928-984b-900c43f2b33c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15df2721-5a64-4d1f-ac6c-7807b68ff663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72ce81e-c1fb-4853-bccb-8e9a2ffee5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18045c3d-8af2-403f-bc98-1c44e4904266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c93637-9d4d-47c8-b12c-3936ebbc608f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078301e8-b6e1-4030-b143-93ace86e33ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaebd325-3c3f-4659-a31a-0241bb0baf13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09ed6fab-2b01-4972-805e-d845cfcf8c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92399508-e4c6-44d7-8f0a-0478361b3280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499118f4-0b8b-4f4a-a754-8631cbc13f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b87c4b5-99a7-4a65-a664-6264fab6bf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e76c6107-33d9-4db3-b19c-b13f846224b3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.144.233.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d09e493-4cc1-401c-bb38-044919b31b4b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5041e29-33fb-43ec-b914-52abd92e128e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635f9f56-ecac-4c34-a5d6-587e407a641b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9676064f-35d4-47be-b8ab-fca8b81b83e1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d079df24-8e12-4991-bcf9-d7a0e2e3c178", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2851620-5d86-4067-8cc7-1af2d0431e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd5f29c-8a69-41ca-b7a1-b8c291e7dc42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf78763-518a-4631-b1a8-6290ff615135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1be84df-16d6-4868-8051-add991fc0fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5e5702-49a1-4ebe-a211-02758633c7c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1935300-8bf8-4ef0-bbf6-bf33fb283ca6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921b9030-5158-47f9-a099-57efe22e669f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b42046-8c91-443d-8a23-6ca5b980f909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.146.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4411a45-223e-489f-96ff-f4c5405bdf7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.147.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa8232cb-72a6-4936-8257-bfe78b76406a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0e7356-f0c6-42fb-a313-56059104eda3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bfeb03a-bec4-444a-b3f6-4a851b26a976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66587fd-bc38-4420-a6fc-d1f07b0242c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebf80bc-89ab-4a83-a3ce-f688a42f2abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186165d8-f261-4a1e-bc45-c710a21ffe53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa985e1-3cc1-4ce9-9cd7-2f0ccbc55951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394e7ca5-9db3-48fc-b6c0-c99a09cfee63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a8a3381-f466-4932-8a2e-2ddc3446213c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071b2ca6-1ec5-45e5-8690-6dae6b3dbe03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be0518f6-2ec4-4e9a-a325-523b6e370644", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d9b56a-3fd9-4062-b81f-d12165f8c762", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrparis", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5ba21b-2abf-4cc1-af5d-ee42d0ac17a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001ce1f0-871a-4579-9003-b7b4f5f83cae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e1c88b0-a80f-4377-bdb7-8cb3cc0fc0f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0b7cd9-9bce-47db-9428-36ab9ec9ba5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e9b340-3735-4205-bfa8-fd916c90aa1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d52dd7b-b6e6-430d-82e0-65e9044ebd7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f44137-e3e0-46cd-9ca1-3e5de05f6231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9279d40-416a-4734-aa09-de461ef0e353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2472ba1-5010-40d6-b711-d6b9c960384c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--105c732c-22a9-41b7-a12c-17e288ed46a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce6ff927-32f6-4f78-8e26-b3e7f91f0ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da876631-9477-43b0-a522-c8fe3038916b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cc7f0f-84c3-4b2e-ac51-3f9a662a3bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f86c6a-a1b9-4625-bbcb-0b440574b198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb99a924-281d-4832-9b67-03e04f37b5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22d76b8-f1fd-4086-a7ad-bfe1bf7752e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e034f9-63a5-499b-80a7-c4e5b72b1dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2bcd07-523d-464a-b767-79058722520b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794f3971-ae05-4753-be8f-57c0f99d19a8", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f3ef55-9556-40d2-a593-ba4b7ff02945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a782dd-3ecf-41cc-a743-4f79eb774a61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.87.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0466fc37-fe81-47b8-812c-2e11eded9378", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.161.237.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e922b18-ab34-46c4-acdc-05dcadce6594", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.169.200.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--915e8502-532e-457d-8bfb-73e7cb017905", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.230.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78c83b1-a00f-44d6-b105-96cde3212f7e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.173.103.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4701a6fe-9e21-40cf-9cbb-2c989a2fa227", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.175.123.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d121e4-794f-4f73-ae0d-78d76b2a160e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c686db-dffa-48c9-9767-a596bb1284a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48635f02-f1aa-4a88-a34f-e02ccf695f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846683b8-3d5b-45b1-bfb0-d922366237dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f1cf6ac-1f6f-4644-ab94-820c1c81b06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69396bc1-8678-4ce8-8c1f-a26dc026a51d", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.195.250.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31db1320-4f51-4a60-bf04-8b254171e7f5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.196.236.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb848224-84da-4f9f-badb-70a3eb9b0868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9e00baf-d94b-44f3-ad4c-d926de846b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671129ac-6914-48a5-88ad-ec97f7c0244c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe5c006-ae17-4453-be59-d0cafcc8c821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c98bb8d-12a9-4c9b-91ba-ad0498c2013c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f019a30-dd57-4e01-85ee-bf5dc9604c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec486576-c655-4b60-b2bb-9e6d84258f05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e7ba4c4-e61e-4502-be19-669fd0414818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f37dbe-bab8-4349-8f03-4702d809fa4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf9bfc1-9633-4651-ab77-a4e16907405c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.198.224.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927919e6-e371-48b0-866b-c33ec6fd2b37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545f7a8e-35b4-437c-8dac-84d696261c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ac8d6e-1d0b-427d-a2bb-404b67264b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.254.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abee57f-d18e-4de6-bdaa-afa935f58b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.23.218.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff79f543-ee48-4b54-a66e-5e5b21c69615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.244.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b9a117-c0cd-49e2-b74f-e9d2afa5e345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c19dbe0-d07c-4d95-aa4d-135d62a07914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9959c33a-3de5-47d9-b5d1-60ef22e25671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.250.184.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c0f5a2-3091-4425-9ee7-028f1816cc6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b926ae-d4a9-4a51-946d-e227e5bb41df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48da50c3-dea7-4152-ada1-d8e2e9255137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb03bd20-c449-41eb-af46-b5e97e2765a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6822eb89-72e3-4cd6-9616-e9294e11cb40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.109.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9f8c44-8994-4727-b902-536b445c63c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572909ef-e212-4df6-8806-817679cfb71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.12.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b6f602-0337-472f-8989-6944e1c644fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.14.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c8fc3e-45f2-46ff-ba0f-321d6931efd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.16.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0e6eaa-5561-4c7d-997a-b5f3d8fb8674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be958d34-3c93-4a62-8ebf-b14f57d1db4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277c634d-8c1a-403d-be56-0bd62cc2c789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee1c8490-9f96-422c-8851-b7799179f08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.46.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4632e5-3ab7-4d9a-b27f-d2d28b1a5832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c25d5b-0f7a-4222-a5f3-9326593da622", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0df2ddb-8543-4fd6-a4fc-57b797bb1c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e05220-904a-4713-9041-cd39dbf22ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.87.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ffeb1a-eb39-403e-9bd6-ef3a334c1947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.88.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e4817c-2ecc-4675-98f1-21364b9fb54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be94ab8-9649-4e36-bb3c-b72f8a405777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.90.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a01163-1bd5-470a-a7ff-6a6616ed73b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5436bb59-6cff-4e4c-a0ae-fa6e3765ca76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb91f451-494c-4a53-96ad-b7bd7780b88c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.4.214.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c0334a-13f8-43c6-9948-e9b743a81da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044bb89d-4c6b-4516-92c0-7d8558cc35b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.40.57.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b6cbcb-07fb-471a-ac14-1643170a3843", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64063f9-2897-47f0-b424-2b45cbfee8d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3075e54-30a7-468a-aa7d-4cc0299718e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.57.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d56864ee-74d8-4ffa-9cd0-cb63b00b6a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a01ef1-db6d-4f33-95ec-b3e0734e9bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e895ed-119c-444d-a4c3-51398b57bd6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4aab63-c701-4c84-9b73-cbdbf35d2e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cc78fe-b9b7-41de-84a4-8d6d57de9d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53ec922-f2b6-401f-8086-2a8752afc306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8778db37-b752-4d47-bdaf-b3fbd5b9ce36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.58.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e5b2cb-15cd-45a5-b971-f18c5a90e5ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.62.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4caf85-0c1c-4fde-81b0-4f5dd950a6e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.43.63.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f21722b-c507-434f-9def-38a436cb2e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.55.185.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d449b15a-82e6-4f7e-a63c-8c9fd4664dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb01aba-327e-4ac5-a665-28404c5f7352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31bb452d-70d4-4dd0-9ff4-612c1749d10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b155db4-b9df-4580-a0d8-afd2ea703a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67189d05-51f4-49f9-9ea1-dbb1c7257262", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398086b9-06b8-4e8c-be50-a33f86775336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f91b26-6398-43e5-aaf8-c59905d9ff4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.139.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c42be8b-d891-43a8-bfdc-7e5ff672e4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.66.153.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0201669a-e7bf-4178-a423-7ed44a979e65", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.78.235.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d28f4e2-e023-4013-8651-1c63e35fccd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb928a6e-91c3-4211-8dd1-2d73006a32ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b663229e-ba77-45b5-9dbf-f95106138ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a12e49-85a7-40fc-8e14-401ba5628a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8411166-21b5-45ae-8a20-d97d4f5f3088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65311307-2f48-496e-8581-963a0729aef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93ddb51-b92d-40cf-9c8d-5517d93af982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b52512a-c344-4421-9fb5-cfd08c07d59c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.115.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0993635-4875-402c-87f6-1a9e418fb9da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e46f7dac-b1ba-486f-a992-8f3691659d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.149.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--878284b4-a7d0-4a3e-8e98-09d1d9428812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98b1252f-dcba-48fe-acb4-91b814342257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b23520-9dd4-4429-8892-9d628450ca24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.168.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7248f57e-fbfb-4351-98f0-ab01a6c99400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c70c26b-8307-471f-ab45-d93364aa2d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bf2d9c-c041-4f3d-be6e-e11f17ad89db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292211da-4fcf-4207-9eec-95db6a49bfbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.190.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af734fe-5602-4a2b-a92f-fe745e80b51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f9ad11-dc98-4c0b-b193-416747dd9d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a147b88b-c647-41d1-887e-c6b51aa75261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.192.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc52bacf-1088-499b-9782-cad9a3e22d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9541585-69d0-4228-a10c-7baff1362588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--839c033d-1fc2-4c09-bc55-d3a56dade12b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--792467f1-054b-430b-9bb2-a1454ae53345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.207.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5f8d1a-30e6-4e94-90f3-ee45df2319a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.211.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec630903-36b9-431a-9c17-1677e6dba38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.213.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--763171a3-0879-4eb3-967b-1f6303471adb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.214.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c4b2ce-b670-45bd-825d-019749751a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601f53a1-d71e-4b13-a0cd-e90d70e502e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.5.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a16cc12-0819-4577-9fa7-3582b615ba72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.67.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5028fff-c75a-4a1d-a80d-95b9eddd9cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d726b2c-a258-4778-aa92-92bf26e77025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc02a4d-7039-4f59-ba8b-3284419368a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96b2009-beb2-4496-9a72-81ac672a4074", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.8.19.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc461e08-3fc0-4819-bcef-f37357b355fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14c9a74-2fd7-4024-bc07-24e235717f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5d25f3d-f78b-4b17-a599-7f19284c7f20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55b329f-35d6-4595-9804-d0b2a4071d78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2b240c-4457-45ca-a1e9-bcead5820cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e5a39e-f91b-4608-8c66-ef6b6f84d440", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399ba23c-f923-4ed6-827b-b4c32ed16763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db37832-fa3f-48f6-bf13-f46854ea05cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66110c8b-5497-48d3-85b2-aa5c4264a3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb847549-8ca5-4dbe-8b4a-4ef5954bc9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f89bc95-233a-49e6-97f1-d8d205dce455", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bae0659-cb93-4c78-a9a7-ce12980ec149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7feddf9-3b7e-45ec-8c88-89b1af313633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f165939-8822-4998-950c-1ea266b56e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba1dd2cc-081e-4e23-b2a9-a409e8c09463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f77f11-902b-45ff-8606-82d7ecf072e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dad7d9d-3cd1-409d-a58f-42677abc7d71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9952bf0c-3ebc-47e3-892a-bcfda3c81c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc58ced7-dc54-412e-ae57-3b147acfc69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4af01ca-3d33-499a-b73a-e58e34d24446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4911295-19d4-4b44-b33b-a3be7561540a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5888834c-a9eb-4c03-ad20-c61ca6c780b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57ab554d-e210-41b7-ba76-272b692aaa75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9595dad7-e54c-4a70-b7d4-9f8d3338eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05f200c9-b9a6-4fdc-a071-594749023615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d3c428-6979-4874-9c08-9f1493f74e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ce9912-80b5-4d6c-b13a-283ea95f92f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ac0503-db97-4d6b-8d48-3fdaccb055e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7a1869-b234-4a51-992d-18f65ec92118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24818664-b6d6-47dd-baf4-efe4abb8dda4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73425cb9-d94e-4a5c-88cd-079df1b63cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfb40b3-356b-46dd-b28f-ae08f4e41c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c8e25-7d11-4e72-aae4-625fd854edd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d21a186-eb90-43a3-a8eb-0128582a81b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697b2ecd-f5ad-48ae-83bf-eec64a300e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a83135b4-991f-45b5-8e5b-691dd76150b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52938ce7-0500-41da-aaf8-78df341af61b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478d8838-5322-4322-bd51-b4df235188bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec6ae2e-3023-4493-91fd-ac13203dc206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f96a41-028e-4fea-8380-711205bd6e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89bd0eda-4dac-452a-8e8e-e7232cbf313b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.78.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91e4cbc-b193-417d-8903-e6eb2b8c01a7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.87.249.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7047e22-ccee-460f-b4a0-b28faf03bc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.88.0.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc5c6c7-b26b-41f4-bd76-967b363167be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d3a305-7b1d-456c-b926-8fd2abf9540b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a320a2aa-9a0e-4318-92b7-d4717382d198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c92428-35a5-4b78-a382-7e3fe31b0225", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.1.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8518e5-bcb7-412a-9508-66bb282c12cf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.95.233.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf249ca-4f0d-4312-bd5f-0304ee8aa2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.160.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcee60e-2d5a-4c7b-b8c0-9bb105d3789d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.101.173.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030cee12-12eb-4987-bd18-f455eb08c259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.149.191.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d32215c-1908-400a-bb90-58f3164ddd24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.178.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d530d612-69d8-45da-ad87-89a2464705f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539eedcf-a30e-4c28-9783-e923f33c4a6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de303983-336b-4637-91a9-e107ede569ae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.31.77.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12b8986-2864-4f05-b69c-a6cb7466d71f", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.37.71.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84d0fa9-b7f8-4b2c-bd9d-244596758f81", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.8.78.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de1d238-5a98-4a38-8494-a8de17edd4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.101.11.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87a25a8-4545-4cd3-b881-d94dc98de900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.115.231.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38246b4-21d2-49f3-aef3-1d68450b4776", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.128.123.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a006ccb-909c-4ac3-8699-912e53f1ec41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.180.180.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f383bb-716d-4342-a378-bebf925cfabb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.145.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ece605-b266-45c1-bd05-4b66b6e41bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.154.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7294d50f-b76e-4f57-85df-dc20a5f4733b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.156.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9d3d59-f883-418f-a731-6a346a21feb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.157.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb8d4b5-085c-4ca5-aac9-08942d8d22b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.170.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8892c1-1173-4f11-a756-b9c5021c875a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.196.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93580fe-c3c2-42f2-b938-a461bc8c695d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c915855a-e5f6-43ea-a02b-2b4000e9ff1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.201.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a07469-4e9d-4f03-b8e1-3dce158a85e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.22.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f331fce-ff9c-4055-b59f-6692df304ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.232.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7de128-6cac-46da-af3d-a690540ae12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.37.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f55d507-42ea-4810-abe2-e7b8ce10ebcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.68.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f80b69e-16e1-449f-8dfd-35c8b651d913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.112.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a44cd0f-94ab-4ce4-a0a2-1b8f6cb1343d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.118.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c109ac72-2b32-4283-a9a2-57959c9cd27a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.121.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05fcfecf-79b8-4ebc-92d1-e5657aff22bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.127.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f106219-7ca7-410b-837d-4b1a232a523b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.199.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5648cc1a-fc2e-4ef7-91ba-9439b295594a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.2.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97039ec6-0746-44b8-9100-14190678a266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.201.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466dcf35-b1de-4139-a89e-e85fc814d2da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.76.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3cca49-8947-411e-b32f-01c6810ecb2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.86.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e46c7e3-5910-45ca-850b-f85549c0037d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.238.121.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--708c0242-f16e-4bde-9de4-13c4159e4916", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.239.216.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b862596-0030-4f6e-b479-28844d0f0394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.111.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046104b1-70c5-4509-843a-5bf4f3dc3c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.134.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e2a0fcc-a669-417a-9a4b-b2c5483cf020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cd927a-7548-4aa5-9b6c-a236dd22f321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c42c09e-2bd5-4380-899d-ff0207efeccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--427e2578-9fdb-4ac3-8176-5ff04603cbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2de8f17-d9af-4e7c-87ef-66191e1dbdd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3f7d8f-c4f3-4fe8-a48f-76df48af3410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebdc46e-c8bd-4356-a7d1-3007c68a5c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda58b4e-fd22-43dd-b311-817c7545d598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a621bc-10d3-4c39-8ba9-164e73c6d1a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c29229e-5c8c-4d15-b8ea-a5d6c18402de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32672fe5-71f4-4fa7-b58c-4d9dea5d04f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.143.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f30544-d750-4df9-977d-df9e8e475ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.176.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be4341dd-3649-4e85-8aa9-87beeaa103b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.38.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2feb56a0-c907-45cb-9668-58b8bfee2dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.96.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a517a275-2f1a-401a-b66e-d3d6ed51ef83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.114.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ee4799-49cb-4ab8-a9d4-e39ff933c9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.123.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac01ca3f-a120-4e2f-9dde-92989d8dc4a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8be4331e-d6e0-43d1-a2f8-613937b97d3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.131.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57181bc8-43f3-4477-afb0-5c0a4207da50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.132.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae24243-dec8-44bc-80de-cb0fdf4c1caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba6c6a1-a0af-4517-9482-5ac3b9ab3d67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.150.255']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--674a0848-2d7c-4a1d-ae4c-6d7d2fca3f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.151.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af61a0be-cee5-457d-9bb0-63febb91c24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.158.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--265c4c10-072f-47c8-9499-e20869a84efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90295bd-439b-4bd9-9e99-8a23627159ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.161.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b85828d6-cd80-4696-bc29-15e8dd48f0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.162.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a1f05e-0c06-4405-b38d-990b19cbc255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288a2255-01c7-4c57-bbcb-25c54601470a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.172.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40308856-1698-4194-989a-b999231a210a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.173.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddd6c68-972f-443c-a3c0-244a6e824230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.176.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f576ca5e-cdd8-4f42-b2c1-9e3282cd8b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.178.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f57863f-984b-487c-abdb-d3da62953d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.185.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fb7e75-c465-4d4b-b6ef-6c6911b207c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.187.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d5e6f9-8f36-434e-b542-006ce0a8c984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.193.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af1100d-6dba-4359-89dc-929de1ee890c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a984444-dc10-4b3c-9cb0-ad66723082b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.196.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca988b7-e91d-4f1d-b0d5-0f0e3525dbf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2372a92-8d0d-4e0d-a47b-2c6a9f98affd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975ed887-a61a-47b8-b739-4cd963f91338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14858537-5ea5-4ab3-915f-96c2325d2fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969a45da-08eb-43c4-a2d5-b331b29fcdc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d018791-20a0-487c-b45d-e3870f67e5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.45.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12e72ddd-25c7-447b-a1e2-a69c9bdcfcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.54.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--734773dc-bde5-41a9-aa9d-7d222a0c0805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.80.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d768a8-7eb9-4302-b687-3c11cea08043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.81.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41cffad-9ba0-41cb-bf9a-02960c2eef7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40d9bd7-41b9-4e12-9e51-11714f59a0b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.85.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad3f4db-9486-428c-81e4-17a246135730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abaf839-5230-483c-94e8-eb26f575a98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.89.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d941ef0-6126-44a3-a07c-2f1bf388dfc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.91.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e50ee23-cb0f-4d97-88c5-af592a2dd64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.94.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--433ccc66-1831-41da-929b-5016c318f93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.95.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef99c993-e111-4cca-a124-fc2bd42a00c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.1.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cc5d29-fb61-440a-858d-27a3b2e0c90b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.104.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56647a1-cbc0-4efe-a94e-0199511bda7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.105.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbac1eff-54bc-4e4e-84ca-72967939f344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.111.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67d9972-3988-4970-ad48-20330d820a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.114.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00471763-198c-4bae-9410-fda5974d1ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.115.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f27da37-a42e-48e1-a546-b9952fd34380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.116.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49f2220e-ac09-4d25-bf12-972067464d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.117.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--474d687d-3195-4681-b350-b6a3216400b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.122.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2ddc05b-e6c3-443f-b11d-51d3892b65dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.13.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4137501-aac6-44b0-900d-a63bb84b0f60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4389e0cc-bdc0-4c03-b947-6ccef9f61bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.164.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--317947bc-310d-4dab-8b21-5b3f438d4a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.166.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd957f42-e805-4808-8d7b-be514aa548e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.166.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698ad7f9-508f-40fe-b9e1-f1f6c2446adc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.167.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f18d3860-fc05-4d3e-9f7a-10ee339c21c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0458c4b6-3107-4242-a347-a700890731a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.171.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea4ed7f-2793-4b11-bd3d-670af2b16cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.173.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42693371-6dbb-4805-96b0-1e4ee6426121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ffd337f-ea67-4fa0-bf18-a49a3d84d0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.175.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85d3f2d0-b321-466e-b053-f34540f9ae3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.179.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21c9c27-f117-4963-8b31-0cf628d80bef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.180.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b07c84-f420-4573-9b21-4cc96f0fd790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.182.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc3b4e7-4459-42dd-94ee-2c7b3c6ea6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.187.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7013614f-ecef-4a25-93a5-6f8f6788f183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.190.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f05239-dfa5-45fd-90e7-b1c49d861935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.20.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be5ee2c-e212-4267-85f3-79e3efd6ec07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.22.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54eeebdb-5756-4517-a16b-66317397a923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.243.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35446b49-c824-424a-b68f-3e2de1bfac42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.247.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42510e58-14f8-444f-8e92-9e8d31ae74c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.250.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e80a05-ac8d-4ddb-adbb-d579bfa992e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ab9c18-752a-4f7d-aa46-7d6fe2b041fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be25f8c8-2a90-4899-a8da-9973d19f89a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--177f8513-c61a-4bd9-bdde-fec9622f7d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.28.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85cf6bf-44a5-4d90-8c53-f5aa4724e82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.3.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f02d088-0cba-40de-85a8-d546ef71294c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.42.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee394af8-dc73-4f36-b0e2-d63d4b37c1b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.49.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1cdd3b8-f0e5-4889-ab2e-c7540ad80b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.53.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0e06260-d648-4516-baf6-23de7e5a86e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b36dd9f5-24ba-4bd2-8a6a-211ae78b0488", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7129f971-134f-47ef-a44f-227abf534dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.73.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfcdf2c-7bd3-460f-8ac1-8f51e8d0d910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.77.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957a4ef0-8fd1-4b97-be9f-8d2b0b86a8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.80.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165f4cdb-bcb1-4b4f-8e49-e09d66469188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6bc299-ea00-445d-85ac-edee700d1d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.81.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf9ffd4-b79d-4115-8d09-c6240572ff91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.92.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d889b29-5874-480f-9664-f99ed807f82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.93.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8881c614-8c69-405e-8137-e23a70bf1d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c81d69c-a371-4b00-ae15-31b745871a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.94.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e175989a-ce45-4f59-9fac-5789e0cb1510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0208b927-2436-4495-85a0-1e1ad2524d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e19cb8a-c6e0-4218-b55d-38488ec5c9e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.98.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2451c74e-f1b4-4607-9734-2fde2d45aecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.19.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61590178-112f-4f2e-bba6-7a9623ffa3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.252.53.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25d9256-c7ee-4e16-b07a-fe73e1e4f3ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.134.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52dc3a05-d1f1-4dce-a7fd-50055b44f5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.142.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d73791-54fe-4659-8f33-f9462c59f6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.148.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166d1e01-5e51-4e1e-894a-a76a94782098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.149.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abea62eb-17fe-4586-8037-930c7f17bbd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.150.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b434c2-230c-49f5-83d9-d0962f67fa68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.154.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b242b486-dec1-43f3-8c23-57666ec00e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.155.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f500b9a0-60f6-4014-88d6-e99d94b46775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.157.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87dbb09-97d6-4aa0-a132-17c082b7a803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.158.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db03a2d-5059-4b1a-b613-0895375f352a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.171.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97263cd4-63e7-469c-a88e-f2f5c38d52d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.177.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f594dac5-76d8-4da6-884a-9313b08d3769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.178.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d5e6d8-825b-41ce-9c7b-841f3d796c16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.184.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c05a178-0031-4229-8e9f-bdf8d45b54de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.195.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760bb588-38f2-49f7-9a8d-ec1512b29f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.196.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4035d3e4-ba52-444c-9c6a-6a89c67249e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f0fd31-44b7-4e35-aad1-24429dbf11cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.200.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58739d3c-1603-4beb-97bd-2b2a97e4c801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.21.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--995a3423-d572-47d6-b292-786ea2a76b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.214.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78f5581-4165-4543-86c0-c66e46d8200b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.215.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ba0f31-e5f2-4d6f-8221-404a1170446c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.242.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0c84758-585d-488a-8ab0-3f202c352eff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4126ea-5930-42bf-9428-deda6f4dda5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d796f84f-ab62-4408-b798-2f84ba727540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.253.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e01ef7c0-f5dc-4aa8-ac3e-b028c99086df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5afa06ea-0a4e-4f82-a39e-5fad3d25873f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.39.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78257823-e181-4507-8be4-238dfe4ca0b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.53.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae92826-1f7b-4c49-b97c-abdc53f7d989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.84.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--741f0364-dfce-414f-b60d-f5493713c25b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.27.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f43a184-ec23-409e-93ca-88238fc0ad5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.33.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50142d8-8e74-40b1-bdcb-bfd8adbbe2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.47.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b41c98-274e-4353-ae15-160418028660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.76.84.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf45495-0c86-4c1a-9ca3-6d98456ff4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.182.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d83afd6-9d50-4316-937a-2d982f1bf3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.192.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3784aa6-db01-45c4-9290-a711dcd78459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.212.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd86413b-0bf3-4a04-87aa-bc8984dcd479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.215.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed29842-c8bc-4174-bf73-f0e08f33b9d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.216.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0dc859-a0e9-4db5-b601-23a2c5cbb4f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.222.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dabd57-92d0-499c-936e-76c06344be4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.224.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a1683f-80c5-4dfc-aaa9-5a9f153dceeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.225.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c7753b4-e02e-431c-88f0-d71d6bbeb97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff8761f-b561-45d8-839a-639b2e2b3ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.235.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3540d6e-341c-428a-9ead-1bffaa1fdbac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe206f4-53f0-4832-973f-5a951f124954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.236.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab151bb3-dd28-4cee-8cb4-ada20e114126", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.81.8.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3282dd20-c5dd-4810-a195-2a8730188ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f7e9491-566f-4f42-8c87-1a3de92bd840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b40c04-b075-4f3a-ac01-123a11def3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ad3d92-4789-473a-90aa-c424fdcb7943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b72eb9-ae09-4b1b-945e-944c1af94cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dbc17c-5128-4a5c-bacd-ee2eaa2d5829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c790daf-699a-4a94-aa0a-6134ac0ba1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.102.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d09435a8-8fce-4665-8a47-1be2ef9ac393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7daf9d27-7c37-4400-a800-4f285bab4934", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.105.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e142543-5906-4597-9c26-9e63f5b2dcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.106.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b93ba62f-3c1e-4b14-8d00-0ad458315491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.108.75']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0437c24-8690-4660-b247-5ed1052c9aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--567b3a21-9dbe-4292-b571-677232234c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22675efc-f43d-4525-8ee9-fbad250876e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.110.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d55cee97-833c-4cec-924e-7f01a63331bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--369340c1-2905-4d0f-89ef-5ba3e9663b06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.129.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12876f73-a188-449a-8626-29b77c05b802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f46a9f0f-43e1-4b14-bbd2-4191487cc573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075794cc-2206-439d-9a21-bf0be3d1de6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.134.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--450cbd07-f36e-4f61-b04f-e251cd462a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.135.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f27c2b7-5447-404e-9239-c97cfbdae900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10539681-1e91-4331-a99f-92f2c5089839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.136.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19d241a1-c8e8-40d6-84ba-6561dd3645a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5226385c-d15c-4fcc-af54-8beff21c9537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f7b06d6-1ac4-4632-afe8-d27bf9e7427f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e81e66-69c7-4ebf-845c-776aa25fde40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c786d8-cfd7-4fc5-869f-9278d9128f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d492d92f-79e2-476e-938b-ed886027656f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45358ab-2d4a-46f5-9d55-7483986cfc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723260a2-7069-48cb-810b-387b4d019e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aba01bd-0aef-471c-9d3f-1106f3089c1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.142.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7529c0e6-558b-4aa9-a538-639f7a677338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e75958-0a51-4ceb-b494-1b2d1579fca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.143.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400eb8b5-9669-4bf4-b211-f311b9aa8f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.178.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447064cf-7a5b-438d-a091-8485ef3c70df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.180.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75596191-7a8d-468b-9c51-95648710209d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.181.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4296f95b-3b1c-4c1f-ac47-7a02ef64a02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.184.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b9d1fc-554f-4ed2-bc2f-244c899929c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.186.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9163126f-7180-45a8-84e3-1d9dbb0e8b61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.187.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42c27e7-1237-4f63-af54-a585e432819b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.192.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03518f9c-8cd4-4dbf-87cf-aacf02e734d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.193.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96ae741-006d-4257-9551-8b7670928bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.194.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190fd202-477b-4ecf-9c1f-64f241076919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.195.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76875076-afb7-4f72-a7bf-25e6a065671b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a02ff2c-d8ee-4fd9-b4eb-4b42cb3c6d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.201.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac7883e-4ab6-436a-98d1-eeed4696caee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.202.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4511e233-271e-4ca7-8c15-d07fcd1e0ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a5cff8-a284-4ce1-ae37-49a7d3ceeeb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c74ae0aa-3c5f-4589-b6be-1cce02aa802d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.207.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4327613e-e638-4fec-8eda-bf4a795d9211", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.71.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a411c3cc-ae24-4f29-ad58-ed3b9b9ab465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.85.8.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47a910b9-3bbc-40aa-a670-cc38bf691b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.86.185.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55755c4b-fa26-43f3-988c-123a8755e971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58795e5-115b-4d78-bb5f-a7546fb52542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1d80b6-8101-425c-985f-34acf1bbd73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.12.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6149652f-52be-41c0-82c0-f99df58f4a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.5.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c0f815e-bb29-4062-a586-4787e8b5790d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.53.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bdc9f9-f4bf-4685-89db-fad7d04f0434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.56.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7dd599-a1b3-499b-9dc1-710443369f8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.192.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e13e2a-d201-484d-9215-1a6ae2e0b0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.225.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896c46b5-d397-4307-adb8-018617388cd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.240.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c2f9f8-f522-4389-80c7-c00355560c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.244.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eedc208f-d1dd-45b9-b383-a9ae7fa99492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.248.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3122a3c2-0131-494f-9c11-0f772b8762a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.251.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad1b31b-e9b7-41eb-95c8-29e6cfb34cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.31.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a3079b-05d4-4fff-a89b-a86e2f8a8752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.94.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f912aef-d578-4a68-9dd7-569d42064753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b6b8b6d-391b-421b-a07d-6c0589042947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8b36661-51e5-444f-81a5-a3adf282dfa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.144.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4127a4f-b9b9-4c8d-a365-f72d02eb0891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.83.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a278b4-db64-4dec-8a43-a78d1d516517", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.213.46.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b8f7ef-9103-4d29-ad83-97b301d7ba45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.249.205.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2893b02e-4370-445d-a395-ca6565867bde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.72.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa72037-0364-4db2-bb06-75e5eef62ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.72.212.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b71427-6fe0-4a23-9e95-f6eab34d1e9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.10.223.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d765ec0-e890-472b-affe-d8168e494043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.102.73.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea49ff4-a029-43f1-a143-ddec61546c68", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.129.182.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b3e37f-10fa-420a-823d-6cbcc9111123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.13.245.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9630c20c-f1c1-42df-823d-aa229d7ec3a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.167.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee343165-70b0-4f92-b374-1a83b6d59622", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.135.71.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9edcd3-3421-4062-9d55-a6eca14c377d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.161.147.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b76883-cf87-4c2f-8b21-8421a2acb1ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.169.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b90af3-e750-4a8b-8d89-737e0d66408f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.181.86.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d477f9-fbee-4c46-80e7-bae903f50129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.187.35.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24168195-494b-47cb-99e4-2d169e6d37de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245457f4-025e-4e89-8092-84c4046a7e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20e34b13-4207-4bb6-8eb3-411f4d95bcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7743724-93f4-4973-abd0-34e86afd4595", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.130.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bfee3d4-731a-4e43-919e-b99846394acc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.189.150.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a3fc0a-bd09-4c83-9632-c818f14e6562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.206.111.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b75aa80-53fb-426a-a901-0ad7f6a1326d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d98054-a17d-4a08-97b7-9dc078536c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7173a4ec-c6e4-4b0c-880d-77eb59b6941d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b067a4b-d81b-411e-bb5b-9f66de69fc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab8ca66-fe1b-4037-a97d-18eabce863f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b9d7ef-14d5-4906-a1ab-9d7f286fec51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510b02ee-5257-4685-9ac2-099f71175328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2f960f-1616-4eaf-b56a-00707f1d48fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212c8c92-c83b-44d9-8900-69a50ff6262a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bfca9b-13fd-4143-98ac-1f13e0898363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24214ef8-f2e5-407f-9bf6-f0772abc6fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f3de5a-4d8b-40df-8ab5-c08de907096e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.226.140.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce43995-64f2-4cb4-b485-f46b7b9d5492", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.252.154.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779bb1f0-68a1-414d-b072-dd2dd2488e1d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.253.59.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a46168f-443c-454e-97fd-a1a137a832d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--902101ef-a75d-45b8-8a58-62d6bb67ef4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2023-1389. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.61.209.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-1389", "external_id": "CVE-2023-1389"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--32579f88-ecb5-46eb-9a9e-6123c9164e3e", "relationship_type": "indicates", "source_ref": "indicator--902101ef-a75d-45b8-8a58-62d6bb67ef4f", "target_ref": "vulnerability--4f3d5d6a-75bb-46c0-b417-b174ec310a1a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d0da3e-6cca-4726-8cb6-a68ea0826c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.143.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456e9062-3518-4423-be3a-0efbbff7e5c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.20.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2131f7fe-d354-4c40-90d7-ed8b8608d63f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.23.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b08998e-2adc-478e-81b4-f49857376b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.26.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85022bcb-1f29-43e9-be60-5f929dbc3cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.46.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e4cea9-245e-44c5-8366-ab6c8d0c1c8e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.72.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c06cb28-d8ea-4343-83fb-c3bf70fcb187", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.31.115.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a10d6ee-f99d-42db-90ef-3281e867eced", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.6.248.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a71769-9bb1-44ea-aafb-e4d55b71aa4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.176.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0858795b-34ce-42c1-ae62-d593aecc0997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.7.233.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a49b3219-f00d-48f9-9ddd-19f8b776d34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.15.115.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--470248df-9d45-4d8e-aeeb-dca714e88ce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.172.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17039a8c-e834-478f-b489-5d31e32bd087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996add68-70b8-4973-a94c-3fafd34d0a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b209cf0b-0e94-4f53-b176-dfbbf5dc52e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.110.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0652334a-a84c-4da5-964c-a2fe8f6f30db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc222f64-842a-40b0-a972-5ea98aa078aa", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.210.79.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9501128d-9699-4421-9b13-6441af84e860", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.222.205.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--670da889-d6fd-4f86-a2f4-28a0a4f29c20", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.254.130.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70c6b4e5-7278-4a22-a657-734f48942f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.204.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c911e3b5-bcd6-462a-9b09-ef232dbfa3e6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.255.66.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a895430-490e-4e0a-9c35-8e35a526f783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.103.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad2dc79-3fc4-49a0-9b2a-bdda12a3886b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df3b549-829d-48d7-9add-aeea2e491ac2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc45b09-4839-4f3a-b85e-d129ece54c81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcf355d4-33f5-418a-9637-acf0dc8de28c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82acf7b7-a1c5-4fe9-9048-0cda81b375ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.149.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131c8307-d938-47e6-9d79-101d33bf0175", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.75.74.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3076fe-34de-49e8-8393-a354a302a29e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.107.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7f76a4-5441-4a01-b985-cd1ba0111432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.146.93.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702f8dde-7164-495f-bd2b-007bd70085ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.68.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4b25a8f-91ea-4cf6-87ed-521fbe4dab29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.81.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5eaffb-c59b-4a43-bf92-1280276f4d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.89.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f721aa3-a2a5-47fe-934f-6851347303dd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83106641-4bd8-468f-9b26-2a66a3475436", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd0ef20-edb5-4dbd-9706-672efbade60c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc957d0-024b-4521-8bd8-57e2a0772718", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45dc02bc-aec0-49a6-a7ac-9f0064c7676d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2873c7f0-7fa4-45a6-a9ca-04440099b854", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c2435c-c8d4-401f-bf3a-5c01d5e39a51", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212be20d-2fe6-4d98-be9e-bb7162ec634b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d30860e-93ce-4977-af77-41c5096e5fd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9bded7-9a62-4c65-8921-103f12ec136a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ec01cd-918c-4ede-b78c-25309073e145", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be0273f-af03-4379-b222-8f063ff92662", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c78eca0-8b1e-4554-ab71-980b06a79b56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a222dc7d-d56c-4758-892a-d656364a025e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9c44d7-5298-43a7-9edd-54b5f5b4ce3b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9be99a-c6a0-463f-b700-0fb6950d0b06", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.183']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2906c37-b352-4e05-9fe4-09e03101694f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99627c0-7551-45ec-acc8-cc4943873c49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b286c3c7-6e27-4f2b-8d2e-4403f82018d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57d548f-f287-4969-af7e-1d99db3c8628", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb88089c-94e3-4fc9-935f-72c6f0c5c9db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0700c739-e92a-42dc-9ed0-5f4bafe509b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb33f906-b718-4b0d-87bb-3cb10fe02acb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f2e6fe-d64a-4af5-95d8-c8cc527adef3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b04049-b7be-45e6-8e9e-b6345291f79a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93501b79-d2ac-4a44-8e5e-d6570ce1b737", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30940912-6fd5-4a42-b3e7-8c8c83bdebe2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ef0764-69c7-4378-a7b9-e8c14fa58b4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0970b01a-4d9d-47e4-aee4-bb99afb4d8eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426671bf-21ee-493e-b898-5d14c5f267e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fddc67-9ad2-4c42-b381-696a6f9a2126", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac352ff7-5587-4a7e-b68f-c2f8e60aa388", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b8d5d6-786d-4d93-a18b-60e79eccd352", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d33b74-3af7-4e00-8282-20372f72aabd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bedffe-e49b-48c9-abc4-6056c98eaec4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec29e07-9a57-495c-ac89-5d0acad7b246", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd54805-2105-4748-a04a-8547f3ff705d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--870ae136-2f5c-4a32-80a9-7ed3614a0a05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df1c037-8245-4e3a-a0b9-bd77bbbeed1f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.168.141.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58774f9-7967-46c5-8d64-d0d4e0ec8527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.188.189.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b982be03-af62-42b0-8337-e269d459c955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810ce467-39dc-4821-807e-c133c80210af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.207.215.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f36e94d1-45a5-4381-ae39-b762b52082b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.21.227.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5dd18c-2004-44f7-a306-91e3d8aef41d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.224.241.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251eaef2-81ca-411a-bf38-b5d164a4ad15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.40.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d857cf33-b5ef-4368-9c7d-be107806c4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.72.237.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8eb0769-1c29-434d-b96d-19c3658aaa2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.144.112.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2b5fea-c8fc-403d-8843-f2beac445ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.145.62.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--154500ec-b26c-4799-a213-5e6de8229bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.159.122.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--030861d5-c50e-4352-84df-1885a903cf51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.160.177.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c44191a-9b6f-4bb3-997d-a9d4c9700f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.64.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2eeb4e7-0673-475b-9190-ba85637fd889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.164.42.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d92ca470-fd08-49db-82bc-9485151dfb85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.169.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2178b17-36c3-4ab1-a46c-8dca8017169e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.52.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0855db06-3208-43c1-a61f-b01d517fc323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.58.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9025879f-8bb4-433b-95df-d12262670820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.174.189.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ee8c77-0df3-44d1-b8d0-ca1839f7074e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.196.176.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc0a5f8-efa3-4cd7-bde6-6b6a6190ccf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.188.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6c8b0c-ad36-4829-9024-529b5a9a1a28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.197.27.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a6e94f-79c4-4910-8fb0-7d64b6a0bbb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.208.18.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bda92ad7-c78d-4b15-bcb1-18b0d4982847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.211.104.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb45f67a-3c01-4aa7-976e-52084c4e6845", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.211.226.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61d9d941-2298-419b-9b19-b5095efe64a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.221.56.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf5e542-be9e-44f1-9c0f-1358f62432c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.226.104.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24563540-3bb1-444e-9b6d-6fa12b6f7b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.57.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4499577b-b3b3-4916-9f5a-bf10c6c16825", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.38.92.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ab7e45-ae53-494b-9d07-54b195aa3d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.82.5.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e93d894-3d27-436a-8d88-53f7c9639c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.87.136.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c58301e4-9cd2-4380-9ea0-13ab466e495f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.199.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d6ebf8-8a59-4c90-af26-420beff9b8e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.95.121.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37df9ecd-9400-4d63-86e6-11e845d70117", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.6.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a206fc-d117-4588-8fdf-c32662d122aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af11d7b5-d158-4ca0-9fc8-0b88e1e0c7da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.105.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31118f2-dc4d-4d5b-87f8-f687d75c24df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.97.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd2f5050-d57d-4740-b8bd-3c8b57eafa7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.124.86.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f4356b-b593-44b3-90bb-bd56bfa8ab04", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.152.42.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d342a9f3-7b31-49e2-a855-6b0e9ce9cfd9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.209.234.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d831a92-6b3c-4d98-8b9a-f65d080896c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.211.153.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89912e4c-02c5-48ae-8fbd-85ec4311ac50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.216.71.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbb1e30-cbdd-4fdd-9464-2acfc77a60dd", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.224.62.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a79dcc92-9a3d-4812-8706-2f31d789864c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.23.69.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8021128f-4f1c-4241-a337-4d927dfb7671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.240.17.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de681c0-013b-4db4-bcd3-fcbf4e97207f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.151.192.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffd19fe-849b-4b43-9fa4-242fbc0642c4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.16.212.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fc4e04-e4cd-474e-8ce2-9ecce4473341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.24.226.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2731f903-5f8c-4d2e-b2d7-759b3389fea4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.26.132.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1fdd7f-5711-45e4-9f9c-39c8c7f716a4", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.36.162.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6edbf946-4df5-48f1-9daf-62c02327492e", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.98.148.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb92f4c6-79ec-4f9b-b6d3-72779cd541b7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.177.202.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1788d0d-eb0c-4e45-9675-88e54a7552c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.18.60.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0f7d9e-b725-4359-ad24-a25658d21f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.182.231.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f497ec-d3c7-4eee-b9a0-dfaf23df49de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.184.113.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0cf2fc-3642-4044-bbd6-353c0fb0184b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.191.125.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ea3b0c-5aef-42f2-823d-5cced0994052", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.199.224.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2979e92e-69ae-41a5-8eb4-7d635eafc3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.255.229.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb8e105-fd3f-4e11-a158-439f9c3624b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.133.46.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3311eb-aff1-4ebe-b551-c514e3429c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.141.63.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac62145e-a05a-4cb6-83c2-71cc059b6d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.162.143.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af061c7c-4904-4a22-9b5c-3749fcf89c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.210.209.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec17899c-a06c-4999-9912-0007b89d7e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06833a3f-100a-4ad7-9bf2-dfea6c2d166a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.84.183.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3f674b-dd3c-45a7-a962-1b862c1f5554", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.84.183.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f487c20-9c7f-4eda-b85f-6bc121bd4ddc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.77.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79bb8147-9a31-470f-aef2-f80d7f5fbc44", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.83.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecea80f4-606c-4c4f-ba4a-f99eda93a6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.188.97.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1bc140-fb21-4334-86f5-0dcce1585d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.93.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd89dcfa-520c-4371-8aa8-86594b6057e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.95.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb9f2b1-c74b-45ca-a0b4-d360465e16e7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.107.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c148cb06-a80c-4a19-9f88-5752877e34a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.150.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6118d49-a0d6-4c3c-91af-b3e05fee2f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.164.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c697de20-05ca-43c0-addc-bed69c1eb70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.27.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cab6a65-2d8a-43d7-9813-a37e301b68fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.99.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39e5815-1308-47a8-8924-15067a61a611", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.163.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2210f10-9e08-4c50-b25a-ae0f1f6d4b68", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.174.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5a9390-6afb-4b41-ad25-79ff50faa0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.244.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d29429-6211-4864-a0db-1c478083c6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.31.53.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d15fad8-73f9-4506-93d2-03fc2f31bee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69de9fab-6959-4f89-963c-f3f0852e5833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9339685a-8af6-4894-ac32-58b38c18b7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d7379f-8b96-44f6-90bc-a020d3ddcd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50878861-f774-4a9a-8451-94208e70e3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836808a9-de2a-405c-b88e-fe3a3d44ed5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6b7d0ed-6220-4ba2-aab7-058e3929fe16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261f17f4-aee0-444f-8ce2-7d1b620fe6af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b862f57c-53b6-4c5a-b1ef-3a768c23969e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571eadf5-f010-47cf-9ed4-0f8b4ec2964d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e864c3-4dea-4587-b617-b7dafd4469be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181c9198-a6b6-407f-ba5c-5e69ec3b0eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac28e903-cddb-4d2a-95bc-c4e58576ff47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb233c2-a32c-4593-a974-0900c4ecc53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bc94ab-a501-418b-a75a-99704a84db97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c17337-6198-47cc-bf0b-0d4f9d08b17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f27f991-5882-4cc9-ad14-0112e6e71d31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0a22c7-0e22-4257-a099-cec0f4a6fd0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52cd0555-16d0-4fc2-80fd-b79ee1c5baa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2319bf7e-9011-40af-a864-71dfaeecd56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566b8a4c-1422-41ef-8bb4-c990b94d01ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949557df-98d1-4461-858d-c3a92cf95643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b814825e-429b-4aee-b61b-bf54fa43f008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89efe592-aba2-4cc9-9109-8e95913239e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--538e2b5a-54e0-4557-9b91-d8c921dba05b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8b63bd-6740-444f-9d4b-5b8c71123a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89828d2f-21f7-40a9-9d6f-0340ab4adf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b36ef02-543f-4ba4-bdd6-c42a77eed9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.143']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c3a1e8-bd36-4451-adf7-0c9da38920b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb724fe-5bd1-407f-b119-916780e4e06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280960e9-66ab-4c3e-aa36-69134f9a8d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e83b2a6e-3298-4dff-9d93-0b175ce30c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--717b1134-a6d1-41ec-8293-649b07d5fa29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd8b6ba-0fcb-495a-aa81-36df5286643f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe3c7d8-896d-403c-819e-68e6e113f8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ae691a6-72c0-44ae-81a3-c19f18ed3195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--324e2e2d-6c10-4453-b299-7dea90db4fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62c55cda-a828-4841-9219-924b85b359f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd5af0d0-a8ba-4ac3-8b9f-b68341a93fed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8688856e-5ae2-4b08-abbc-3c201cef1c95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1025b29-9c9c-4280-874c-88bcb2f45869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06422e12-1c32-43c1-b07a-d5d7f51ab1fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f0c445-5aa5-4015-8b6c-2f3d78bde1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7292110a-0048-465d-bd50-55acf6a80a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5616ffc4-de75-475c-8945-367e4aabb96a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f040929f-0e5a-40cf-b56b-9419bec086a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79379f8-44d3-4676-8533-7c76e5238a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a41ebd24-b837-49f3-905e-2d4a1782c2ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf322b96-2998-492c-b1f2-e4782ef77ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b5aea2-b772-410f-999b-cb4f153965d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7a349f-de45-4256-820b-88291c53b58f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e96c26-3e01-4c25-99cc-e04f60e07703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.176']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aec0bae-203f-46cd-a0a6-a7acb68cac96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5eaceec-b74f-4f11-90f2-c0b493a06d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6244148a-94a1-416c-aac4-83b61e24bd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e461fb5-10a4-4666-a33e-605653863ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68be649a-6a35-40a5-8620-e543513268a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564f5b61-d004-485e-9068-2de3fbd161ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f28e4d6-faa7-46c5-9908-b5e79ef5fc59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46471d89-7019-4b22-9a65-d49fbe4eed2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3085b297-b8fb-4e0d-b65d-15e95425be08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34784034-ab84-4926-a36e-1dece557f83c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b54b0b-2535-4241-84f1-1c773e1513ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35ab41c0-4eda-41c8-ab19-1bae21a7550a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34efea5-7ca8-427d-9f64-9548f3b748f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18756ae-45e8-40c6-83a7-fa0a896514fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac83bbc0-e9b9-48cf-b6b2-532ef93f0795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dfe273-8667-423c-a24c-7cfe0101b4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fbab94-96c8-4354-9b41-da7f0cc1d142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdfadf5-27f0-4e71-a8e8-7f6903e23c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b41708-388a-4c3a-8242-7fb29bd8d197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6807965d-058d-4ddc-a1e5-66cb04ae0f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b26724-0afb-41a3-a022-758b000fc15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ce77c3-9c24-4fed-8594-c02fc576f76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb75f4c-c9a9-459b-ae1e-378ba676651e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0799ce4b-cf48-4b19-b5c1-ef7918ddaa91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dba64560-a4be-40ea-bd9c-400583c43b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1c79de-8c41-43e8-af43-e9331ea16f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be542fbb-afcd-40dd-90e4-6a0df205a796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9246cf28-7055-4474-ba69-6eb9f6d86a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad9a066-5cad-4a06-a1b6-3657c0ec8232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b150533e-87d7-4649-b299-4710f285a5c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2222cafa-8123-4eb8-9f3e-d712631e45af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aac9b91-a606-4c09-b14d-f0e9512e2090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d57112-47e0-496b-9609-1b8feb178374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f8bcc6-e77e-456c-9e9a-95057066ab70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1411790e-e8c9-4fed-8a54-1eb2efc5ba80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdd23557-7a60-44b4-b359-73ae722ce3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6197bb9-595e-4b08-b568-915f4cd6ee4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd3766a3-9b83-44b2-955f-4b248be34a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba792cb4-13b1-4848-82c6-8f51925476a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46b157f-0d9d-4df4-8f3d-ac33849e9c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8324266-ed31-45e7-9104-3aa3ef5b564f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca72627-5cab-4321-b1da-5f9dc9f6334e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fd3eb6-dbb2-4fec-92d3-0a02cdc2cd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5348a294-5c51-4060-9e03-b234be372059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00f6dfb-9170-4115-96a5-751d989f4675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16039b5-932f-4f17-9958-c0feb24ee8c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788f9885-c441-403d-ac5d-1f35df248974", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e400626c-f32f-432b-afc5-6cd4298f5163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a234f5e-903a-43b2-816a-eded5e0cd0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26060c06-8a95-4979-a984-eb1e5ba16dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b89f1c-b3eb-4cad-9fd7-72da6d6e3932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1134fd1-9987-4853-8889-59c968710d8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55a4a6c-bc51-4f91-b823-5519b264b8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c613e2b7-f5f1-479c-9c6a-ebf51e0251df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--841fce91-93a1-4db8-b197-65d9268b886f", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc1bec7-d347-4f03-8487-1512c37809fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae53ebd-a82f-4b25-9a2f-dda501460b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d880bfd-469e-4079-b067-c89c6426ba91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40ab8456-3aeb-45f9-ae96-f0087b0beeb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4936e956-16f8-4ac0-ad57-9d4c6ed70764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c20cdb-ffc3-49e0-afcd-544719ab7c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779532b2-ff3c-4f75-99a6-a0a8d69d9dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a524b073-c4a5-4173-8ad6-11d1efb7bb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253c65a0-d427-4601-91e2-eed5bdc763e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ee2121-4af2-4de2-ac0f-b6062cab1d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539693f5-fac5-4129-ae5f-e31fde22e57e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1d9f41-5aea-4be3-81d7-c6f076dcf411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc84c366-fa75-424e-b1c6-63ae1e3dc66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0986d1-524a-4e98-9475-ccb7f6b86cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5315c010-222b-435e-99bb-ee3acce68d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5a8ae5-9a64-46d1-a130-29d9a01df8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7127eb66-6149-41d4-8136-098ac0aebf42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcc6570-1007-4035-b67b-e3a59c4adab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e75ef16a-c49d-4809-9cd1-acafd02dfb9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de01bea9-50dd-4edb-8985-eabc3e9c33a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.161']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860b37aa-abf1-445b-a0b3-1257290060bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2eab526-11c9-4786-b151-a068f6c86bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a0d7e4-e890-4cfd-be9f-d4b8df62d9fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee9beeb-0aaf-499a-9eb7-1baeb4bc1a10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43241b9e-4c04-4d56-98a4-9d6aedaf2c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3092b859-229e-4d84-9678-04d542d9f4d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8750863-8026-485c-95f9-b8044c345a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae4ed03-7114-4875-8c90-38bfb65f374c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fbd929-09dd-4aa6-a436-84cedb8ebe52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e955a73d-a069-432c-9da8-55c34bf29596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1902f473-69b7-44d2-9c61-cfc28bb14152", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e494d2a3-4708-4512-b03f-0cff36368b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8543d2a-7cbe-48ae-8c75-a7e5c19bb084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12872287-0c2c-4f77-a9ed-640442e70989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0868022-0e58-4104-9e46-cec0b85b2ab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed1ae23-5988-44ac-97c3-0fa7af4790bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e725c70-79f8-421e-9d2a-aa074e7dfb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad54184c-d6d8-491b-8fec-da0c6349cc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8c3805-f296-418e-9e01-46f367abb993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb00eb0-c3aa-4ae6-a855-5cee98b38de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7731507-43cd-4c0f-8b3e-dbb4d0cc2b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd73026e-24f5-4f6c-b2eb-4ef7d947fe70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d11a88cc-2ae9-468f-91f4-ca47ca357540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a158b9-1bcc-4209-9644-60ab7256c7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3427a2e1-729c-4b14-96d5-8777b95d9919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2b9226-f3e8-479c-a574-5990308be680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c57864-6f36-4d76-9c67-2c380337f966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9795964-631f-448b-aed2-1de055d6f456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65316af8-d959-407a-ae50-88367e9477b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da096e2-e740-43dc-90db-b274060136f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7692712-2225-4339-ab3d-1487568c9ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9a3ea8-3a64-49e5-aef0-0ffcdd66deb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e596f4ca-682e-4da6-a3d2-0a1736503529", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcab871-01b6-4e34-867b-2929d7e8cec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd78e06-8057-4417-9baa-c7f56e1765f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb97fed-19e9-41ee-b60f-6a7ce3a21287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4e381cf-1ad7-43dc-9671-203ba2e94457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e208f726-9645-4b53-b759-c2fd2e160560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978c081e-97c7-431e-b30d-af633d81c6c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76aafce9-a8b7-491d-a2b4-b06c8bce0e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d65a87-d334-42e7-ac65-34a7dbb41ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2b0d3d-f9da-4c47-a99f-b13c352f437e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ba63f7-3994-4bfd-9cda-950ded96ead2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cbd65a-cc57-448d-b4b2-f25140ca6290", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c289af03-bc5f-4420-a58d-dbe7bc1195ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295f0802-d296-41bd-8512-1d67e111da39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09da3576-1ee2-480f-9f32-d6dd4a28d1ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2f70ecf-643f-42c0-8234-66f9ddcb124d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae09f7f-114d-4da9-9985-c7771a73291f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bd1ff5-d905-40c5-855d-f5d2ea8ab5cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edfbc16-800f-40b9-b44f-c9665bc4bdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b698064-cdfa-47f8-bf34-2d9dbe4de0fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0808a1a9-bc08-4be6-befc-15b9d305dd78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d156d89d-5f54-457b-a12e-3bb168f1555c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128d72f5-dc37-48af-a144-dbd41138a8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73ab2ba-fe10-4691-a5eb-0689a30aebee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25e40c3-8649-4134-9e3f-3dcc3f9d60ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc573c02-fe49-43f6-afc4-37d176240c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa170792-95c2-483b-85bd-277cfa78e615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ae5802-065b-4c1c-bfbe-b9ce6062d5b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25089b9-58fc-4d11-bdb4-1035016e6e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.9']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9478230a-9aca-4120-b311-254cd1e43bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8088d55e-c9eb-4567-91ef-f8f3d7ea514f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e17c01-33b4-46e7-806e-f9a3b2d2c58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830a4523-ab4d-4dbb-bea9-705b8708ebd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--273991a2-96f0-4e14-a196-eb130f247858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a9afc1-44fa-48e2-bef0-aa2d8bb142d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6397fada-ec0a-47ff-9232-97d850a8a6ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad450c82-e5f0-4a2e-b228-5abc713a17de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.162.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8073628-4dcb-4ae6-99d2-870964ae18ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135d8c63-d9ef-4dbc-b97f-d78f81d6d289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e7efe5f-650a-4828-9925-429057bf1a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8659ec-4767-4d3c-b3ac-b6c5acc1eab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdc1707d-f4a4-48b2-b713-ed0fc785a884", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5740f0-3e73-4d7d-b7e0-3aa04876ec1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96594c66-a8b1-4227-b9e3-8bed51d93857", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7120eaf4-7e86-4d42-a45a-9481e7c76f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41caf478-09ed-43c4-ba84-bcaf458af8d1", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ea8270-d309-4aaa-975e-e21b5ccd50d6", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393e069f-0bbd-4dd7-91af-dc7a2bfb9677", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef08514-a950-4124-a1d7-49db10d19f38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe481c03-f985-40a1-819a-a9cca7efde20", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6990cb-801f-4840-87c8-39a48d58b239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aef22a4-c5ce-4c51-8441-29052d02dc7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f91c00a-0ee7-4a4c-9a75-0f038585fa71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587bec0e-9aaa-4a19-b19c-fd32563df2c8", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.89']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22b7749e-1e8c-4aca-a2ea-f7c5a3645a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7951cb1a-9260-4c74-ba25-156d80aeced5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb18bc75-01a4-4ae2-b6ba-371a15cbf032", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.111.30.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c3457f-d4e8-4d04-aa09-efb80b44b8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.181.112.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98dd9cfa-172c-4e9f-b4b3-99268c1d3fce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.21.197.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a213b9-6c36-46c5-98aa-f2ae40bc33f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49c0068-0b39-440f-8609-3764b68d2b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb894a2-593c-4a18-8fde-5f761e56d510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--941da606-f8bf-4a6c-acf1-b5f2692ae340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0d09ca-15cd-49c4-871e-620abe28aea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25828479-c34c-4e87-bfac-3fb9c4d399c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a66ad7a7-be2d-47ee-bb39-fb25a10ed847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30fe1d7-f096-44b5-a8a2-15046b22ddd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbc3277-939b-4c60-a7ad-7be8e1fadc43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05782008-0430-44ac-9cbd-1ed493ebca91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf98653-c297-46e6-a191-6d099036c8c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44534c65-9e9c-4026-92ea-e9826ade56d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a7aeef-dc36-4175-9356-8eab2d117956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482e5d72-f4f0-4f3b-b165-4754a3373463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19b3e98c-a92e-4fe1-afad-99a41549ed87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c82e28-4f06-4eed-88c3-2597ae750a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7605b34-6623-4ffe-9a9f-e12947f2ae6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f9fc0e-dfca-474b-b77c-5dfa22da59e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392edf6b-6e0b-4913-a84b-84d16a125c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b88c0fa-b082-4ed8-95bf-c2a90a86f84a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d672dae9-2623-42d9-b6a8-9539807b897e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fba47d3-375c-4967-9710-e190eb20a246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85b94c1-a8fc-452f-8753-06b0ed0f054a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27d2625-1725-4259-a90b-ae0bb48691b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd72c7a3-731d-4073-aafc-47736a778b9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66172491-dcf9-4b25-a9da-96a58e9f4c37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd742cb-679c-44c5-97be-bfc9d3657b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--040e2f19-51e6-4e6a-9f67-d71a62cb6a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36be09da-eeaa-4554-a36d-4b431f97511c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa3e33ad-f8e1-4476-8d9f-f0b7f6015292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b97b7f-a8af-4bc4-a404-780a144c7d87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afa0fdb-ceaf-4009-b6a0-8f42fbf9aec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56e83df-5a36-43bc-8e27-512cd01a94c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8214b3-173d-454c-9ef3-ab38d9cff323", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8a33f9-8c55-4b78-9e78-ed11e8fcb259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c881ad5-4991-4f45-ae87-a099ebb4cbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb94e1b1-d5bf-4ad8-8f78-17d673ce1ef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a52cff45-8e18-4f2c-8391-4fec911e25f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240f1479-f881-4eeb-992f-a33d4cc1c4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead31920-500a-4bbe-898f-bdd7e45a0aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215c307e-682d-4afa-ac0f-721d12ac2435", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf31ca2e-9232-4b5a-8511-80c19b75fd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dfdf1d-a3bf-42eb-b8e6-4519073f2269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e3fe83-0d03-4131-bf53-54faf9e8b3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4042ce76-27ed-4da5-ada2-c03b8cda7437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e54c74-f6c3-46ed-ab65-f7dd428b5cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a74debf-23d8-448a-afa1-2c599246eab4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc319133-ff02-4c41-aa6b-d1241b22579e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f2c14f-ded9-45b8-8597-9275005f43d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b519764e-a3c2-45d2-ba64-779082c66226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d08faad-dfff-498c-912c-128f89783820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e11955a-30d7-48db-a76c-4ea34185fa8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0337943-8162-4d16-a9a7-04b9dc1b24f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f678c9d-c159-412f-9541-8d2eabf9a53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ecb9d3-b8c2-49ee-b8d8-c5caebd3095d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--600ad359-84e3-47a7-aa68-6d361e13188c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b9f9f3-63f9-47d6-9002-183a948210dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf63e72-331f-4949-8b43-83c6396d5147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572fd1a5-f3fa-4637-ab18-90c1a8d052a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858e4d6a-7c79-4655-a437-779755d853b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afab39e1-4bfa-47cc-b5d4-95069d72ec7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37d5157c-2419-4ffe-b827-240b43941944", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a862c9d-61f1-4525-a8f0-9ac1356a6ae0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea878787-1f59-466a-91e0-5367962b9226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39250f55-5a11-41cc-92a0-9f74a5834b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ed8043-240c-4424-b62e-c9ffa5e7fb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ade17a1-b1f1-4122-8c57-3c7f975daad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--721e4c0b-cdaf-4c91-85e8-cae6d0f2555b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59b7f48e-ebed-4c07-8886-463d4849984b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7db003-96c9-434b-87be-716194b81662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d436608-675b-4c7e-aea6-5ece7a75947d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02832ab-8bfc-4b5e-9e16-5fa40659e0ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c5f0eb-2ea7-47f7-af4f-aa748a7e4479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1b6ad3-debd-4864-9225-bfce92abeb63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b877bd-eaef-4e0f-a9e2-be216d8acc67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ecb75e-079c-4efb-8472-9760a7119e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88c64b65-e96b-41c0-ae0a-7618b82f8bc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b903e440-9e01-4ae6-9c9e-57bd1141e563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57c3bbc-9a1d-408b-8899-2580a757730a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed3621a-4d69-47f7-8708-af9aa897f59a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc74e72-a267-48c4-a9c7-43aee47819b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283941ac-d981-4708-be02-7713785d98f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efedc13d-e4cb-41c2-8f59-dfa14f90b0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58f23797-422e-4d69-9dc9-172cb15b57a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b2478f-fd9e-4f24-b1b6-0275d5260126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca4533a-49fd-4d96-b6f5-e09706276e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d65be961-b32d-48d7-8b07-d33038c46d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bffb96da-8e14-4f0d-a986-6dc8aeecd7be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabf5dba-03f6-440c-8633-2b95d5284b83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc4525c4-c3cb-4257-bb65-d8839e5c15a6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.139.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd128235-7b94-4fe9-9606-d6549b13120c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d239525e-f2ba-476d-ae21-7454f8b55823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--997248b8-f86e-435e-a534-a3c1c8fa0053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6465af54-cd78-4806-ac54-4e87b2f6c8cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9cdfb0-b7ba-462b-9753-140ad9d2be1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba29c49d-9c28-49c4-9cfa-bd877b85d53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d795cd0-26d8-406d-8e2b-3d44de81f7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56399a2-e0c5-4af9-adad-241447911586", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de994f74-037f-4132-8b55-2967a292118b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943ceeea-7827-413f-ac59-22f396f55a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c76c1f-76fe-404a-b626-02a5dd386a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.72']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74daa0e2-9d19-44f2-bd92-7998c02ea8c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24f6d90-9f1e-40d1-974e-769a1a802f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47bee9d4-631c-4f6e-8e5f-33c8c68ee544", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.81']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1901b23-214e-4d6e-a9ef-8981fdefa279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68ba565-54b2-4dea-8624-c821b6f88a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e69909fa-4c44-4b54-8bed-8c0a8044fb0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e5d6614-9736-4785-81ce-cb68cea215a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e85399d-e953-4ad1-89d6-fb941799d0d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa845951-e574-4672-9fca-8495db350881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--005f1c8b-c9cf-4ef8-a9f0-02a894864a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6355c25-ee7b-492c-9a3f-96e0e91c0ada", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11c632c8-1c4c-450e-963f-3410d60111d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03fa2e27-b66b-43cc-b6ff-18453bbb2583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.61.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0571edb6-69e5-40f6-a5d7-1d97e003ff2f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.116.205.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28797743-713c-4c34-bd5c-1b82055bcc52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a6e363c-af94-4785-9acf-1ee557849669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91ebf13-f188-4e62-a862-e0db2f49042f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f07c4e-45c8-419d-be2b-040d38c7ca14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044fc445-3ecc-4d1c-915a-02fa5d97d808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.107']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d85380c-93f1-4870-809e-db90b916c6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--051ebf05-52bc-4e08-88a2-90ea1a193363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900bbce3-56e5-48de-9116-26d7719a7a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f45099fc-2d0e-4d1a-bd5b-217fcb6f16bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35bef6f-021a-4a76-93a7-f5fda08e1f30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7766f312-667e-4ef4-81c7-8df5e55f9505", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cfa5f47-673a-4074-98bd-2a6f48f6c15a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1244ce-7c55-4b4a-a941-d312097de824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eaf05b9-b050-4dbe-ac43-0c698ea9d2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b196b0ff-26b1-4206-8404-daee8ceb1b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28c7868-5ed9-40eb-97ff-fc5640dff44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d7e36b-10e0-42d7-a971-c05611c5ee63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315d9977-fb9e-4e39-85b5-1807225ab62c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea7418f-7134-4c10-8008-fc0a29865369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313a7834-a233-4794-abc1-1b163514869a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cc9c8a-6365-40cb-94c2-30edf982bc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9384d15-7f4c-4f5c-8853-81000cd375cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad35197-f8d5-496e-89b6-b32556866b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21781a8-4aec-456c-b7f3-928e35545b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca909ecc-5f2e-4343-b995-749de39a2daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf030063-5287-434f-a660-097732063bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065f2aa2-3bdf-4a40-aea6-c8fe072325f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f95e4e-ca21-44ff-bc0e-79b7aaee885a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b55221e4-9b6b-4ed6-bf22-377de0f6a53b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca03ba7-d104-4d10-b388-7bb631a234b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5b7735-b8dd-430e-acda-cfdbb229842c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e99b9e89-bd1e-4ae4-a8d6-d8411aa6c72b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cd3e17-5296-4677-b775-6eaf241909f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d8735f-d92e-4f97-894a-735a17c7f0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--515ad25a-ee21-4ba4-a747-a8a254ed583d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491442cc-98d3-4e1a-a35f-369c78302af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05512335-7378-4ee5-ab3a-8b1eea6fc3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ae90af-a3f6-42ab-bf05-c966bef8943b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5038f9e5-6bab-409b-b963-6be70143e841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2eb2bb8-f812-4876-9f2b-49de5aa303a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ccb27f-375b-434c-abdf-8d169140dcde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9c7864-7307-4d5a-bd1d-c23cbbf08642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d961a2-0f6d-47ae-bd1e-bc9c74afe5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f2ffc80-2da0-4ca2-a306-f6efef761298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7e44dc-b44e-4f16-8928-9d1e62e5d337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593e59d5-98b8-4a75-9f3c-de0336fcfc90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a172cf06-7a8f-4026-97d9-db78dc91a930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7655785-6956-42d2-a4a3-86f5a81eee20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2044ffb-1f54-4e2d-8770-b1949a242e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e1ce41-850f-4aef-8f87-7dc6c48d7dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c295e7-3d16-47dc-a904-d93ee056c600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b152ba5e-5234-453c-ad9a-48cd05370a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8858973b-4b66-41e4-8d0c-75786873ff08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a633453-5f52-4e74-883a-8615c1922f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4e2912d-5f85-4f4b-be10-5173a5293923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b76c73-a8f5-4140-888a-85e789011ad6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5df657c-3d9d-449b-92cb-a2f387d9f74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd76f5f-0ffc-4569-bdeb-2cd6e5e08ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f1d51f-12e9-4690-9537-abfe713c5663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a5cd94-4aa3-4249-9992-385a26d1df08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea25f17-ea36-4402-956f-bda597fbe479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ac70c8-9310-4ae8-a99e-f67ea2094445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd21681-4ec1-424b-ba3c-a2a76d970ba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b50edc0-e8ae-4cf0-b61e-23f225210980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50b83021-470a-4c5d-b9c3-3ef46980c911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--554cb5e3-e922-4f09-93cc-144fe4788f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9478fd01-272a-4347-844d-395319971b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cf9534-1033-4643-b137-25dbe80695bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbbc069-12f1-4f08-b850-164fd54e005a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661ff23e-b0c3-4269-845a-dbedc51690ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b28f56c-68af-4bb9-b582-e45c55ae8721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b974a682-732b-453a-96c8-cae7d3f8c921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24985198-54da-435d-b1f3-8b302180d0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6708f3b-4184-407e-80a3-21b40702689d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c669aabe-7c7d-4361-8f1d-67ce5f026b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c05fa61-d0cb-4620-9e29-312c69288b2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54461ee-a706-49f3-8018-a6a2be13efba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea80e97d-3b83-49c8-a7d7-e1fe2382c718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.140']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbec674-0877-46c0-a755-96d7a3595fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ec19a9-79d8-482c-8f05-939ee959f73f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0792a3-9b1a-43b1-ae7b-c6dcffd0ef20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6f6aa5-17fe-4b3e-bdf8-d37b5fdd348f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225e0092-14a1-405f-b24b-0f6fc6a71994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.180']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb44d30b-d2b7-457f-9fed-ac0d415f0d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.181']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff6611d-0e0f-4004-9701-4dda8fa99e47", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d57408f-2241-4fbb-8150-e73383e5252a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.185']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f737bc-7dda-448b-8079-d484a3a9d3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea3b5e3-6ac7-49f8-ae6e-fb2b74b8b88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485c94ca-107e-4f48-8bbe-9318a3aacfde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5308e10f-36bd-4e49-bb2a-ac5da64c094c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8679a87d-58ea-48c0-a0cb-0ce888a2558f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f01c87-9656-4329-8916-4925ece8ef82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1bd1e2-4ac9-4418-abd9-18ddb8bc4f9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f402dd-9626-4658-92cf-5014f8834acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0bca13-3deb-4c9f-93a6-b66a8e3cef24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858601a8-89ec-4199-b6a3-de05edc7f31d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b21401a5-8dab-45c7-9d2c-cb8f54a47706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--027c9475-8525-4337-9c8d-e265a06e2b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7bd514-d159-4501-bb93-624f653c01f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.216']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30f57b9-266b-40fe-a9b0-8440daa6f0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.217']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2741a108-eb31-46d3-8611-225c66c59653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50bf0618-ea91-482d-9e45-0f948fe21ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73727f5-892d-4a2d-b3b5-bf6c80fcc4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbdbd3d-264a-4a77-b3ac-b7b39346a97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c472bf4f-e73e-4cd7-963b-a61235e628b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7937be8-a12a-4c1f-98b1-792814121bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a088ab5-e496-499a-853f-dc5512be7e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada0474d-e862-40be-9fc5-31c4bde2d26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--829b1fdd-f3d1-411e-9624-587b9c05007d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6c996b2-66ca-46ce-8c9c-cb8eed09bfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7322ce30-c532-41b7-8309-a3a941535fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dff8f20-ed8d-452a-8c22-6a0c8d349705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--644e78f9-1e6a-4270-acf0-eb1aeca80596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b5716c-1fd6-44c0-b8c9-684791140dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96f0b6ef-0890-45df-adf9-dc14d06189b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5443d360-4ef9-4190-aff1-80c8e987c723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.237']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b8b784-1bc3-4623-b646-1e9bfdb0d0ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--397b1b6d-11ef-4bde-b826-d32ef236d123", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd75aca8-8371-43dc-b2b5-226aece3b61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58dfe06-28ff-42ef-8e39-ea17d8c39687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c883e9b-4342-49f8-abb2-dd0264e281d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f654ef-a157-4721-bcfe-4829e679ad3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9c38542-62be-4ee5-997f-3894bdc00a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbf0066-9d0a-4cca-b963-0e242b23826e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae20dca8-b8b3-438b-8577-ba353e041407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03985e54-29d1-400e-aa81-66955b00d2ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f3deab-3614-47dc-8067-e764ff1274ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e249b2ae-3068-4025-a8b9-b24cb4fd3b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f445d813-cbc3-4c1f-8ce8-f4f525f2cd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0a05e7-0963-48a2-abdd-7eca25d88d45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e786e6-6fe5-466a-b854-dc68d4235bb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1881c99-0377-45bd-9502-6364d1cb4d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8ef0bb4-f5f2-4d8f-a3fe-ba9154c8599f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a157ab8-a172-4757-b09f-3150507558e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f555bb-a266-4f1c-b8be-ea9376722af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b9deea-9da2-4323-9d23-12c7c6086971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9255d7f6-7920-445a-b52f-aab79ed7186d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea86ec2-f61d-442c-ac94-629147e827b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1502d939-e6a0-4f35-8894-c0463b90a16a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e4cd543-1303-45cf-a7a7-b92f27dddf72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72e8824c-a0b0-479f-9ad6-dbb0e777ca6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32459d0-f9df-4a16-bfdf-815807958afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d0f28c-6e15-4c21-b51c-9d99b320eee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2afcfe-e23f-4bc9-bea3-11601134fa0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaf0d724-3296-456b-b533-096661baa4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87d5175e-f383-4fc6-b258-2363745c7e55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086454ce-7f06-4e7d-a9ab-c5f6865e8c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cf3ec1-388c-4ecb-ae81-14686dea1b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75cd0a72-ad50-4136-992e-f117ab668095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b76a25c-b106-41dc-a521-785b2ffb6d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503d19cb-4570-4ff9-8d81-a49dc4b5ba7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299de424-6533-45a5-b771-9c78b3a14d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeec0199-65b3-49a9-8b3a-63a505d61a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c2b0a50-be4a-47df-8d29-9a7088a1ce6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fba3fdf-781b-41e1-9fef-ac01b60e781e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d713f416-4c71-4558-b3d5-cef82eac9324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17d79750-5131-4a3c-ab0c-c877690e6fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2db3e0-9c33-4fcf-8f0c-954e0b0b10c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0316d9c0-6397-45ec-b8ad-3bef1212853c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--975cbf76-7841-475f-989d-712d7f941ff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6702f471-5045-4c41-b1b6-ae424634820f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc0cb71-6635-4f4e-b054-1c04b848cfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.93']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bedac48-1f27-4da6-bdc6-b46dedba5955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8cc28b5-ab89-497e-888e-bb0c9e206660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb570c76-6973-414b-b615-7fa82c7ca803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41eb026c-42d7-4620-acce-e50ea59c39e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240873da-32c9-4898-a0d8-288b0397c945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c32a6ed-0795-4b1f-9d1e-3baaf83a6ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0acb0df-fd93-410e-ab9f-f70760f26b89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75046c9b-5495-4fff-a681-d7454bea7543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f284d05-a832-45ab-90e0-dfa7dc40fcac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e81112d3-9bec-4b8c-a168-0cdff68dede1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de02dcf5-5d94-47fd-95ad-a8c8d17489c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74873f23-cd97-44f4-bef5-8c867b60b808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1de8fd6-8042-43d7-82fe-18b08f7f1479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d8c834-2c18-4441-825e-918b25331aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2fec2c-5410-43a7-b58c-5bbcfb195aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c76565a-78ba-451e-b0b8-de63e3fa7786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5111e6e2-4a1d-455a-8cf6-ec9717574093", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e627818-8844-412f-b69d-9548c8a35e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b3b09d2-2ffa-4bd2-87c7-89a99d2543cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b34dc984-97e3-4742-8f52-e0f4517d89f7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.154.107.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c83704-52b2-4c27-b0f6-61cb0d74a350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.171.184.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84bfb6bb-4590-4c7d-98a7-c695c5484d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.212.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3247a198-bbd1-45fe-81c5-1e66abab77b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.213.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff1bef3-1d3f-4de6-bb85-e707a77bb5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac28191f-195a-4a9e-a906-114ed1ccdcda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.36.141']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eb0069-74de-4bab-a581-9c970ad3fd71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8dd87b5-4208-4d78-a22f-082e709b3c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.41.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--639a39e0-c9ce-4820-a0ba-474449d61f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209870b5-eb1a-48dd-b480-a307672c43fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dc7cbf7-b069-47ca-94c0-5b02852e0fdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d85b828-de84-4abc-ab2d-044fde81960b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.53.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2215afd0-6149-4377-89a5-17178ae8b0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01df4eda-c9d6-4e37-b1ac-b502ff248139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.192.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb66cff1-ab70-479d-a638-5dc44bb7ae5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da6cad1-3657-4170-a250-694e9b7bc6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29953d9-a905-4c63-99a7-7ae43d9b6e26", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.29.157.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d7b866-e344-407b-bc61-1658497e55b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.63.169.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51042345-f8ae-4cce-a2d6-cc2ba2f44163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.141.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a097c0-747b-4820-bc0a-e099febf3331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.173.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4995f69-cbbd-45e9-aa9a-2972602e825d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.184.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3bd9bf5-1939-464c-83df-e292d4a46149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.185.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ad7bd7-581c-407c-b50a-77923c974559", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.189.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--617a0cf0-e45e-4aa7-a0c5-4b0397240fd8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.84.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6868fa4d-184a-4b4c-8ad4-8b7255c26602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.88.63']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fed6545-7064-4f49-a714-5c1509afac4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.91.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285ef571-29f8-4ee9-8f4d-defd91a785e4", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.227.108.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ebee3f-d690-45aa-9d4c-71ef2a609b6c", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.23.166.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc801cf0-41d4-41c1-94cf-06760919b903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.70.38.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9c51a7-3541-4143-9c0e-e26236ba4180", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.168.222.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c32b1da-fdad-4431-b125-189e1af8c334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.178.205.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9181757-a63c-4125-aed6-84df5060c2dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.0.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63624b2f-5cd2-4271-bac8-dee68e4d2cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.108.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3eb199-4858-4ae4-a2b8-9d1737fe29be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.111.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14284af-b65f-4b85-a01f-1279ce7d66f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.117.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4657888c-d313-403a-8d9c-473d80bd7bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.123.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bb59406-05cc-46ac-89c0-7e305b62de29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.133.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd74dc9-381a-4ef6-bf7d-9e2de2dd5a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.15.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2fca7d-ba49-4346-a7c3-a27dac8d2ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.165.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f9539d3-69b9-40b1-bf8e-8e16865f169b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.229.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e6f445-e08c-4676-b37a-3948cc9f1578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.234.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb1a5052-3eac-46bd-9b7a-e19a0c9b2fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.40.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1ccd99-a354-4e7a-8b9e-fb0c5ad33bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.92.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3eb5e6b-98b6-4a58-ad18-3db2cd0f43fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.37.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636416e8-4777-4407-b6b0-567cc64144ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1ecc89-5d38-4305-ab2d-d60923d36e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38675f93-bcf7-4580-b726-6f889719755d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.217.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ac34859-43fc-42b0-829c-27203df03922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.175.92.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddd0eb17-d677-4970-8107-a63cd28b1670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f572688c-1f68-47dc-b03b-1ded1bbe8898", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7208fb2b-909d-4bb6-ba58-b322a3098a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ededce-e72d-4e1f-8432-36a8f03fc95c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb6db2e-55e6-42a5-9f67-eeff7b9570b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.103']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c36dd8-0395-48b7-a0aa-d53777206b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.104']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1362d95a-d04a-481d-b232-f1a2e8dfd9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c532c9c-eb83-4e43-9355-74cb68d0aac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31bfd91-e4c8-4fc6-a5c0-fd21edee77ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f379bae-3e80-4ce3-92c7-bbd174963c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86182014-9b3f-4789-bc3d-3d305dc316ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca9170bb-baf5-4c53-83a2-466641ece669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ac570db-969a-401d-94cf-86c821e94531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c16883-ba0f-4ca1-b28b-831b9fa07892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb025bba-a263-4bf6-b11f-ced343ff691e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e945f64-cf1f-4538-b2d3-a3f4815e39e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce908f3f-370d-44f9-91df-e6eb1ff6dfe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfadf96d-b977-4dcd-91b8-4d96917cd910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fd83ec-a2e5-4fd5-96b5-a71c2009f3fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.119']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d835836-f71c-46b9-8232-786c6b3ba261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69cca8c-dec4-4bd1-bef2-c08e551e8245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.120']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2a5fad-812e-44f8-8b64-fae00012bccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.122']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb150d76-961f-490d-8b7e-b6c2509b8e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.123']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b658ae3-c8ca-443f-8b56-790e215b2194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200b8ea9-c5d9-4571-867a-2adfe8f4b678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.127']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fde3f9a-f2ad-480b-ab21-7059c3a85d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b79330c-bcca-41bc-ae84-02da4abcd9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4829aea-3fd7-4ba6-9a10-1fe26390a608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a855ec-11b7-4a32-a867-bde6ef614744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--731e0e6f-3d02-4202-91af-e0e9cdc3110b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9a66c5-ccb4-4445-a2a0-c1676c0579f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb040869-c19e-4d0b-bb38-1a19f308c4e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadbb18b-ec41-4ce0-9c59-7eab946fa892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf2dcec-401e-4a62-877e-9a7a228b61a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c0f66e-9dfe-48e1-81a6-051baef89ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2313234e-5c08-4f3f-b9c5-4d76dc83cc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.25']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc139bc-f551-408d-8d18-8d3be6b75b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e8e7a6-14ec-42a4-befa-f3db578b20ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42a51fbc-cbde-4848-b815-3e75762b5613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7284fe45-9a65-4cc6-91c3-1e342274dc31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb1e6a0-e494-45f9-a706-c1f5825e6136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28625c02-8d8c-4d05-9c18-f0079d62ae80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a077e7a-9d19-44b6-bff0-2627e5cde9bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b677fc8-eb62-4d01-96f7-56f2a306196d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bd285a-3ac9-4faa-b24c-5555a2cd244e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.35']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d11482-77c0-459d-a3fe-99a2b6a8391c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e0c8b2-df48-4052-9f69-f0c7e3164158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.37']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5257aa18-d1c7-49b4-a0ec-a0b775b695f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--facdcfeb-2aa1-47c0-82db-fd6326bc1623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0137a5cd-99aa-435d-8997-152c91a187e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9edfe724-eefd-4c52-9e8b-f4ff70ddf177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace50946-d438-4e2d-9892-aa4075ffbb35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732d67ba-6194-43f7-8168-5767a1b5858f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a76eb34-549a-4a4f-bcb8-28366c904e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5050f9c0-587e-400e-881e-682e29348a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca623c9-7856-4d41-8c59-0ac2e460d069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20524f59-ef1a-4de9-a331-14145dc755c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.47']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf02845-8450-41c3-b092-ecb8f61a716b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a0e9227-a223-4190-ae41-c33d95426769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--981996c1-5140-482f-8eff-2dd260b1e524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9699bf39-acb5-4004-af6b-4d6a6d4fafc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--061dc617-6875-4a04-a9fc-912d14ecfd72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6a71976-6db4-4d2c-a332-fb171fe6859e", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996945a1-f612-4c24-85c9-81e10d8901b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.53']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0544da12-f3b6-4896-879d-cbfd7c38929a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79e73703-7218-42ea-8ca8-af2d717310a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--868a6701-51ef-4569-9f30-fe6dc35b6615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.56']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9223027f-2670-4899-aa7b-30bd7a503089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5ad3d15-a0c4-4164-add8-b443d0e586f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9214f1-d9a5-4ba7-acb3-9ccb0a548686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381c2b2e-2aad-489d-830b-90b1ef4d85f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825bda51-9805-4524-bf44-14a83226c76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d09512f-7d4e-4cbc-a76f-f37904933ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc9f590-7b61-4db9-910e-eaab8f5ae151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb536a7d-7089-404c-b900-902efba47102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b04826c-b68b-4e0e-bd48-91c971b20500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3537673-c0d1-403a-8ad4-8c42f81facac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cdf4cd-649f-433f-b4b9-8d3e93a52902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d91ff33-8f9b-40e5-bf78-dc743baf2d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf2b83d4-3157-467d-9010-aa0aed86f482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e449697-a9eb-4cd3-ad05-a48e768baab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec79a16-cf09-4acc-81e9-95ce889d4069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f119bdf-5179-4c35-8b16-b6e9333c01be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.76']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caeb26ac-423e-49e7-b39f-93725d70060d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1bfe9e-dd43-419e-8da4-ed68f9496c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abfc9726-e90e-4c4e-bdd9-75a6796024e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477cd66c-3b87-4e94-a66c-4b4038ac790a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4197ef66-ff5d-463c-be20-dcf2a23debef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84432595-8db6-422d-af20-724febe41a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c1b3981-8bcf-4873-8aae-75171866b3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041bed3d-5441-4b72-8133-a9092554e0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939d09ce-e508-4a6c-89e4-d1627a637e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8711f9ca-e8ea-4ff1-9d49-17f1a2a4a91b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a858124f-d813-4ea7-be5b-9c52998864da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac817d9e-6abb-4e3f-9142-ec27c797b64d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f80acf26-975f-4abc-8edf-ed566d0cd031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.91']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9fdffd9-3b38-4f70-afc9-df2bdf10c078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.92']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a94dbb5f-df1f-4119-b755-4df02e68a6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.94']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f6dcca-0481-4e88-9531-afe02e021f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.95']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f8053b-45c7-4698-be54-b26b27c71965", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd4b68d7-2132-4793-9894-f5bc7deb3da6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.97']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a76225-af87-4de5-8588-9e159cbc111f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18fcf2a7-5b72-40eb-bd21-617efb0765d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.5.169.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55c0af6d-55d1-40cb-9a4d-fdeeaa15e8c1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.207.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec300e11-901d-4698-a6ed-9a69c3df3694", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.6.221.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fda5aa-f7f4-40ac-b4fd-64c907faf613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2908fdb-13db-49c8-b1cd-2e737919e539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d0f07d-a435-44dd-b67a-b5b6e5b4e3c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7097cd2-6883-43d1-b378-37bea202bd0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2ed98b-178a-43eb-a120-74386be6edae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a65a7ffd-d4c4-45f5-add9-32a3d887b351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5cfcd22-2a3c-44e4-900f-3aee95077553", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e64279c-42e5-4113-ab69-c75c11df2b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.146.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188b216b-b3e6-4d31-a7db-63b9a5f3302c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b224ce4c-f9c3-414e-8b2a-3c286ad6d7d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.158.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50549478-2aa7-490d-87f8-dd3e76d9bcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf62ebad-aa0e-41f9-be51-52d9d09afcb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f59c099-f34f-44ae-9b28-ae3c91064a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b60af681-9317-4743-a3dd-363c0433206a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5f51246-70c7-4729-91b6-582c6dd9d73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0d885d-5ce9-4986-bd98-f98fac353cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be584dd-6a82-48ab-889a-5b0a7f82b650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.233.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfb8002-808b-47bf-a43d-74c871f3c509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.178.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afac8d23-69bf-458c-8047-504cc8d0e023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.146.153.238']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5e46f17-3bea-4a97-abfb-14b636a13399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.90.84.62']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f424b8-7bea-439a-adcb-2f4483a3f4a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.120.65.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d97911-2570-4e80-b2e6-f087d3fa7936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a227323a-e098-4195-b945-242a2a52a241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292f52a6-174c-45b7-b717-cc211cbeb79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.104.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8612ae04-7e83-4165-9879-cd425a7302a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.185.111']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2bfdfa-1fbb-444c-82c2-dca1f9cd3572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.203.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b0133a-cb67-45b0-b6f1-97ccbe4e7ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.129.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e354fd3e-06a5-4d2b-bd0b-a744e418b964", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.184.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f12ab8-3ccb-4fec-b00b-36ee25f6949c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.192.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--151847c0-3ec9-4ff1-8c6a-695cdd00085a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.247.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2134c167-d26f-4612-9c7f-cd5832155cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.105.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc99be7e-dcb2-481a-9169-de571e19c633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.48.69.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49886c9a-9304-4049-b00a-df8c3adc0282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.50.211.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc54ea6-cac4-4e77-824e-21e6fb41c0d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de81713b-6feb-4100-89a5-27ff0f910bb6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.243.128']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435316d9-bc96-4ca1-8017-9d9c0cec30ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.243.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e44e14e-b3e0-40b8-8566-afe06c6d4555", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.244.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea4ba58-3237-499a-a6c3-997c75ce0e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76bb17c-f43d-41d2-84b9-df293b66ab45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b89edb-cd0c-46e0-bf86-a6b6211795a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6180c80a-2f32-4cc3-98b5-739ae2cf5b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.13']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed38fa00-d67a-42aa-950d-ffa3d49617ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.15']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601e1854-93bf-49c5-bf3d-1e06fa4a7ae5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21875dd6-4d64-46b7-9408-156144f9a364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3471443-3601-40c6-985c-1757088b03cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686253a7-ff92-46fb-8fea-623b093ba9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.21']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74417410-3bd5-4ff1-bf1f-6d619436c06c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cd05152-e4df-4c0e-872e-da94a465da29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60eb249-450b-4000-94c1-007b0414364f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7a2e64-7823-4f1c-9001-32fb6be5386a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d2609d-3dcb-4df8-a3f1-ec3fd6962f77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e3d9f2c-9cd9-43f7-bac5-50667311459e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.39']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6326162-b2bb-44a9-8fa3-c9214142acda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19238d67-7688-4579-b56c-355884a5ce1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30809e07-32c7-4866-b930-5a2747a4ab93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1642fb-49fd-43ce-a9d8-bf2b08f70502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b45bc-ff0f-4c53-917d-3d417f2f77c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb700f1-df89-4bcf-a1d6-eee3d15604f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07bf89ae-214d-4b15-9810-0d85b2107358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a473e8d2-1060-4f63-96a2-12bc0706fdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.61']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbe1e80-2c4b-4679-8b4c-82bc7486e1ae", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.127.61.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4800dd28-a59a-4cda-b672-65d6cf5b97dc", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.79.213.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9111c9a2-998a-403b-b37f-85fe977f3f89", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.237.242.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68fee33-7bf9-460c-b272-c19c602d9956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.28.85.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86003246-a0df-4789-9d96-543f577e0eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.53.43.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392c41f9-2591-43da-ab9e-bc0f375d6000", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.240.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a53cedb-7b91-4777-b4c0-089d035f51e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a31d3c-f6a1-42a1-8efb-2157863ec186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.31']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b993f99-8c64-4633-8600-30ff25c1b8de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.87']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4e15dd-3afd-4d24-8efc-40584f3e4687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de85b1d4-c648-4d7c-8727-45a96a19bc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--571c2f4b-91eb-4b2b-a032-e015e4d97145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a683b58-b08e-4f3a-80d9-9d165bd8ff1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e0b7bd-ffa2-4723-9524-8d56a165eb83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10750add-6e8d-4570-8822-c39f167fd355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.2.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7c2f7c-cb99-4265-b024-d019a0e6abdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.18']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6756594c-c771-4c3d-b7fe-e839e7921de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.66.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ab2ff18-8865-4dbe-8ff7-fe56564af25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42922114-75ad-444d-84c8-3f881941e2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2963786-b9a0-4df6-b3ca-94a933af0683", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e1558e-d227-4e31-9a4f-213489d992f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e97be8-af5f-4218-8ad8-70ce9b81f344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8e132e2-31e8-46af-8ec6-5ddb80f7e12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2e6eb43-9e4c-4736-bbce-ed9dc72c3d62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.111.67.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93b002e-62b5-4af2-8b64-70f771426d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e87e64f8-61e0-4496-9340-7be4df4f6bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d8df704-c77a-472d-81c1-6baa4766512d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb3f518-59df-4ba2-8b1f-de2e977ffcdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6007309-2b86-40c2-81de-b1fd2359358e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd490c89-ceb9-42fe-af57-179aa9aed6de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d7d7bd2-e8b3-48d8-8239-66645b3909d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecffe5c9-1214-4677-8599-081ac90504ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083db33c-7a1e-4182-9618-05bf20954229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5c340e-2516-4209-846d-8f7fbd497117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b2ea3c-6ae9-4f4d-841d-c06d0c65668a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094d3957-7eaf-4d6d-9f25-4df36afc523c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.58']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0dbddef-974d-4399-97c9-987c18b75986", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.186.39.48']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a0312f9-943a-4ac2-8f2b-3257068440a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.188.26.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cfffa7a-132e-4188-9487-fa34dbf37ffa", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.31.250.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b2cb88-e619-4937-a869-07eaf8795f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.83.249.54']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--967b24e0-1b9d-41ec-a140-301bb1bc8ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.107.42.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1006f1d1-380a-448e-b3a6-d0e38ba356a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.110.236.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270d23a2-5193-4d8b-b67e-e6f9d98c37a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2d4b0c-d072-4197-bd3d-b9acd29d66da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.130']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2142af-ce7a-4182-8f4d-bed8cd2bad73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2021-26855. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7df94199-04b8-4494-96b9-f4eb833ca74f", "relationship_type": "indicates", "source_ref": "indicator--7b2142af-ce7a-4182-8f4d-bed8cd2bad73", "target_ref": "vulnerability--81e98968-d1ba-4f74-8fe3-4f81225c66bd", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ece8dac-1517-41a2-8c74-c80ca072f149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9c0552-6344-41f1-a555-ed5fc42337ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4643c3c-df08-4039-8b43-f566fd14b8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e78b29-1602-49af-8c1c-3aa9bc904df1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c348a47-a528-44ec-aaef-7a357ad45231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--424b8666-676d-45ba-a27a-99d4f8e85319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35a7a6ad-0546-4a49-b387-72317d6a62a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.162']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--747e9469-d048-48f3-a3c5-ffc420c84c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d246383-a0ea-4f0a-8992-8bb6554b8183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca60355-6318-4375-a989-890777dd978b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee248955-11b5-47e7-8f98-168464117426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.134']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a483b0e8-e347-40ea-a134-347e42647416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6073ce6-a46d-4aea-a6a2-641cace7b550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f961d87-8f8d-49c5-82f0-06671e92598d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.168.206.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a60f77-7c0e-4f70-8032-3c6d9ecc9418", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.36.191.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bb46db-8709-4566-b578-5c6e34193103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.76.58.113']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb0dcd90-620e-4b0d-a867-2b94ef74e0e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.53.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00d376a-ea23-4d92-8693-fb3c4017c921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.137.84.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d54aea6-10ed-49f3-b121-6e2a2dcd74f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.138.154.105']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69a3f2d-f195-4b12-9fb6-bb809bd1235e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.140.218.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25104cc7-dbfe-49f8-b773-2f827873be1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.145.56.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b3c9c4-77bb-441e-9e9b-d44c1deae4a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.183.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d98b36-d182-4390-ad7f-a08430ff19c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.148.81.231']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba1f15b-bcca-4317-92ed-3f7b73de1830", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.154.4.151']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dca916c2-9e5e-4828-99fe-870423f0ea6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.100.85']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e66490-9da5-4a3e-8ebd-e073a14bafe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8b5811d-fac5-4759-bdab-0dafd072ac8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e71422-f708-4f05-b963-f7ba45e8cec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.114.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7f07f5-d060-4df6-a691-be9ac22becec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.127.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29822829-e5e1-4bed-ad3c-ae2efa40698d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.200.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb2bc3f6-d7e8-4c82-a426-4b54fa2fec23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.82']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18e0b710-5b6e-4a48-8ea8-b80b5e3f7c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.209.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdfcd12-a020-4c49-a9aa-8416ec304a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ee086a-6cac-461b-a286-3f8a70e7b856", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.236.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e245bab0-96d0-4ff9-9a9a-a0244c47ae19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.238.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216e1458-e830-445e-b13c-e3e46f9e0ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.65.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888083a4-6a7f-4e98-85d2-2f8d20ee1b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.80.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921a79c3-c78a-442e-a9fd-9ab1fb811574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.89.108']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3fc190-ce99-475c-9ac8-76f36cca48eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.128.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a610fbae-123b-476d-bd7e-5ca1f0af4f36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.149.255']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d12b41-730e-4d7c-ba3f-fe0901765393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.15.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9cb5d9-f10b-42e8-863c-fa187a64b08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.154.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63f4a11-094c-45fa-b886-b8ab82a40c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.157.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c52c227d-6b48-48e1-ac47-92a32bb5c45e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.157.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7cc5c4-9314-4bcf-97d9-400da1b33ba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.16.226']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ce8544-5f23-419c-8562-ef78915b9f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.162.225']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a019079-302e-4d5f-b6d7-e2f0be4eca32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.171.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5eedf33-6029-4794-9e33-f37224f1c078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.29.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7008f3f4-4703-45e5-aab7-5dac08fa629c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.30.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3cb518-f479-49ff-9732-c7a3f83c50c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.31.239']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a56c66-702b-443c-9e15-db7d96ea7bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.39.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b7fbf4-066d-4b7d-ae92-54bfe1b3fda9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.41.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0464a2e-ef7a-4c2e-9731-29a70be08f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.44.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bf5995-ee40-4fa0-a8c9-da3f09612053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.188']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f1e876a-aa88-4bae-bb2a-ccdbf96aedb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.46.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f70038-25e0-4a4d-bffa-a7736439f232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.8.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec0657e-a213-4ab5-b321-5f56b289fb40", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.226.73']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8643729d-351a-4e9d-860e-ee77f6ba9a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.229.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f765061-f9cf-431a-bd90-86326d8daaec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd13949-dd84-48aa-bcc6-0017e9d41edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.11.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47ac1d32-1118-44ee-aa12-e1f7cfbc9e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.12.173']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2062c8c9-a395-427b-9b5f-cbddd8d81897", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ba8e7b-556c-4856-a884-1d850d7dc14b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d68c43-7076-4b0d-ad53-3481c747d438", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601f7a5b-58b2-45ec-a64e-1fd571bfcb93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3bb9da-5dc4-40db-b08f-23906c44d3f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a3a47b4-d6b9-477f-9741-5c7ee04459b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1022c8a-3d27-495b-bc53-6eee37fa3e44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.50']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0d090ac-1247-4f78-a800-0ee0d7e351d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a8e4de-086b-4a6c-84ae-d45e5c4ac21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab62947-6fa4-480a-a305-bf5c47dedef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bc1c84-4a1b-4e73-8c91-b49f92b68f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75259a76-29b4-43fc-b7ca-307af8615ff2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea044890-fee6-4333-bc9b-ea800b4f4cb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48655d1d-28d0-4f55-a8ba-99adfdd821af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.60']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314298ed-56f8-4b9f-9119-04e8bfa5286e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf831ff-6f7e-49b5-9ac4-bd10dbafd4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cf1160-21f2-4aa3-9f3c-012c5f64b7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0232b398-fa77-4935-a4fb-9736b63cc21f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20116626-4d4b-423b-989c-949bcd1eabe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9369603-9085-47a0-87da-26d0ed2f2ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d11a7a-d943-449f-8ae7-5077135ba959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.191']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd96aa4-7a23-4690-8fb9-1c989915327b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bd3f52-240b-4aa0-bb90-fd8f183bd48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6efde0-f262-4c55-ad11-46d1dc8a2d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.135']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb063cd-d9c3-4e9e-84ae-ab346fda8b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83fad016-7b2e-4f57-820f-239ec95aacaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd01b417-71d2-42a8-9995-fc9ae536ae89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25d1153-c1c4-42f4-a598-64f5a8e3b4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.163']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4444f78-66b9-438f-9f35-4c42d6bbbae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948c7d8d-0207-4c9b-bb8d-98a0074316c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d1149a-6656-4fe6-92f7-cf391e825be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4047a64f-3b72-4df6-8d05-3d07716f15c1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.177.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--700d7842-fc17-42d6-9f24-e263dc86a00d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.182.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc391d39-2b5f-4885-b3ca-793c781c5108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.251.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020a855f-2660-412c-94b1-44dff5f3523b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11089df-8a18-4662-a0f3-42234fa5f925", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.8.101']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc02d9df-47d3-4c46-a013-d25025d10ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.230.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4ef405-3b06-468c-a88b-896721a7b554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.128.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85122845-3de9-4681-822a-f11eb941351c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.154.2']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45f4380-579c-4fc2-8bd0-ce113e8496b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.245.17.190']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3d2a81-de2a-42e8-b3f0-1bf457236409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.109.134.179']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae729114-824b-402f-8f7c-3f56fc45cd27", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.158.109.51']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb8db0e-18be-4317-9171-43590b4b5b0b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.253.31.232']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bf9030-305b-411a-9f48-8a3224c02416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48210468-2a44-4f3f-a31e-8443ba0099b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33454c54-e006-4f5d-b729-71a93afeabbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.69.186.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68deda8e-614f-4dab-a08c-2adf698e298d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.70.96.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--858545ed-b4ad-46a5-99d7-803482c21ea7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.78.218.84']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204e923a-0075-4670-bae9-b513ddb8e767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.133']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90f5c74-cd06-45df-8526-fd95e7483ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.70.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--302b641c-8c31-49a8-a3d5-0569c8f06a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138c322d-f20f-469f-86d4-9bb3e644db0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96510f7d-46f5-4339-8aad-3bafffaffccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f80511-2a8b-4818-91d9-328cb30d1e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619c153a-5445-4266-9765-7a627dda50d0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.164']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a7af4f8-2f2c-4f76-86aa-21d704adecae", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.165']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45391c3-57f3-481b-adbf-3a0843edd83b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b838a533-d132-4438-aa75-a2ba3e4cfa0a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2e690f-8bac-48aa-9fc4-7d653fa09604", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f618c8-e4cd-4154-a0b8-3da10dc80973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.169']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b957839-3d6c-4051-8b02-cc6f8a96a0c5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a806b3-23d8-4207-9586-72229623e46c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.177']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e317c799-6707-4879-95a7-c3962ed0fd07", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.182']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e1d10b-182a-4d5d-a2dc-0d9b2a46e753", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.184']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35d9d0b-3021-41fe-8909-2827ad86d9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.186']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a0bb0e-b3d9-4526-95a7-c0426188c836", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.187']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f672ef0a-c278-4c5c-92f9-424f8a3bbac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314d19c5-f0db-4499-9d31-f48e66928925", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.115']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1d1e29-628b-4edc-8e50-e76741d641a1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto, vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c493d94-ee18-4838-a4e0-c84f7b6b1c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.221']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b962aeed-afe2-4384-ac5f-558aa0a7e3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e1442b-4d65-420e-a0a4-61f3f6cc619c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.224']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec446a42-cb0e-4005-876e-b387d8a4dd96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.228']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6989b54c-4b44-4670-bc51-48de7c3d8993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.230']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426d544e-4a5a-4bc2-9703-8cb4265e2ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bdfb53-abe1-43eb-9c08-dc6bd75d9f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae61d43-04b7-41ee-9682-f173414f4dcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.245']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dc69e6-8c62-47cb-a603-acc7afaafb97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.19.219.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7cbede-38ef-4c73-a5ef-9bbffe2790d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.46.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80510e2e-04a2-465c-9244-9b4d43a30181", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.192.46.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de39200c-ee2d-4fbc-9fe4-0b1d08388417", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.193.216.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b3e24e-851d-407a-b99e-718585987521", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.211.72.167']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c052a6-072a-4c49-aa9c-ea71b486ca13", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.115.25.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6923326-bb3b-40ef-9b9e-2810b996d607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.118.18.241']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3505efb7-6d72-4ea6-85b7-4cf6a96474d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.153.246.240']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e4f9be-00d2-4d47-b139-b283186d0e6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.116.86']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe76c2de-c082-4ad5-9542-4c20f7d83a40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.196.104.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea54ea4-5f0f-48f9-9273-0e7320c14e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.63.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958afc9d-700e-4b3f-bcdd-9b44ab88ad6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.64.38.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af32d9b-2598-4213-a500-20a87b6b746e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.142.209.214']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1a7b41-44f4-4a60-82d6-3467b35bd7e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.151.251.67']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a64220de-886b-4c0f-9b24-2f76786828e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.165.106.28']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc0e402-562c-4c17-9f6f-796c26261175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.168.106.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed64c96-b27d-46e0-9292-2e610a2be36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.229.8.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e5bb193-0870-4765-af13-c227086509e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.201.20.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d69e06a-4ac6-49c6-9633-140b09197f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.234.99.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ae3300-007f-418b-96b3-9040757e9a84", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.141.109']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4648e6e9-3526-4f71-b817-c42036bf6f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.97.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe64352-cc9d-4674-90e2-7847be5ebdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.54.3.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7093e3d2-7333-4982-92a1-f4a70a8b7979", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.11']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34107e2c-f546-49ec-b7f4-588a1f81d27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.30']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3acafdc-bb44-4575-804f-a46f1b856ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f319fd74-af00-4254-84a4-a6444122e57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.193.105.100']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9450cf79-4e2b-4044-a56e-04c53a62bcb8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94d9f00-1808-4a77-9456-76b0f506c79e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bacc09-0023-4cc0-a67d-4f6648b0f56f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af80266e-1a0f-446a-b6c8-389e9dfa8c49", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4744fc-0c17-411c-9b6e-6a11e19aa176", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8084824-4e69-4061-a8b6-4863b36ce590", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107adc40-a9d0-413d-a770-fde34146c7f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea3ea3c-6350-4e8c-b877-4d95c4d327b8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6da8329-5f56-4a2a-a052-504d35594aee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d921eab-322d-43ed-abf7-ccb1aae9841c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462e6985-5a39-4ae7-a091-2844dc791c7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bc9ea4-d950-428c-9679-11eb3f8aa8e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d154476-c24e-40d4-84a4-c573649866ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c3746de-056b-4939-8f1a-8feee05914ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--508f9a43-7a6e-4bfe-8b86-c9e92fb70ad3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f2d695-bd6b-497d-b3b6-e6bec5079fdf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a05c60e-11b2-4473-934a-d47769faa594", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--285304be-bfe1-4d77-8ff1-9d86d982006a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51a5e596-1343-44d8-a078-979ae9bb3cb4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d58a593-7a5f-4924-9858-0bfc56a3aeea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b72c0a6-184c-4782-8d08-da2a2f5bc015", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.22']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3608330-b726-4a46-a14f-a0d0861cbd37", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.23']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--940b6900-df1a-4d73-a721-5b1d4e45aa66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.215.181.244']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5468f502-50c2-4759-acb7-e578e96e9f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37acb698-178c-409d-9dad-ad876d825008", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72f23af3-09e0-44d0-9ffb-cf515492567b", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.225.60.27']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--690961c1-bc47-4df4-84eb-ab17db238675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ab07dc9-69b7-4385-aa37-b3c0cb1a865b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.41']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ee7634-22e3-434d-84df-c5a2cc76d283", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.95.166.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be2ab199-ac6a-4a26-b879-9353cf8c6a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.254.114.246']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04435354-f8ff-4751-bb8b-7d1df5478f75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.24.215']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5762987b-128d-40d7-b264-69bbfdcf0567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0c2f25-ee08-437d-bf18-36558272dd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fb8ae0-5df4-4804-a9c6-9544b605d51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a350003-6b45-4734-b493-4e92615f443c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7589518-a665-4cec-b64e-81080857aab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adba2a29-d641-442e-adf7-6b8f6c50d555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c955fa5-a56e-4e64-be59-412ff6a77e72", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceantoronto, vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.106.164.149']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc7ede12-e438-4219-bdcd-8c0b32f06dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.121.69.138']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8697067a-446c-4bb0-83b5-7be2131b2d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.228.17.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518a194b-c319-4bba-82f4-8b78eaf36dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.219']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cf4cfa-54ac-41d5-bfee-8e43b7939e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b806c8-ba2c-4ea2-a757-412e1560338d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27a5fc04-0ffa-45d9-bb42-3a2607f56a4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8add884-64d6-4276-92bf-7bf8644b9b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ab40a4a-9608-40aa-98d0-966d2e3c89e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.251.64.158']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa0b6744-ac0d-4cff-b98e-b08e6f748201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.210.63.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee5af54-c074-40e9-b263-f442b4f92306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.24.117']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28294261-fd90-48e3-bd67-54105ad49638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.214.26.142']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259cb37f-c8f4-49a2-9493-44edef30f587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.234.210.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2821b5c5-e769-4baf-b87e-58e89cd9f505", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.246.38.8']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88acbe89-cb71-4f9c-91c5-eac3a71278f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.20.79']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08f4693-478c-45b0-9def-2c98ce8ce8b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.156']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61d9674-5fd7-44cb-8df0-56f991a57e39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.145.166.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfffc9ae-c2d5-4b02-b313-525ec408e851", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.146.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc4c52d-e98b-4fe4-9eb2-76a83118fe21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.163.206.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbebae22-0777-4a9a-869e-229972979fb3", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.167.67.234']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a742344f-ccbc-483f-8328-7182179152c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.169.113.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--022e210c-004f-47fe-a9f9-d64a68782f65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.185.81.112']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7b8d1c-d252-44b2-9237-9b5836520050", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.4']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4457b2f0-8a1a-4aed-a5c0-2f0da404efd4", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.190.156.70']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de310d81-4643-4509-b1cf-cbaf5b9ca813", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.218.69.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--881b3634-1b3c-403b-b543-0db28a5af91a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.221.225.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef49a8f-c101-4c75-ae50-510ee13bfd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.200']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cdbe243-1736-4567-9e0d-4de5dcdb4818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e1175d-573b-4671-aa3a-b70ae072a421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.227']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1a2185-5ebe-40fd-bf4f-1cbb199f4d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9658d391-de7c-4965-a00f-2189647209d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.148']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d427e96-4407-42c5-84fa-73d6398f15a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.37.172.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d8b2bf-81bd-42d5-bd2b-6d27dbd1eb3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.42.231.160']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c418e644-791b-4f5f-8915-c47f23e55f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.45.13.19']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b886ce8c-3816-4eba-a311-29d989b83826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.150.68.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d48671c7-ed7c-4363-91d4-5848491d6e5b", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.188.247.192']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64ecb47-65bc-4884-99e9-3f960f79b259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.188.27.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44aec761-e8c8-4793-b2d5-a74e8c4d7d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b328b1e-7a88-409f-bfc5-d5716d43bee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14be7335-003b-40ed-8d7b-4d2897b75d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af63748-c051-49fd-8612-91d4222bd84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a239ea8b-8b1e-466f-be84-8f20f98ae48d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b2a1a61-5821-4fd2-9dce-777def059402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b843d2b1-d8cb-48b3-9e79-179ab36cda9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef426f1d-e8b7-4e30-9997-88f7c140d0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.114']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478ccc43-88b9-474f-9646-39343ee811f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--753062ae-7d64-43c8-85ff-67b2aacf83ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1107cae-2287-4838-a6a3-b346a3a6329f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.242']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7ccccf-2266-4382-89e5-34be7e2a4e0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756710d2-bc93-4b17-a461-82d53d43b407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.90']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--764a1b78-9219-4ac7-90a2-e3682ee8633d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.98']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423a4671-9685-4423-81e5-71552d478321", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6114f3-a0f9-41d0-8fbe-5f3a202981af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.204.122.189']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bcaddf-4d3b-42f1-9ee9-8d973672c39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.184.96']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c07c10c-da7f-438b-adcb-a39a7870b5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.197.64']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55972dd-48b1-4ef3-bfa0-3a58c4474287", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.208.73.57']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9faf37f0-a0ad-446a-8288-ef9612fcf54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.147']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619f448a-b0f3-48c3-a363-ec6fc1d0d2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.32']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea92d99c-ea64-4640-bb1f-ca34e6928d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c653ddcf-1cac-4b5d-a470-407f26040c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.146']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16deb694-3c66-4432-95df-49660973718b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6bacbbc-5a50-4ecb-a968-e359e103d7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bd9ba2-4edf-4b80-baca-b7f9fe36e671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc1abfd-051c-4b20-9bce-7089d7eda802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.34']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5528a2a9-c373-49e3-ac93-e69b38aac03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45cb0c52-974a-4b1f-98dd-ad94668127bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.153']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f31f40c0-87ca-42c9-be01-3b07c85b43be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bad97ae-9658-4b81-bd76-df547f3feaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.155']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2279642d-b8f5-4419-b35f-f34df3b64db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.157']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3cd20e-9384-4728-bfc2-e86abdc515e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.159']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876f3307-4a67-4643-8c9c-a863fe812053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5242de-307d-4899-a246-1518b60f5353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.171']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78a45774-c1fd-49f6-beec-3d62c17c50d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7106de41-8555-47d6-9e13-922ec728fb0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ef0de43-8f92-44da-bca1-8566ea114860", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.175']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f610338-1123-41fb-98cc-8850d26a7a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.178']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dba69a0-76cc-4d90-adbf-8d51fbda2764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.194']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd360ea-e27f-4988-a654-78a4124c810f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.218']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d270e62-563d-42f5-96d6-f79246c4d2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347a6907-f0c9-4b18-9349-d708318ff37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.249']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dba552a-9c42-4a33-ac00-5be0f69dfaee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b181003-f043-467a-a334-898fa6f4da45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.251']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c52f700-52ac-4a53-8c0e-c323a73ac79e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43284e8-7163-4bbd-bd89-4a7935b70727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.253']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20eab373-e43a-4b6b-b33a-6f592d819d4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6743148b-e264-49d1-92a9-cbd67b63daf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.255']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2128a544-66e5-4538-b010-b8afd9d19c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.42']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d963b5bc-2e69-43d5-92fc-a03df65c1a41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.65']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c470d4-ff88-4a92-a6e9-246aeb21f67a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff788756-df9d-445e-9b61-907328168291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933cca8e-af9b-45b3-9fb0-f34c2f7b5650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.69']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ab5ec3-ea06-4c2a-bba2-448894223786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.71']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8614a09d-5f00-4eca-a180-db99d870d55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.243.20']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07536821-d818-427e-8ea3-ef5ad59356e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.126']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3c99e0-af5f-4917-87de-f769f7dca1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e85f43b-ba15-48fe-a417-d59ae63f98ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20dcb6ea-5ea1-4359-b85c-c6f9569a2899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.88']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84d4486-0f04-4318-b564-04e4686b2a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.151.17']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eef10cd-6438-479b-ad34-a9c7544fa994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.98.236.136']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918e06af-3081-49e2-a373-f7762acd3122", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.113.142.203']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a664493c-38b2-4114-a003-5ee1d66720a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da41d89-b5ca-4127-a408-49890234443a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5704ab55-09eb-43e7-b382-48ef7272344f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.154.95.236']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b860c92-3915-4b19-a458-71b398a26feb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.204.138.198']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d4346f-e3a8-4198-9bb3-628b5df55e46", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.27.101.99']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4db7b3-9d20-493f-bdf7-85a78eaa9b56", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.58.27.1']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee5ac1c-60d7-44d9-a0e7-cca81e97c56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.63.197.5']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da1fdfa-3c9e-4420-94bc-08474c68b8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.115.126.77']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57667e6-6ede-4491-8572-4cad864e4ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.72.166']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a82a78-24b8-45b5-a4a5-ca4e59d27c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8746f6c4-7610-4b32-864c-45a69b362510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbee2a8-1205-422f-8c4c-1aff40c4439d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.183.94.195']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a909f8e4-d80e-43e1-84ea-e1a06d2d4100", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.212.81.83']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1db174-b2aa-491a-bcb1-398a5354c4f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.100.18.26']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6d1860-c8b0-4185-81c2-a54409901448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.125']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82533bfe-163f-4d87-9186-3db0c3d3e6bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.193']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c0e94a-d1cc-4537-ba51-ea18643e2ef5", "name": "Malicious Host", "description": "Observed: SSH, TELNET activity. Sensors: vultrparis, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.156.232.116']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "sensor:vultrtokyo", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--980ef835-d139-425a-91e2-97107e7e5db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.10']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9f9e9c-45a5-42c3-ba70-a3c75f8c665c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.106']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f35f3e0-135b-4987-8ba0-3bc0bbac5109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.110']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a750102-01ad-4cc5-8648-755a02eae148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.250']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947b389f-3f65-4b3c-8b9b-e17f4922e3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b9277e-0eb6-4f56-91fb-28587ef9e99b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.68.55']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9868e02-fafb-4bc0-aff8-efb0dafdd203", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.88.29']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6fb839c-5323-4ae0-ab20-bff75ffac261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.43.132.102']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71c6f17-d51a-4432-970c-7d52e34bc19f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.181.236.139']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08de4983-d52e-4d74-8fb2-82ce69796c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.52.233']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34296d56-e662-4ead-8c40-e1ae6f05508c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.0.144']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76a0eb0c-be66-482b-8a3b-ff810903e565", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.215.32.14']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73f7cc4e-b17a-4bb5-8226-af9254278f6f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.47.246.223']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c2f95d-4ef5-4981-b2df-d090b7091895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.87.231.131']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1ecadc-0481-4fd1-8da1-1553b96e1fab", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.90.13.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c075ea9-5972-4e18-8282-a25b95bd1dd5", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.125.170.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5ea0cc-7a49-4832-ba08-b0629a4c87df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.106.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409c64d2-286e-4f58-83a9-50ca9d5132fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.126.98.168']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c613484a-452d-4b66-baaf-4035b7ea73f0", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '96.127.146.46']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb057dc-08a3-4f72-9d8f-eb09948b8831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b958a7f-dc55-412b-b73d-0167e231f8e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92dd469e-5006-49c0-8df2-e71e1631feaf", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon, digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.74.6.204']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7707779b-29dd-4fbd-9180-ea65a5dc5452", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.158.78.44']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c9a0fa-c87b-4603-809d-dabe184e1f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.35.40']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4881cc13-1b65-46cb-9b04-6d2dd81ed4c8", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceantoronto", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.71.8.129']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:digitaloceantoronto", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d06242a7-6802-4bcd-8814-1d9cccae7ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.81.154.174']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c04ed5-bd08-4f36-9e4d-ff3fb6d24c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.82.12.121']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eddb61c6-9cb6-4c17-864f-fa7438ed8a2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.89.204.118']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eff32313-4b5a-4a3f-ba22-f012793030ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrmelbournetest, vultrparis", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.90.43.197']", "pattern_type": "stix", "valid_from": "2026-05-31T00:00:00.000Z", "valid_until": "2026-06-30T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-05-31-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrparis", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9433b85f-b8a4-42ce-ae61-7baa59603019", "sighting_of_ref": "indicator--d7e887bc-3d59-4b75-ac07-94368ccceba5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843f1c50-e7cc-4a98-9b16-844d85a11384", "sighting_of_ref": "indicator--06481165-f1f3-4292-a8fe-eee36f601db1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057998a6-07c6-4694-a35a-636f8f7b4324", "sighting_of_ref": "indicator--8432d565-2752-4373-8219-301b0d1f3b57", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812859ba-c862-442d-a4a4-0fba174c08de", "sighting_of_ref": "indicator--ea2e38f6-f2c9-48db-b7b4-c55b8da57865", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539d5752-0602-4709-8282-980eaf58ef71", "sighting_of_ref": "indicator--8658166e-9ef1-4668-a263-d23b0aa4f30e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa797eb-516e-4b49-acbd-74dc90e0bade", "sighting_of_ref": "indicator--b04002f9-a607-4f4c-b3d9-b094d5b7c28c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30271cc1-57f0-4d5a-ac05-563103899bbb", "sighting_of_ref": "indicator--a9ceabee-4742-4bcd-93d1-823021b48cc2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d3915a-9300-4353-a086-7f506f716ac4", "sighting_of_ref": "indicator--8067d75f-7196-4b50-9a38-c6166f635c22", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d255f3-99bf-44dc-8ea5-8c59be9b2b8f", "sighting_of_ref": "indicator--8067d75f-7196-4b50-9a38-c6166f635c22", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4349b3e8-d2c1-4c61-bdb5-e70bd394f091", "sighting_of_ref": "indicator--a92e43e1-492d-4c0f-9dda-a97d46a4ee04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8924dd3c-f8bd-47e2-8bdb-5aebc3ae89ad", "sighting_of_ref": "indicator--a92e43e1-492d-4c0f-9dda-a97d46a4ee04", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e118204c-1e37-447c-a3b4-f49f77b12ea5", "sighting_of_ref": "indicator--d21b475a-00a2-463e-8cbb-6e331b9e27ca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4738c0d2-3477-4a31-be13-0d9a2f89c5d7", "sighting_of_ref": "indicator--d21b475a-00a2-463e-8cbb-6e331b9e27ca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe402375-534f-4e3f-b421-7f59cebf9a98", "sighting_of_ref": "indicator--274d857f-5cdb-487a-a76c-6c5361f66841", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25ab94f-9982-4d9c-99e8-107a822d99bc", "sighting_of_ref": "indicator--48abeb83-b9e2-4e62-9f0a-4874c8220db1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ce4e1c-2c4e-4d1a-9162-07908393a65b", "sighting_of_ref": "indicator--e3a0c663-b664-463d-889a-48c380aac9ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf0b9aa-561a-45cd-81de-be9652bfba3a", "sighting_of_ref": "indicator--8092e951-47e1-4b04-a10d-7a014d4c1285", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3dabd16-a1f5-4cb2-880b-2878ee268a0e", "sighting_of_ref": "indicator--1daf11ad-123b-48f7-91c7-0e21563c365a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7490752-9fa1-4066-b94e-aaa3a320b7b0", "sighting_of_ref": "indicator--bfb86cf1-6fb0-4e81-ac83-8b9b5918994f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f095e84-5a32-4679-be20-d9fdbce44c4e", "sighting_of_ref": "indicator--a7d60cb9-3597-4572-8d50-5001f5a40f4e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ccdf83-60b6-4de4-b6f1-8f8c94dcb092", "sighting_of_ref": "indicator--3b8f01e0-db27-4948-b94f-33227b386e26", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03331172-9ff5-419a-b5b5-f7a57fafaec9", "sighting_of_ref": "indicator--c05a6296-842a-4134-aef3-c5230933f015", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5074a14d-524a-434b-b431-1a71fd9b381e", "sighting_of_ref": "indicator--c981e85a-388d-4ba8-bfa2-0822d8fc1d37", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21aa42ed-32e7-4982-a0bd-302e1de5434a", "sighting_of_ref": "indicator--98fc4052-acd4-438d-8bce-df3b8700d1c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2335e29b-ae05-4cb4-99da-d4305fd05cf7", "sighting_of_ref": "indicator--1a93f4fa-baee-47cc-9b65-0671f78ba0fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe6ac75-038a-4539-ba2b-8d77f554e1e6", "sighting_of_ref": "indicator--faa9cda0-3cae-489c-943f-5d7b811a2af1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d894ba61-4d65-4b6e-aa70-51a689d3513d", "sighting_of_ref": "indicator--1ee7c798-579d-4c45-8ddd-9520be0aa65c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe53a18e-940c-45ee-a358-7e0f558b4c17", "sighting_of_ref": "indicator--28072a6a-c0ff-4d92-93e1-ff1cd3a8d28d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca81d47a-b229-4ec3-9ed1-0e881ff9908d", "sighting_of_ref": "indicator--9230a73f-f601-4968-ad98-e9b1183d8209", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c038764b-81d7-4623-b305-37c0289bf79f", "sighting_of_ref": "indicator--6c346bb5-cefe-418b-80da-f07d4f3a5a7f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2bb43a-0d88-46c3-90d4-764dbfbd0d49", "sighting_of_ref": "indicator--80e9b084-12a2-42a9-9b0e-d53409aaf537", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca64c63-03c0-4c43-96ec-2ae04bf05354", "sighting_of_ref": "indicator--d49da95e-fab1-4f41-ad07-7f672d779f64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f230cb4-8b55-4ad2-b64b-13b2202bcfcd", "sighting_of_ref": "indicator--a0949220-34eb-40cf-b0b7-179d5e31ec72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b2a4d2-bee0-4722-8b03-f7fd31ab9426", "sighting_of_ref": "indicator--c052bb91-3ce5-46ec-b6ef-ba231ab345fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35dd992-1194-45a6-9162-97b119df5b91", "sighting_of_ref": "indicator--cb303496-ce54-4d53-bb34-63362758b4a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--485b18d3-4f50-4868-b57b-8f6241c1ee06", "sighting_of_ref": "indicator--e3ab2fe9-7268-4c5e-b288-58390b58429c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e963c3-fcc5-4793-9332-8b7d8e0af276", "sighting_of_ref": "indicator--53af6808-fcf0-49b1-933a-13dd06e1d0cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d820cf-fa80-4e89-9f42-27fb98619321", "sighting_of_ref": "indicator--53af6808-fcf0-49b1-933a-13dd06e1d0cc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822ad79f-5b5a-4361-8a45-5a9d03c83cca", "sighting_of_ref": "indicator--027886fc-7bb3-4071-8292-400d877aee5b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8cbf25-b1ef-4ea0-9e06-9d0a1bf3e897", "sighting_of_ref": "indicator--027886fc-7bb3-4071-8292-400d877aee5b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eff470f-c932-4b23-a09c-79e40eaf29bf", "sighting_of_ref": "indicator--52aa3f83-2776-4f6e-86a3-de6b4d70d9ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e8745d-6fc9-4462-ad33-c33267f4ae43", "sighting_of_ref": "indicator--52aa3f83-2776-4f6e-86a3-de6b4d70d9ac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d860ca9a-29ec-481d-9bd4-03e4e55c4555", "sighting_of_ref": "indicator--2793c356-2803-4f04-a63d-c55c1901a116", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b079d026-eda2-44c6-9463-94630cc8fe98", "sighting_of_ref": "indicator--eb9afbc2-9c45-4838-9cce-0e7607aae7c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01b98e6-6c6c-4425-b46e-e2dc7f03b7c9", "sighting_of_ref": "indicator--a1dd34e0-c49c-4f53-8d08-fa2a710da2ef", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830c586a-bacf-4c54-b6cb-baff80e5f5b3", "sighting_of_ref": "indicator--e4796d08-a471-40a1-8f4c-8d92f9559d90", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef4f184c-9b66-4923-ae0b-ea68e6bb2ac9", "sighting_of_ref": "indicator--e13b788e-3482-4fe5-8661-276daf518ac8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2159f393-8112-4cf8-bd49-0230809ee6c9", "sighting_of_ref": "indicator--e13b788e-3482-4fe5-8661-276daf518ac8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2284a68e-2173-4b5b-9ab5-6f43e7fe6258", "sighting_of_ref": "indicator--4e4cdaea-d1b4-4091-9f77-0509702e43b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb79819e-3e7c-4a30-807f-23e8e9bb8d0f", "sighting_of_ref": "indicator--e2e18c06-c72f-4844-a526-65e74bb0e625", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a947b53a-153c-480a-b83a-b5703a2d243a", "sighting_of_ref": "indicator--f80aaafa-0612-4225-94eb-a6ba414502c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8bc2e2-933a-45e0-ac8b-97dc7a5531c9", "sighting_of_ref": "indicator--9a030e58-561a-41c6-88a1-b28c3bf50da7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c93aa6-529a-4be1-b265-dea75a1476f6", "sighting_of_ref": "indicator--9a030e58-561a-41c6-88a1-b28c3bf50da7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4d7cfa-f20d-4286-a462-57f269721096", "sighting_of_ref": "indicator--1329e365-e6ab-4794-8e24-877c789f4119", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27098e19-8721-4518-af6b-78259a5665a3", "sighting_of_ref": "indicator--08c12139-c589-400e-a618-1f6bb1aca462", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe35061-8082-4b30-938b-c672fce44f30", "sighting_of_ref": "indicator--499bec74-2089-48ea-9044-b97325004e19", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17abfc52-1165-46f1-82fd-dce2fa803e6c", "sighting_of_ref": "indicator--70eb7ec0-8b3a-48c4-89a4-70e07b913bda", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0a9225-1d4c-4f82-8ff6-d326410e8656", "sighting_of_ref": "indicator--080c156a-da72-489d-95ef-a96157b1de8d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eedc0b0-d3a4-4932-8058-9cdfe55bb2a0", "sighting_of_ref": "indicator--080c156a-da72-489d-95ef-a96157b1de8d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74de761-b196-4e55-9b89-e4e1e28549d7", "sighting_of_ref": "indicator--075ce14a-110c-4675-aaa4-08e4ec4dc742", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d7280b-39f6-45e6-a35d-f08f6bc0d384", "sighting_of_ref": "indicator--075ce14a-110c-4675-aaa4-08e4ec4dc742", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9033b0d7-b859-421b-bff5-21eb338d0984", "sighting_of_ref": "indicator--5d3e04cf-b3b3-4d3b-8846-f4d21580310f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4e4bb7-dd53-4bdf-adf7-0ccc4bd56966", "sighting_of_ref": "indicator--5d3e04cf-b3b3-4d3b-8846-f4d21580310f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9c4f48-7092-4e86-b6be-7041a486ba9f", "sighting_of_ref": "indicator--0f9d7caa-78e9-4832-91c2-f734c23acde4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c20f064-e87f-42f6-88e4-cd4d73d1e461", "sighting_of_ref": "indicator--99f988b4-789f-4204-85c2-531a64dc8e5a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33fe1177-ee56-4e60-b577-0cd8505496da", "sighting_of_ref": "indicator--b0e1ae7f-7e90-4842-8e79-5b3962946eb3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4781980-d458-4a17-b8df-4327b5c6fe8a", "sighting_of_ref": "indicator--f61b3a3c-35ef-476f-a24d-e691424506e3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0686ca1-f2a9-40c2-ac32-0a2eefad8043", "sighting_of_ref": "indicator--64dd8d7a-3b76-4458-aa4f-82a5819deb99", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaded89-4a6c-46c3-a671-f4801f119b16", "sighting_of_ref": "indicator--cf400bb5-45cb-405c-9b31-eb23206d7898", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6187c011-5a1d-4b9c-89a6-36e030dc65ff", "sighting_of_ref": "indicator--0c3934cd-852d-46c8-8785-c7cb266e37a2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9f6ec7-8806-4d86-8260-2d5607ac3c6b", "sighting_of_ref": "indicator--43280a9d-fac4-4217-a3de-881857215d08", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3424db-423e-47f2-8821-19fdac80e7c2", "sighting_of_ref": "indicator--43280a9d-fac4-4217-a3de-881857215d08", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92564834-3ac6-46ec-8dfd-7909aeb9bfca", "sighting_of_ref": "indicator--673074a7-4aea-44fb-9a10-e93b107d899c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd911133-827f-46bc-9780-fd38f4f80f7a", "sighting_of_ref": "indicator--c2e75dc3-c010-42e6-8810-3d84ef76f710", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f99fbf8-20be-4ba2-85c4-8f987ce2d540", "sighting_of_ref": "indicator--d670d6bf-025f-47a5-9f7c-a644be852e80", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ad1924-e463-4567-95b2-fd138781d523", "sighting_of_ref": "indicator--9bfc65a9-b225-4630-830d-a25794c5b601", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f8dab9-7e9d-4345-9a84-79ab959cdff6", "sighting_of_ref": "indicator--b09a5f3d-18a4-45ce-ba85-3d1874f59f9c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a630514-2a0b-46f0-b64b-5d637ea9a2b7", "sighting_of_ref": "indicator--b09a5f3d-18a4-45ce-ba85-3d1874f59f9c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f353040-d79f-4abf-af80-c2f415cb4e6f", "sighting_of_ref": "indicator--4d8cc1eb-e272-43bf-bf37-4abc4dc389f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b03ea58-5e0e-4f24-8749-340f4e7297db", "sighting_of_ref": "indicator--77e31bad-b010-4d6c-85a4-d9529e59f46a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd8fef8-6de3-4cba-aa8f-11cccf3c24cd", "sighting_of_ref": "indicator--c7c24538-bd35-4891-aa1e-32b2b0576dd5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cc9e3c3-c91c-4084-8d3f-c4ab713f2e90", "sighting_of_ref": "indicator--c7c24538-bd35-4891-aa1e-32b2b0576dd5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cb7bae-bb1a-45f1-bafe-24a7861ee4eb", "sighting_of_ref": "indicator--4612e347-0237-41cc-9644-d00f979bb958", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472b7f39-9a8f-45a2-bf04-47773785ffd7", "sighting_of_ref": "indicator--103554e7-df2a-4f92-b2a4-7753e8e7fc86", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6465967f-206d-4701-9f82-5c530983479c", "sighting_of_ref": "indicator--1dbab7f7-ce3f-44af-bc40-dfa9cf949a17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb36748-24cc-47ea-ae2d-8d5accd42bcc", "sighting_of_ref": "indicator--f907742c-38bb-45d3-8907-56fd228b5d91", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--277dab3f-2464-4fdb-825f-ccd8175e1069", "sighting_of_ref": "indicator--26964680-e670-496d-bba0-5b2354248f62", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a2b53b-65cb-44b9-81b3-f59fe1b2e154", "sighting_of_ref": "indicator--38b7f822-4e17-4113-93fe-3eab42dafcf7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb94380-2788-4d88-9102-9a33e323c93b", "sighting_of_ref": "indicator--be1e36d8-0753-4ccf-9f1a-42fd44b81a8f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87bac3f-b301-4550-9fdd-98ecbe0929e0", "sighting_of_ref": "indicator--19759a34-3768-4cd4-a701-7febe84dc386", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fea736f-732f-4b04-91b1-c637f87ddb33", "sighting_of_ref": "indicator--1190c37c-21f3-4810-b1db-b1b0b0afaa76", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06cdd3e7-e80f-41b1-b50d-fa22118b8ca8", "sighting_of_ref": "indicator--a3c81d6d-c8f7-4ea7-a2ec-f76713c87f3a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bb1165-b522-4379-bc5e-93bc421e54ca", "sighting_of_ref": "indicator--5409547f-c553-47e7-9da0-ec420cc5e43e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42de0bf-17a8-4c46-a48b-deb0d873ca90", "sighting_of_ref": "indicator--1c46713d-35ac-410a-a73d-be908743df65", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef75cae-0591-4402-8518-36064ba22304", "sighting_of_ref": "indicator--e6f1c2fc-d925-43bf-8820-4613ca51bfbd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7128b9-7cc7-4b37-b879-a832d9650323", "sighting_of_ref": "indicator--40b4ac92-348d-487a-9849-a10921f9fdeb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a98a575-1eb7-4881-96ea-a1f83eca3c07", "sighting_of_ref": "indicator--d2fc0d10-3551-4a1f-8af8-7a750c799f4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8586c444-5cac-413d-9ef0-38c127407644", "sighting_of_ref": "indicator--0a8b3419-92b7-4e18-b0c0-19ca9909c12d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c2687d-b77b-4a2f-9fa4-4e13667206d1", "sighting_of_ref": "indicator--8b3fb69a-818a-40fe-bfd5-f375d814f336", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69864ff8-fe08-4e5d-94f6-165289ad0126", "sighting_of_ref": "indicator--1e448767-1d7c-4836-9151-c601dbfce8b5", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a961cb1-6447-455e-a32a-f6b58773d837", "sighting_of_ref": "indicator--0bb62b43-799c-4a6c-a096-a3fa2abdc12e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc0e3e6-4837-47d3-8db7-73280b0a1a2f", "sighting_of_ref": "indicator--a0741d50-55d5-434c-ba84-55c9df56b628", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2157f349-2ada-4606-9c74-9a0190691ea0", "sighting_of_ref": "indicator--0bc1ecb6-c5c5-4baf-838c-ff468b478131", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bd0b55-24aa-47d3-8f46-28ca23d220c6", "sighting_of_ref": "indicator--3ae591c4-a9a5-4cdc-b82f-1b3fb87fa689", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7d4be9-8379-4b85-85d6-f3fee0db0f10", "sighting_of_ref": "indicator--2fb9245c-3de4-43f5-bc18-cf3a3a80b708", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561b2742-9dea-49cb-8b2b-6d307683ec76", "sighting_of_ref": "indicator--4a92a6a9-8b95-4b93-8162-bc8b45448e7e", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72bc3cf-d11c-47b1-91be-530e3d1c6585", "sighting_of_ref": "indicator--9f24d3e2-d9a7-4ccc-800e-bb40219cf348", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b65f248-0d28-45ba-8a63-16e2a71fdb36", "sighting_of_ref": "indicator--f6267264-6909-4d15-b71d-43cb3b46641b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7cce97-e006-4972-8e4c-e25e34d4685b", "sighting_of_ref": "indicator--2e1c8ecd-8eb8-42c6-b3e9-707d853b673b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909b93a6-b897-4e51-afa8-4f4be99f3d77", "sighting_of_ref": "indicator--2e1c8ecd-8eb8-42c6-b3e9-707d853b673b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139144bc-c109-4479-b46d-7bc10c10c6cb", "sighting_of_ref": "indicator--1ecb4ba6-fa7e-4077-af0a-ee8eee2102c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63196fca-d663-4f92-bf38-9a49a01fcd84", "sighting_of_ref": "indicator--bfdad66a-8a8d-419b-8832-0a94d58774e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561ba9cd-593f-4208-b7e1-b05cc1fb9860", "sighting_of_ref": "indicator--4e95d849-497c-461a-9e67-dd3c83561199", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40abc228-af1e-4fd7-a7e3-e2dca35126fd", "sighting_of_ref": "indicator--f9ef2b87-457f-4d8b-ac37-3fffd94e011d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a674efd0-a2a6-434f-8b2b-821a9d4e9eb6", "sighting_of_ref": "indicator--2955b2f6-27dd-4ea3-b072-e8f3a98008ac", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11327c08-45c9-41e1-9a1e-0fd4171291bb", "sighting_of_ref": "indicator--72d49895-b352-466c-a20d-013e175c4750", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a8ac136-3a2e-4ed6-b499-78a9bdd1b0cc", "sighting_of_ref": "indicator--a4c40912-4c26-4d2b-aaf0-262158245d1d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444bff15-916d-4228-a06a-9ab3344d1e3d", "sighting_of_ref": "indicator--7e8a93dc-39f8-48e3-b835-d520b6682f17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14c6f52-df84-4bc0-b9c9-7fb3ad23d8c5", "sighting_of_ref": "indicator--aec53890-045b-4cf5-9dee-c1fb441aef0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71077b9-7522-4cf6-b4fc-12dd4061c020", "sighting_of_ref": "indicator--4d9b084f-7d92-4b6a-aa92-05337d592570", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8a8c7e-0643-4adb-bd0b-7801426a75d1", "sighting_of_ref": "indicator--e067b958-46b0-448f-9c69-4563199b3001", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d2ca36-a8c4-4931-a61f-3774958ca8ef", "sighting_of_ref": "indicator--f2ab2e4a-14f5-4915-9109-03d505da21ef", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4677ffdb-7bb2-4ecc-8b58-75f6400546d6", "sighting_of_ref": "indicator--2e3542c0-d824-4404-a951-025d4f6fc0c0", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0d2cd3-7b3b-41fb-919b-1729562b6bbf", "sighting_of_ref": "indicator--fded9656-eb5d-445c-8020-3313b961ef7f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e9ec13-2674-47b1-9727-cddfca56e735", "sighting_of_ref": "indicator--8125b5bf-7bfb-460c-a337-293ad19583fe", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8e1294-ebf8-4482-8c8c-2ab7a4f41c42", "sighting_of_ref": "indicator--91f8c1f4-102b-449c-937f-e79f3a7cb655", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2845ca39-251b-4166-860f-40ea51471ad4", "sighting_of_ref": "indicator--a294b95d-d45e-4ecd-a604-5ff8020e4b44", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf2b7b2-67f2-455a-9757-6e8db5751c7a", "sighting_of_ref": "indicator--84ec033c-9178-4a47-bde9-b7d3834c11f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b45ef9-44b9-49db-ba2b-615bba347ef2", "sighting_of_ref": "indicator--6731fe40-76a8-4615-b840-23da4e2f83ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59886d39-b3eb-4e51-b012-60d165402316", "sighting_of_ref": "indicator--823a45a1-a9c6-4d4f-a8d6-ae4526b44bc9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12035ff6-0b4b-40de-88da-7f91046a7cd1", "sighting_of_ref": "indicator--2d4a281a-60b0-46f9-8475-0b72d56a7847", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea0aca5-3cca-4ff4-83ec-aa805b4d9481", "sighting_of_ref": "indicator--325da245-fbc5-45db-bbfb-864b9db0d10e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a2484c-0a3e-4470-8022-74329f6627c1", "sighting_of_ref": "indicator--99296a9f-7cf8-4159-b718-07d97491a08e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c18a2c4-46d8-45b2-8809-daa7d09d03bb", "sighting_of_ref": "indicator--cd076aec-3fff-4109-ba49-5c7a64bfeefc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a574a0-6ff6-4ff5-873c-c36dfc6e4edb", "sighting_of_ref": "indicator--e25dfa31-cc93-40d2-8788-3c2a0d61d1cb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51b3428-6de3-43df-84fa-37d1961d8f98", "sighting_of_ref": "indicator--fe37c17b-6907-4714-88e4-ae06921ead4e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d428c0-b632-4f2e-b06f-33d3e6224d4a", "sighting_of_ref": "indicator--cb395b30-e0cd-4aef-b3e0-db48686417d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90cacb7d-2e36-4540-b8ee-633acfc03812", "sighting_of_ref": "indicator--6e488f31-4b24-41cf-bc14-71747373dd0e", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd242ea-7ca1-43a0-af6a-368245677408", "sighting_of_ref": "indicator--dbb91a5b-8057-4684-bf3e-4be187a4a45a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f49ca0-8ff2-4577-b17f-6c4f87371518", "sighting_of_ref": "indicator--4f131f49-cca7-415c-8c69-3b5696598218", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4db3512-fe91-4a03-a4d2-72f43a4537b4", "sighting_of_ref": "indicator--62450097-6a4a-4cd6-bc72-728db5cc9662", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ddd1a6-75b8-457a-9d48-65fe2c542528", "sighting_of_ref": "indicator--b53e779c-d3b1-4ca7-8986-3e123348617d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ceb574-f592-4004-b0c0-cdf5f846b67a", "sighting_of_ref": "indicator--ef69eedd-4e00-47b9-ad2e-2200a39baf8c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74daab87-518e-4b82-8b07-7eacd3043cb7", "sighting_of_ref": "indicator--fd3ea479-d6e8-4ad2-a8c7-449994c1bab2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cc5d8b-06ef-47c1-8a73-d74fea7d28e1", "sighting_of_ref": "indicator--85873bdf-3a35-41ca-a348-a6e7395f99d6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4fac7a-5c81-4cb4-94e1-a6e1e217808d", "sighting_of_ref": "indicator--342eb1b2-b0a2-4399-819f-ec2a4889b92e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d254983-6b10-426b-8475-a98d0be92dc1", "sighting_of_ref": "indicator--cd240ba4-694d-4205-935f-68c1e61df971", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5ec12e-7f3c-4349-84b2-0a13757be1d0", "sighting_of_ref": "indicator--b7a938ee-0edb-4e74-8b86-f5d294ce579a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fe59fa-9623-4a35-ae26-ef1dd97409bc", "sighting_of_ref": "indicator--eb32f36e-ce11-473c-9859-f0c09b57cf53", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7822ac64-b5a7-49e6-b2ed-f494ab5ff68b", "sighting_of_ref": "indicator--a465125e-bda1-4e7a-9d07-172603102676", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b12adf-720c-451f-8532-e1dd03d4ef52", "sighting_of_ref": "indicator--33c5f642-ec9e-4a26-9f86-c320443ecf05", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49134b57-207a-43cc-a886-5b30ef5fb23f", "sighting_of_ref": "indicator--530b7eda-4bfb-4941-bea0-e1063a7f41c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af2c9ea-2cd3-40c8-8924-e9e806756800", "sighting_of_ref": "indicator--4cec9d48-9026-4841-815e-ea24edb70862", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330cf47b-f249-4442-8e67-df71f0722966", "sighting_of_ref": "indicator--7449d89c-a555-4ecf-b8c8-f314247d4ea6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470526e5-74f7-4af8-be03-b86712a04fc1", "sighting_of_ref": "indicator--7449d89c-a555-4ecf-b8c8-f314247d4ea6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4c1831-590a-4770-b6ad-a40d125dc1f6", "sighting_of_ref": "indicator--8d8d54ab-22bd-486b-80f1-bed43d5f4963", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ff3f0f-6227-49ca-bd8d-03a903a96ff9", "sighting_of_ref": "indicator--c2537db1-5c70-4d55-91ba-5bc9e82945dc", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9b1943-f793-4574-94e8-abbc76474bb0", "sighting_of_ref": "indicator--0a7d123e-f79d-4565-8f60-cb054888bda3", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0815f2b1-c416-44ca-a505-892d9d376d9e", "sighting_of_ref": "indicator--60f4737f-746d-43f5-b4ef-5712a803a25e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdea2c11-b633-4287-95b8-04ca9f442e82", "sighting_of_ref": "indicator--3c1cd006-bdee-4469-9056-440a2eabf740", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fadadc7-64f9-4518-871b-211c50cbf1c7", "sighting_of_ref": "indicator--57c2514e-bb42-4191-9478-c862b1e98900", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855addde-d1cd-401f-a878-e316a59771e7", "sighting_of_ref": "indicator--12917294-ece4-4359-9359-76850c31fe58", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed70b23-8075-42a7-9a18-ff8906eeb3eb", "sighting_of_ref": "indicator--9434df9d-d211-4757-8cd2-2cc3ac0d00dd", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34eb617-ecf4-46b2-b09c-1e25c2d8ea9b", "sighting_of_ref": "indicator--9434df9d-d211-4757-8cd2-2cc3ac0d00dd", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e692f6-9bf9-4f9e-9a24-244efec00be9", "sighting_of_ref": "indicator--9434df9d-d211-4757-8cd2-2cc3ac0d00dd", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3702494e-298d-41dc-902e-fc5f2d8f248d", "sighting_of_ref": "indicator--e56e9586-7329-4a5b-8937-c4b89bcba275", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebceec69-23f2-4845-9799-fcda6fd13044", "sighting_of_ref": "indicator--dec562b6-a6f7-4e7d-b697-d4b4122d9c8b", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28381a2-7fe4-425c-beb2-02eb89cb3a71", "sighting_of_ref": "indicator--52c54d3b-0ca5-460b-a6ed-2fbab6086d6f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0120f9e-5cba-4d39-a5a1-94e3e4262620", "sighting_of_ref": "indicator--978768fb-ccf5-4685-9fde-44d091d4bc94", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae5498ac-8d86-462c-94a9-38cb3d319bd1", "sighting_of_ref": "indicator--978768fb-ccf5-4685-9fde-44d091d4bc94", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ace521-8f00-4888-bbb8-e211849c5480", "sighting_of_ref": "indicator--3885cf02-fd8e-425d-addf-3b3a3bb71f0b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c78784-8714-4aed-8d6d-971c647ce79f", "sighting_of_ref": "indicator--c414c9d1-15cd-4671-99ff-a1f442ade2c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ce81fc-99a2-46f1-b6b0-0f501ac03b08", "sighting_of_ref": "indicator--22fabc47-8b5a-4b43-a542-49d41dd011ae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed950293-53ad-4fa4-8aae-7e0aa4e1a838", "sighting_of_ref": "indicator--22fabc47-8b5a-4b43-a542-49d41dd011ae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d990a24-8f8f-4544-97ba-5a90232d929a", "sighting_of_ref": "indicator--f72793bd-fa37-420a-845c-dec1fff09c70", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc918397-7faf-46cc-adb1-f6b30c13b429", "sighting_of_ref": "indicator--78a90ee2-acc9-49e8-9441-2ec45fd6a82a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d483ad-978f-4ea8-896f-6077c344df28", "sighting_of_ref": "indicator--f2781c6f-2fa8-4b1d-bfca-fe388ce39692", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e32c252b-b8fc-458a-9342-b27a51894243", "sighting_of_ref": "indicator--5d47f730-493e-4a48-89ac-7adec8e1156c", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abebe03a-558a-46ef-8121-21fbef3583ea", "sighting_of_ref": "indicator--7cfed725-2eec-456d-bf73-6ffd4f513f9e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226c7243-7f84-4c85-b025-c313c5e37407", "sighting_of_ref": "indicator--438ad4cf-1630-405d-a3d6-085543ecc932", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882dcf9d-2e08-4a97-9aa7-f211b26ac54f", "sighting_of_ref": "indicator--90e5eef7-bb0e-4594-8390-1987b87d8905", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75c64f48-2bd0-4bba-b3b0-35942b2fa0fc", "sighting_of_ref": "indicator--ded34da7-c5d2-4a82-9e25-cc8f956a1004", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b228c9da-37cb-4dea-ac66-0e68acbe6d35", "sighting_of_ref": "indicator--ded34da7-c5d2-4a82-9e25-cc8f956a1004", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad763e1-43a3-4802-a045-789c036a1488", "sighting_of_ref": "indicator--67cf45fa-754c-4986-b50a-fc9f476c2dff", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ba5478-3b62-41c9-925e-d93c6c89aeb2", "sighting_of_ref": "indicator--1b112763-10bc-48be-b946-c8ef664c5056", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1370152-4af5-4c46-94f6-916f3fce28d4", "sighting_of_ref": "indicator--1b112763-10bc-48be-b946-c8ef664c5056", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7d72a4-7b3e-4e7e-8067-6c799aa2650d", "sighting_of_ref": "indicator--3f90af0c-829d-4850-8341-377842705afd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252aa0b9-b920-48fb-b6cd-7d4966b64041", "sighting_of_ref": "indicator--fad870e7-d7d1-45ff-8047-0a129a26331a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d24e00a-2980-44ce-ae40-32e25505fbc8", "sighting_of_ref": "indicator--8a34acc3-36e4-42e9-9d40-a4604348d4d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23801433-1dfa-4b6c-bbc7-1e7c4c2c75ab", "sighting_of_ref": "indicator--cf528ef4-d572-4c1b-bb4b-7c994956a0db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cec6f5-0eb2-40fa-8204-caae9cb52f55", "sighting_of_ref": "indicator--cf528ef4-d572-4c1b-bb4b-7c994956a0db", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e5d64b-8997-41d7-9a54-ba548e13a508", "sighting_of_ref": "indicator--a6eedb2d-2b23-4643-b41f-938beac0359f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caceaa4f-8ffa-47bd-a4b7-4d5b0efde693", "sighting_of_ref": "indicator--de4d5dbc-e760-445f-b021-3b7f39b29f71", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d037419-cce0-4939-a016-8eb0a124162a", "sighting_of_ref": "indicator--87f065e4-b3a7-4277-9c21-8ebf63147a2c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffff167-27ac-41e1-aa1b-03847184523f", "sighting_of_ref": "indicator--837d7e0d-e4d3-4087-b828-387e5e0167f6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471927c0-55c1-4932-ba3c-363b8c7c9b37", "sighting_of_ref": "indicator--ede827a4-c2e2-4adb-b352-af0d6c958b23", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b611bb-74f7-44fd-b833-20403aeabdec", "sighting_of_ref": "indicator--ede827a4-c2e2-4adb-b352-af0d6c958b23", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7d4136-3515-4d75-a528-c8be2d5d8cf1", "sighting_of_ref": "indicator--653e449c-7e98-42be-9a79-5fd42aae8a0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6a5e2f-1590-4f52-a350-0a236d15f235", "sighting_of_ref": "indicator--653e449c-7e98-42be-9a79-5fd42aae8a0f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de62cf7-350c-4a1c-8603-177981b14126", "sighting_of_ref": "indicator--9110b025-da95-455c-9185-505f31bbba35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b55a8b-c522-412a-9d00-a2aba12e7c14", "sighting_of_ref": "indicator--9110b025-da95-455c-9185-505f31bbba35", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313dcda6-5454-4445-8c8c-b616b5d03f51", "sighting_of_ref": "indicator--867812bd-0255-473f-9f86-917053e03b46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb0d98f-b99e-4f6c-9794-ebb6a8ab1776", "sighting_of_ref": "indicator--a095b92d-2325-44a8-ba70-524428ce4df4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be89f96-33b0-4c74-bb83-7406699eb5f8", "sighting_of_ref": "indicator--6d8b3a0f-3ea4-4bf4-bab8-bf86b56f6aeb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e86396b-f93b-4c8a-9585-ff4d51971762", "sighting_of_ref": "indicator--6d8b3a0f-3ea4-4bf4-bab8-bf86b56f6aeb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb31f0bb-c8c4-447d-8ec4-93e65ea57e1f", "sighting_of_ref": "indicator--04922e96-0454-4423-ae9e-ac70e4168af4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bc0e1b-2147-4e50-9013-9202d70032a8", "sighting_of_ref": "indicator--a17ee3ab-b88a-4cde-9a52-629b1757b5b3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda269f1-0a01-4fb0-b229-a249b5d7bbb2", "sighting_of_ref": "indicator--df51a4bb-081d-427a-88e9-c63321d21ba6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9b29c94-8e52-4a74-9aeb-6ae97979a1ae", "sighting_of_ref": "indicator--821d14e0-cabf-430c-9359-60e5e799b37d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b4e59c-ac69-466f-9bfc-481fa2d34d4b", "sighting_of_ref": "indicator--058f086d-0539-4cc9-95d2-a95bb722263f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f9f7f87-efe1-4efe-857c-37d7fe4d6e20", "sighting_of_ref": "indicator--630d5679-e68b-4f0b-ab4a-671b7f5ab132", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d87979-d893-4f54-95df-62d957299777", "sighting_of_ref": "indicator--adda49b7-549a-4bc2-9db3-601e0eb614a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1803de-a822-42a7-bedc-bde76fb6edf3", "sighting_of_ref": "indicator--2f2607a8-de96-4c80-9a9f-62ea28abb594", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e309ceb5-39db-4aa0-b709-03b7b49e5bde", "sighting_of_ref": "indicator--bd5db3ba-6042-4196-ac05-28c0baef5ffb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d576085-b6bf-4e8d-86f4-eeecb930feb2", "sighting_of_ref": "indicator--7e39662e-faff-45c9-a146-e9c4929810e6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706c314c-19bd-4cab-a707-c07ff7be9ccf", "sighting_of_ref": "indicator--daf33ad3-f9ee-4273-84fc-75d56d279ef8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8119c6f5-4f7b-4895-a512-4584c471059c", "sighting_of_ref": "indicator--daf33ad3-f9ee-4273-84fc-75d56d279ef8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84323c4f-911a-4184-b77b-82021b2742c8", "sighting_of_ref": "indicator--27b2ad8d-f597-490b-a3b1-6a83a1c7c438", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb85870-63ef-4cb5-b828-6869a27d8167", "sighting_of_ref": "indicator--f09ed3cd-c21e-4633-aff7-cd1acaf7969c", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72b52cc-856e-4644-9cce-a61936fe60fa", "sighting_of_ref": "indicator--d011e24e-732f-4973-a967-ceb6d26bcec2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4806d3b-5259-4e93-9caa-07ca92bda71d", "sighting_of_ref": "indicator--a3a920a6-961a-4b9d-b588-be7f95f55a50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fb9dac-61b4-45a2-bde9-b59a35cace95", "sighting_of_ref": "indicator--8ad4ca50-3d05-4d8c-9df0-b8cb0c59e309", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d115c739-8880-4426-8e53-55012947f105", "sighting_of_ref": "indicator--857ddc85-ac0e-40c6-9183-1137c6f92659", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f39b6b-b46e-4509-8215-07a202314485", "sighting_of_ref": "indicator--2bb41144-8594-4b4c-b200-a66a10207ef8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86f5e65-18b2-43dc-a51f-b400dabcaca6", "sighting_of_ref": "indicator--2bb41144-8594-4b4c-b200-a66a10207ef8", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69df4455-3961-4520-bf2e-8015a4834ad6", "sighting_of_ref": "indicator--bfa6ca0a-2a51-43a3-b328-8077c6d3ef6b", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376ada12-004f-4792-a09e-ff4d2acdae01", "sighting_of_ref": "indicator--276beac5-f64e-4d96-83ef-497fbc8e5296", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b85662-17fa-421d-ac60-42ea41d89dd0", "sighting_of_ref": "indicator--3dff3ec5-11c5-4f94-9c99-a46e9f15bcc5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98242694-6f80-40a4-9497-6b8b3fab6ef7", "sighting_of_ref": "indicator--b08b1f64-0452-43e5-ba5a-a29138b0a793", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8b4757-62f4-49aa-b57f-39e45872cb17", "sighting_of_ref": "indicator--119d2f1b-c395-4436-8fc6-290717512a6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e7ba2d-5477-47ae-93b8-b2d5872a9627", "sighting_of_ref": "indicator--0bb402c6-f6e8-4bbe-b911-c1d93d8d96a1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424245a4-3abb-420d-94d1-6f8321108d62", "sighting_of_ref": "indicator--c447d7d7-502c-4f7a-8b96-8b41b5533175", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3add0a-ea3b-4371-b92e-dc1f436dcdba", "sighting_of_ref": "indicator--f0ee4419-fb5b-4124-9a5c-04ab45b2fdcf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdcb5840-7ffa-4499-92b4-c3884d4b5665", "sighting_of_ref": "indicator--5140981f-0b37-408a-96f0-68d2ab68c6b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522b49b5-1e50-4a79-9380-c077e8ab56ba", "sighting_of_ref": "indicator--7808e279-c86c-489b-bf8a-a212eb9f590d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727d18bd-b988-4057-8b3e-bf1e476330d5", "sighting_of_ref": "indicator--604d5035-eea6-4d94-bf75-6db12694a351", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305785ae-17ab-447a-80c7-2ffb5e96828f", "sighting_of_ref": "indicator--cc9641b6-db34-45f1-b74c-f6aa9ede1a9f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c14067-e89b-4465-90b7-432c3e8fbdb5", "sighting_of_ref": "indicator--c7c38518-c1aa-4a48-b475-58fd6410f9a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf9a520-bc84-49b0-9dd8-e3908c6b3881", "sighting_of_ref": "indicator--12a6edae-a520-4ac3-9a3f-1857f9d8e08b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33303391-09e1-4376-8c6e-2ef31fb0546f", "sighting_of_ref": "indicator--ad1b5a0a-f667-41c4-9b8e-b8fe7ac93647", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a816f74b-4741-482e-926f-eb88d57d1951", "sighting_of_ref": "indicator--88e08e75-1df6-40cb-b1c7-d7675f968829", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eb1e47-9aa3-419d-9ce0-4be5e965cf70", "sighting_of_ref": "indicator--b05a51ae-ce69-4693-920f-9153c7fe2fd6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bf66a72-3c76-46cb-b89c-2646aae58c19", "sighting_of_ref": "indicator--b05a51ae-ce69-4693-920f-9153c7fe2fd6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e997420-d810-44bb-a195-82af88ddd2c7", "sighting_of_ref": "indicator--2aac9a34-4fb1-448f-8400-8c1949dd2d6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4340d0ec-2f56-43a5-95f5-9158ea466acc", "sighting_of_ref": "indicator--11fd27ce-b6bd-479f-ae61-8a71aac54314", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a502a7e-3a28-472b-9e6f-b543d67acc06", "sighting_of_ref": "indicator--11fd27ce-b6bd-479f-ae61-8a71aac54314", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4025df-e463-407b-b0e0-7ac23e90bf1a", "sighting_of_ref": "indicator--82c0f3b8-1f91-4f81-8f25-1ed5840783ca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44eb6ab0-8d08-43af-a64c-c5d240f2af22", "sighting_of_ref": "indicator--fde68314-f465-465b-bfdc-57e41fc39555", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba96df08-53e4-432f-b98f-3326ae6f7237", "sighting_of_ref": "indicator--31663a31-2dd8-4d45-8fbf-f2fa066239fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1375c490-6967-4bd7-ac06-63b18c597a0b", "sighting_of_ref": "indicator--938921f9-46e8-4842-832b-4b60887301d5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5305579-03bc-44d5-9f16-7e91bbef7412", "sighting_of_ref": "indicator--7eb6ae8c-1a9b-4bcf-92f9-c15ede39ccbd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c7c033-9cb8-437d-a25e-541fad67bf6f", "sighting_of_ref": "indicator--7eb6ae8c-1a9b-4bcf-92f9-c15ede39ccbd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427fde19-6dff-4fb0-a3c9-c5c04cc32cbc", "sighting_of_ref": "indicator--ff0a1b0c-457e-4ff0-a781-680a241762d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4599e7ea-cb84-43c2-9657-85cc9666c4b4", "sighting_of_ref": "indicator--a4abb208-a1dd-4acd-a8b9-99924d4e41ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b87c389-aed0-4719-bb88-f7cfe4eef6e3", "sighting_of_ref": "indicator--a4abb208-a1dd-4acd-a8b9-99924d4e41ed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4c2f4a-fe23-4e9f-86d9-2fbab1f460e8", "sighting_of_ref": "indicator--632b5a34-a384-4205-a7a4-f01274464fd6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488a19ba-927c-49ca-b0e2-3b41247d2f31", "sighting_of_ref": "indicator--632b5a34-a384-4205-a7a4-f01274464fd6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb84d94e-30f8-4fb5-aa99-cd513aabda15", "sighting_of_ref": "indicator--f050fb4a-9e11-4b30-af87-9207ae06fffb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a731b31-dea0-422f-b689-8997da3e7374", "sighting_of_ref": "indicator--d6e46913-b52d-4b42-a4a5-a152e5231ca6", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abebc02b-6632-41ab-bebb-0e643ccb6edc", "sighting_of_ref": "indicator--f95dff7b-f77d-4df2-820b-b48c1e56da4b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004c4125-37e9-4f1f-9b51-d7dfbf99becb", "sighting_of_ref": "indicator--f95dff7b-f77d-4df2-820b-b48c1e56da4b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f56db929-5791-4992-a9a5-a4f45d5b0583", "sighting_of_ref": "indicator--4a93ab50-dcac-44db-bf45-bd1a6f5b02a9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a176ec10-dad2-4561-857c-a7cf69cfdac3", "sighting_of_ref": "indicator--2411f8fb-cf2b-41d1-944a-2469ad24c5b6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5fa1cd-c475-456f-a87f-e14c097b4a49", "sighting_of_ref": "indicator--d109c7a2-226f-4e20-90ec-2a9e82767272", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5df938-d7d2-492b-b432-fcd8ffb3cf67", "sighting_of_ref": "indicator--0f3241d6-4f13-43b3-b796-610760c99dd5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde90c67-9d0f-4adc-91d8-389ee61c8965", "sighting_of_ref": "indicator--0f3241d6-4f13-43b3-b796-610760c99dd5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df68866-3cd3-4127-ac1f-6bce63a89455", "sighting_of_ref": "indicator--14d46da3-2fba-47a6-9b99-8902c82d0aed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a486726-4fde-4704-8cd2-6e60b1c3a35c", "sighting_of_ref": "indicator--14d46da3-2fba-47a6-9b99-8902c82d0aed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797ad46d-1d2a-4417-aec6-e74b7053b992", "sighting_of_ref": "indicator--4a5e98a6-eee0-48f1-b1ce-1d05f776557a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983880a0-68a0-4f0f-bc18-61d42d12979a", "sighting_of_ref": "indicator--530ae5f5-c022-4df0-8c0e-0d1dd267ab1d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27065e6b-d1a2-4b8a-bfbe-5ec4dbcf53e0", "sighting_of_ref": "indicator--e602afa4-c4f9-4ac3-8642-6a2ab1b6d217", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4f808e-b909-476a-bfab-2d20437c27cf", "sighting_of_ref": "indicator--89092dcc-27ff-4a7d-94cc-e6888e3f4736", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e768c455-b3e6-48c4-b024-e2a85f63cd54", "sighting_of_ref": "indicator--c33787cf-da37-4d31-9862-6b841e8ab736", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cdc483f-1468-489d-b2e9-4673d6f861fa", "sighting_of_ref": "indicator--c715f282-7cd7-430e-a4ec-70dc749d95e5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7f506c-b60a-416f-9a56-95e949387888", "sighting_of_ref": "indicator--16ffd352-9b4c-4729-862c-dd830bfec4a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef4e5cf-c1c9-4bf7-8a05-9d843cb595bf", "sighting_of_ref": "indicator--950bec32-2f3d-4a08-b7d4-da4d4f812ab2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35023b0c-673d-4549-acfb-3a3068957a6c", "sighting_of_ref": "indicator--ce207394-e76a-4f21-8125-4ef7a396bbf9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b64de92-323a-4771-9880-aca8b1f83c9b", "sighting_of_ref": "indicator--a4a09d52-4d2f-4ff3-8cfa-25d355187420", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6889be-4809-4904-b391-3d48a63788cc", "sighting_of_ref": "indicator--2b0c7dba-d73c-404f-838d-01ea3436d1cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea44d030-0f97-4471-828b-7c4991b75c2a", "sighting_of_ref": "indicator--2ffa3c2b-3532-4a7d-8f3d-8e9d27ff0e71", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b73644-4788-44a6-877f-4a333464fa25", "sighting_of_ref": "indicator--ff116b2f-9e8a-4ffa-a35b-bdbb78aa5683", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31d8fb1-fd28-42c7-8d28-3afb7f051b92", "sighting_of_ref": "indicator--099704ca-a4de-404b-a280-41fc1bac4728", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--104f558d-bbfd-4baf-be34-d3a42ead8fc7", "sighting_of_ref": "indicator--27de0cd0-df9f-41c9-8900-8f88963948f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf7c074-8daa-4633-8296-9b35f866d465", "sighting_of_ref": "indicator--bbd19fec-89e0-4e42-8e46-6524270e0b17", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8155c0b2-f15f-4df0-b552-c758263ac82e", "sighting_of_ref": "indicator--b6ff0af2-c523-4157-b808-d948b7239e64", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a14f75-15c9-4fa4-9e23-d7c06117df0f", "sighting_of_ref": "indicator--e70eaa14-4b40-4e49-a0f6-4c69c8d21244", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db18a70-2526-4fdc-8626-e792a162d170", "sighting_of_ref": "indicator--14e4f680-db9c-4241-865b-377d0efc0ad7", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5cb246-f696-407e-be1b-7577d67bcf78", "sighting_of_ref": "indicator--203ad79d-4192-42cd-a1a7-835054ef5e81", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf70fe56-f13e-4fd8-b31d-bdf83d8e6948", "sighting_of_ref": "indicator--765cc304-e941-4c0d-a754-4cb18dae6b47", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa8e10d-09e5-42f3-8228-5995dd86c3eb", "sighting_of_ref": "indicator--7d7e4cc3-0780-4546-a222-42b3c66facbe", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421bcce9-5f03-4f2a-b41c-e7886a4423d2", "sighting_of_ref": "indicator--3e6f8430-c223-4c52-ac44-e05871435b65", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b4b34f-ee98-4da1-ab58-d8dc3062e6bf", "sighting_of_ref": "indicator--902dc205-92db-4ad6-9fb6-126a6afabeeb", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1d0f62-40d1-463e-8353-76d4fd8882fa", "sighting_of_ref": "indicator--2519ed19-7d88-422c-89b1-dfe5dd3e2583", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b0740d-de91-43f8-a18c-24aef00eb0d0", "sighting_of_ref": "indicator--68789631-5c0e-47e9-8402-14e5db02fcf5", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46bdcda6-402d-4e1e-be7e-fd65e27889f5", "sighting_of_ref": "indicator--c2f685cb-7d6d-4cc4-9484-fcfe69fce2cb", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4954b4c9-66c9-4aab-980a-4bf937a273cb", "sighting_of_ref": "indicator--a9fff32c-552b-426c-a00e-35da62e91820", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77231513-12a9-4aca-9625-d736a266b99e", "sighting_of_ref": "indicator--8e5f2ff5-50ed-49c3-bcf6-5f2576441afb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9eb5fc-969d-4a92-ad2d-c4d0105ecca3", "sighting_of_ref": "indicator--cb28b38e-337d-488b-8f54-a96e0eebabfd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e82a0a8-ee95-4875-b81b-ecb4f864c52e", "sighting_of_ref": "indicator--3aa1995d-d70d-45ba-8f37-ac73f1a98b9b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268c6b5c-8c90-4034-b7af-06d84456ae8a", "sighting_of_ref": "indicator--4ac84416-7693-40a1-be63-23c42bd4fe49", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21f8857-1f24-4a96-9f41-2f32eaf4fcdb", "sighting_of_ref": "indicator--f89bb150-3c6c-4127-9459-c43ab2d3d88d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e3e65b-3b58-43f2-b7a6-7a85b29e832e", "sighting_of_ref": "indicator--46aa19cb-85ee-4571-9abe-807d2da27a3b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19b3f56-c648-4270-809f-b8452465ac17", "sighting_of_ref": "indicator--4fe6c036-3102-4576-92f9-5e30ce877576", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e66ef911-7e7a-44bd-9c50-bac24f9b3c22", "sighting_of_ref": "indicator--79bce796-7587-4643-a317-41c42b6b7ec5", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbddae16-ab9d-4ace-a330-8fd8d2233982", "sighting_of_ref": "indicator--f2f528d0-cd10-475f-8e23-41d132a3cec1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb80e5df-a472-4f56-aa6e-9a01fefe3158", "sighting_of_ref": "indicator--8339e62b-3d53-4576-bd70-7a9ab037bfe3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffdabc1-362a-4d88-a166-c9108bfe0291", "sighting_of_ref": "indicator--4a623110-b7b2-4a4c-8c8f-b0a610f7960a", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9fe235-f109-41c2-99c1-b28a96ec1eba", "sighting_of_ref": "indicator--66292da6-b463-4c8e-9a0f-e9bf5d309bb0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4696e6e-47ef-43d3-85d2-0425541a025a", "sighting_of_ref": "indicator--819c52ee-220c-4c97-96dc-726d1fb051c7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5399b0d5-48bf-4686-b08e-8d78b290d6d3", "sighting_of_ref": "indicator--d6a3c145-9ee0-4c77-837e-8b1015826400", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3059b85-8ec9-470b-81b3-4e8576cd6fbf", "sighting_of_ref": "indicator--559407c3-6a62-445c-8bdf-48320619ff09", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6651ae44-f5bf-4657-8d52-db17b313b468", "sighting_of_ref": "indicator--e2bfb7ac-48aa-4a14-8b69-e532adf0de1a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39887ce1-a57d-4da1-aa29-4f92d07f399d", "sighting_of_ref": "indicator--dcbb08c0-2ab6-4964-9581-cd1a60b9eac1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5cada2-9fc1-483a-953c-ecfb8b37f2d9", "sighting_of_ref": "indicator--597d533c-db7e-458a-989e-e8510faa4148", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3fccbd0-76c6-4044-b5c6-029a5e2c6406", "sighting_of_ref": "indicator--5ceeef8a-d011-4ba7-a284-1cb44b97387b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f961e131-6c55-4cb4-a5fa-a33756bfb1c3", "sighting_of_ref": "indicator--49d7a135-74e5-4d41-98e2-2a2d0fe47dd4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa17b1ab-ea88-49a1-877c-53ec5309cd6d", "sighting_of_ref": "indicator--a4672de1-bda3-4442-919d-bb19188654aa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2cc27b-f533-46fc-8b3c-f0a837e2f2e8", "sighting_of_ref": "indicator--da4bef2f-dba7-4c69-8b7e-c4930d5461da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490ddd35-290f-45bf-8757-282e39715bcb", "sighting_of_ref": "indicator--c805fba3-ef85-4bb7-b838-bd8743d854e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426f2781-44e4-4623-9be3-4b66c9e46964", "sighting_of_ref": "indicator--992c506a-07b5-48f7-b074-d6a5cc99b99c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051a8adc-c8b3-4acb-b8fb-3939609a62cc", "sighting_of_ref": "indicator--a8a3d8bc-c7fe-439c-81a8-47a8402e869e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d4a16d-f8ee-41b7-a56f-4acf733ad128", "sighting_of_ref": "indicator--311adaa7-3d9e-4b9d-9c43-46952cb0c531", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f6b326b-1873-4956-8b42-1b4110d4dfc0", "sighting_of_ref": "indicator--f7951713-e6ea-4829-91ec-207812b242be", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c921dfe3-aa13-4c97-9f40-a480b6e91d8b", "sighting_of_ref": "indicator--65e06012-37b2-48be-a6d8-709d3c472c7d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f899b9a1-defe-45d1-9781-ca951bec22c9", "sighting_of_ref": "indicator--00b12cd3-33a6-4af2-9c81-4979c7e7f457", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10fe9a0f-f2be-4d5d-b435-dd50af0f5cf2", "sighting_of_ref": "indicator--a15f946e-f53c-4444-b4bc-c921f3a14496", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045eaa8c-7460-4b90-93d6-ce7e23ac2785", "sighting_of_ref": "indicator--5b4b7034-d8db-4c96-92d4-632d938e0131", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d06da93-2bb4-420a-84e1-f183b52e3fea", "sighting_of_ref": "indicator--369fa7d1-c9a9-47cb-93bc-3377cfa51427", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0ac6b7-6055-4c4c-b5e5-12830be066f1", "sighting_of_ref": "indicator--e66b8518-6de7-4ce9-8f9c-922807f6e569", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ead04ee-8451-4a6a-ac78-f90cf2c8e114", "sighting_of_ref": "indicator--ed3ef180-0297-4405-84b7-2d9126f85e60", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ad9bd2-fc92-4f32-988f-0f94a829136d", "sighting_of_ref": "indicator--0309f242-bfc0-42f4-a080-b4d1587294ca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd799d5-1c96-4333-9d06-adce4d4c25e4", "sighting_of_ref": "indicator--e021630a-bd71-42ad-a276-c5a6f07f7082", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adf1868-25d0-4668-bad1-965cb5baee21", "sighting_of_ref": "indicator--1263834e-98d2-4cff-8c82-1032ec4f8c49", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d49629-1626-4740-9644-5a007b1aaa57", "sighting_of_ref": "indicator--dc9001cf-282f-4cf7-91a3-005d93592f26", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bb533f-c828-4293-8c86-bb760efe7e64", "sighting_of_ref": "indicator--de7ef5f8-f284-4e80-ab36-68b9dc1095de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94dd1e15-d8b8-4bd0-b3f0-9b9fd8c5eb68", "sighting_of_ref": "indicator--38c0f54b-ac18-478f-8f29-705d5f40fa49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3d5174-994a-4ec7-a745-5f5e9a1e1086", "sighting_of_ref": "indicator--db6745b8-cef2-4103-bb43-68d98f9f280f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb9b2eac-019c-41a6-bcc0-a7b592f86713", "sighting_of_ref": "indicator--0c168eb2-c208-4548-ba22-a6516e6f6ec1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee22345-1763-4982-8e23-c00fc3f748b3", "sighting_of_ref": "indicator--cb01112d-19de-4a5c-b193-7f37acdc93c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b756823-a468-4571-af2b-79bb938b98ae", "sighting_of_ref": "indicator--b3104544-f30a-45ea-8037-1a1f5a21e170", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab89dd57-3c4a-49c4-9bda-62da97397b2b", "sighting_of_ref": "indicator--3c45e99b-f064-4cbc-a175-1f8e87a4b031", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edfd7ba-3d60-404e-86f6-31b68966c263", "sighting_of_ref": "indicator--a37a9437-8ec2-4673-b633-71ae1025726f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436d0ed3-437c-4ba0-a3f5-487aa38daac1", "sighting_of_ref": "indicator--b147ed54-406e-41ee-9244-3440156ce684", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bfdb6f-64ea-4a27-8e7d-1f301c75b98a", "sighting_of_ref": "indicator--c7285282-f00c-471a-9424-50ab41a06313", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97303d1-b446-4988-99df-9dceac7d6776", "sighting_of_ref": "indicator--ab895463-be31-4f9d-9762-8798ff1d4cfc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b09f67-85a9-4d3c-aefd-19cdf746b779", "sighting_of_ref": "indicator--9113043e-53d2-4acc-aa63-d57d816d14b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da210465-d48d-4de9-a7e0-8536687ee52d", "sighting_of_ref": "indicator--55e2dd2d-9b99-4da2-978b-fcb846e4dd88", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab839dcf-5e53-4cd0-a331-99920fc1f922", "sighting_of_ref": "indicator--3fb8ec60-c43e-4eac-818d-f420edef9c46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45856290-2cdd-41f4-bc1d-1899ddcd1e07", "sighting_of_ref": "indicator--a424a6b7-44e7-4cbb-bdb9-559db3eae6de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad6e81e-5002-43d8-a9e0-0c708392c59b", "sighting_of_ref": "indicator--ec856c04-eb9e-40b2-b35d-2eeb57f9c205", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d17976b-707e-4459-b580-4fbc3d34a96d", "sighting_of_ref": "indicator--326d84df-ade4-44bd-8828-d0fdba600ee2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e63ccf-a7c7-4b37-936b-f37aa3ce0f2e", "sighting_of_ref": "indicator--101b1306-574d-456f-a762-80cb2a5026d7", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f21c10-ccf8-4116-9600-ef4719f4ed40", "sighting_of_ref": "indicator--10b282dc-10c8-4579-8381-16790e36a7fb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a82267a-64c4-4e3e-a958-b739f9c49e48", "sighting_of_ref": "indicator--b2d0977f-fa9d-4f13-bd60-123f1a9ee0fd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac73e59-e0d0-43eb-aae3-117f2adf296e", "sighting_of_ref": "indicator--b947d2a1-4e54-4171-ba47-91a7a8c0aa3b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a51808-6c2e-42a5-a1ad-cdfb4c2f3054", "sighting_of_ref": "indicator--caccaff2-2b14-427e-bf15-64bc80c99948", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17ba110-2ece-4406-8db7-923d989cc3fb", "sighting_of_ref": "indicator--b15aa979-940c-4a55-9ca5-eb673abab392", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c657e84-1488-463d-b2b1-bbf54785ca65", "sighting_of_ref": "indicator--c9d8ba04-b6ad-4573-86db-fccab21da037", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a725339-259e-4f47-85d6-0e1226ee6413", "sighting_of_ref": "indicator--6d215b3c-093a-481b-b49c-89b032bdbabf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eef4eb9-d354-48ff-89f2-ae3706bfddf2", "sighting_of_ref": "indicator--53c49961-e2fa-4ed9-80d8-758c21b714e0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbacf0a6-1f40-4201-92ae-5b9b8660e072", "sighting_of_ref": "indicator--bac1a2f6-26f0-473c-b41a-1147a9b9c035", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6e4c3a-c309-47d2-90ef-1777beb9c592", "sighting_of_ref": "indicator--2401beab-c498-4227-83ea-2d8199448c23", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b294b8b5-1f0f-4116-8268-dc393656d9fa", "sighting_of_ref": "indicator--bb157031-7c17-406c-a183-becd490395f0", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6505e839-a12c-4685-a8df-46ecfa97877f", "sighting_of_ref": "indicator--429f7043-8b3b-48db-9d13-6e6f3907774e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f42c413-6666-4a73-9289-59e4ca7f5c71", "sighting_of_ref": "indicator--07e4769a-ac17-46aa-8cea-96bcc6057918", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8c7f4c-f1d2-4cb7-850b-08ed2c964a52", "sighting_of_ref": "indicator--948ccba4-23e8-48ea-8e48-f797bead1b83", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633fde59-d8cd-49bb-9806-553a75d477db", "sighting_of_ref": "indicator--13e2bcde-c7de-40d2-8138-1106990c1f62", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c40392f-cf2f-49fb-ba1a-a34e8c18e809", "sighting_of_ref": "indicator--8beed4cd-fb95-4284-b407-901a3aae95fd", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4ff776-4dd3-4072-93aa-ea1af6ba0e0b", "sighting_of_ref": "indicator--47c7f67e-3907-4a1c-82d6-4f335498f8ad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7162667-35a4-46f0-9ef5-031feb76c206", "sighting_of_ref": "indicator--025647bd-926a-4958-b4ee-fa8bfd20621f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccd2b2b-e52c-429f-8ac1-bd019fdf2de0", "sighting_of_ref": "indicator--0eaae2fa-7631-4f94-9c40-2bf7d82c8e28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b99e4014-3f5f-4b58-9ec0-e422ec18d178", "sighting_of_ref": "indicator--bb752dd5-02d9-41ca-b66b-9bd2d7b79f32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0041a343-ac5a-498e-86c1-2acd6a2505b4", "sighting_of_ref": "indicator--ba677d20-7ffb-4926-98ce-09170a7d5ba7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4e615a-8d0f-47af-8f66-baf2e94ef6c8", "sighting_of_ref": "indicator--51ed80db-241f-483f-9343-98dc17801ce2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee86cd1e-290b-4a34-9ec1-6c9e22a7bbcd", "sighting_of_ref": "indicator--39356118-3734-4fba-9992-04a229dcabe6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9e0963-ff8c-4d2e-a042-7de650260f2e", "sighting_of_ref": "indicator--b91f6f4d-2545-41da-b34d-9c254926cd60", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b3fcd07-3076-440b-81a0-1da07cd0700d", "sighting_of_ref": "indicator--2f15538e-e12c-4090-8e46-fc2b45eacb56", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952051d8-d681-4e65-911a-bee2d4e1bc11", "sighting_of_ref": "indicator--edb8bc57-ea45-4cfa-9a5c-c87acfc03b21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954e8b8e-4ce5-4b96-8b23-3c6f85b36bb8", "sighting_of_ref": "indicator--f51aea16-93bf-474d-9a73-d141a35d1ee2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64c4a60-7512-44c5-be49-2fd97cced175", "sighting_of_ref": "indicator--df82e0ee-42ef-4e20-9f03-e3f1535e5abb", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b7c3d6-b1dc-4ff6-a56b-306d020fd4d3", "sighting_of_ref": "indicator--df82e0ee-42ef-4e20-9f03-e3f1535e5abb", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaa3023-b2d9-4eab-88f2-f69519c08baf", "sighting_of_ref": "indicator--8bab4706-4d85-4aa8-bf6f-390256ab88e5", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32c3d5a-06d3-477d-b2b7-cc7ce4302bd8", "sighting_of_ref": "indicator--8bab4706-4d85-4aa8-bf6f-390256ab88e5", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c806cb-af8a-4d27-b858-4d1df801875d", "sighting_of_ref": "indicator--6fc05227-8fd6-4a27-b6b5-ad985f4bafbc", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74af892-db6f-4420-a063-7b49c1f9ac83", "sighting_of_ref": "indicator--9ba3e3b3-b248-481d-ab23-7f2debedbbe4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b63e1e-d762-495c-a1b6-f90a9da68337", "sighting_of_ref": "indicator--721e4ffe-50eb-40e1-90e2-b1668a4cdd7f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f78b992-226f-4b04-84de-833e78aa81eb", "sighting_of_ref": "indicator--ca51ab65-d455-47b3-8cec-fcef281d5fa5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74468cc-cf2e-471e-b61f-ee1dca58da03", "sighting_of_ref": "indicator--59777490-2fde-4df1-a985-a1f847593c47", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e885f1-f925-4e57-bec8-b32231bb1710", "sighting_of_ref": "indicator--c159fa47-8527-4417-be5a-8949850f4b72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dfbf9af-33c3-4e0a-9229-17e3a14ab426", "sighting_of_ref": "indicator--7d131340-2ebc-4bbc-9ce9-e349007eb8d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb1c2cb-de0c-42e3-a469-501bf0b9d11c", "sighting_of_ref": "indicator--60c6ee34-3a57-4c9c-9a08-171ed8bcbbdd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26ddeb7-9812-4be3-93d6-6cd7a38941b7", "sighting_of_ref": "indicator--b06d5e72-d5ee-45ca-9876-531f218db5e9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3c41b6-91ee-4cba-a818-2a24a2fcd041", "sighting_of_ref": "indicator--2194ae68-1ee6-424c-9199-3b0993d6bf27", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2e7280-c202-4fd8-b4a8-4f910dc37bde", "sighting_of_ref": "indicator--39154e7f-9776-432c-9801-3d1a845775ac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9d881e-35e3-48f5-8f76-b72dfd183803", "sighting_of_ref": "indicator--cfc86202-4c94-4483-8be6-2f7aa8483134", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb005217-2698-4e9b-a6fb-792dc4c6cf67", "sighting_of_ref": "indicator--18452f93-b108-4d44-b2d2-eaba8d7c2c8f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39040d9-5afb-4a02-bb36-82ee2aa387f1", "sighting_of_ref": "indicator--29a211b4-a795-4138-99b5-69e62b7e3c67", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38213acf-119c-4394-94ed-ede067048ed8", "sighting_of_ref": "indicator--8a549659-1bad-4934-aa22-fbe05e469873", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69e1e05-db3a-4b06-91fb-d306734c49c5", "sighting_of_ref": "indicator--8a549659-1bad-4934-aa22-fbe05e469873", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf0138e-b4f7-4aef-8444-aa2c62f44470", "sighting_of_ref": "indicator--ab158010-aaae-45cb-b2b3-152d9860c1a1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef142a5a-e41a-48af-b306-3d208cf0fe06", "sighting_of_ref": "indicator--92c91e39-c7e3-47a3-8289-314d1ab49d9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1413c774-3e64-4281-bb60-af3bafb65801", "sighting_of_ref": "indicator--e87a6f9e-6378-42f6-9e86-a8a9204bf4cc", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98fb182-8219-4e12-98da-6212ac80cf19", "sighting_of_ref": "indicator--b9f2362d-62db-454d-bdbf-8f398ddbec79", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba549a17-ed36-4180-9152-33131cabcd20", "sighting_of_ref": "indicator--ce7f9a30-d385-41a8-aac2-21f55f49200e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b20bfa3-c542-4302-8060-1644f95ea0c0", "sighting_of_ref": "indicator--a7b690e4-f5b4-4ce0-a1cc-2e2a074b5eb8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520d746a-bd1d-4930-894d-764bad8be6dc", "sighting_of_ref": "indicator--a7b690e4-f5b4-4ce0-a1cc-2e2a074b5eb8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b629b515-8138-463e-8582-8f24c7a62667", "sighting_of_ref": "indicator--69a7541d-6d30-45ea-b474-01acff3016c5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeb12a4-9ada-4e0b-9ce1-a61870f40bde", "sighting_of_ref": "indicator--69a7541d-6d30-45ea-b474-01acff3016c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3c397e-9fbe-4282-bd14-c50a03c9e5fe", "sighting_of_ref": "indicator--0fc0ee1e-b924-4681-8f12-e5f9b5406441", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9e48e1-f754-43fd-bfc0-c421ef86354e", "sighting_of_ref": "indicator--d6c85318-a7ed-4cdd-ba15-3ad2ec0ee581", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92dded40-6f5f-41bd-b2e1-205add41d9f5", "sighting_of_ref": "indicator--516c7f4d-6f20-45a8-acdd-26fd7c82b7d0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38de586b-1862-4ad2-a0b0-9647d5c69d24", "sighting_of_ref": "indicator--4563e1f1-ad7e-4679-864c-271c92494a40", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f14f9a1-fe1e-4913-956a-122176891e05", "sighting_of_ref": "indicator--fada144d-d916-4605-a1f7-f6453a432679", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2c3542-b58b-47a5-a8f4-fc7405abf4ec", "sighting_of_ref": "indicator--fada144d-d916-4605-a1f7-f6453a432679", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1766d228-2347-413c-a334-7a227dfd4b0a", "sighting_of_ref": "indicator--713e36e7-d382-4195-881e-06486c7ed5fd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9abac6-62af-46dd-b61e-3da9ad055d3c", "sighting_of_ref": "indicator--602372bd-8fa4-498b-b415-4a53d8f3057e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba69cebe-1dbe-4df2-a385-1ba7133e0aed", "sighting_of_ref": "indicator--602372bd-8fa4-498b-b415-4a53d8f3057e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8734cc49-c9c5-4c4d-8afc-09b1e43a0c32", "sighting_of_ref": "indicator--575ffc76-5646-4979-ac4f-c8433fe8373e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369af9b2-66d7-4d51-8d4e-a9023785835a", "sighting_of_ref": "indicator--575ffc76-5646-4979-ac4f-c8433fe8373e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310609cd-a79f-4444-ba41-fd651b0cd4f5", "sighting_of_ref": "indicator--4098de28-2ff6-4b63-936e-d759ec15a4db", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc934244-4546-48e5-8665-ddfe449b7441", "sighting_of_ref": "indicator--7e661153-e98c-426d-bf64-48f06751d8fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e87feba-7f03-40c5-bb25-1712cc4d197c", "sighting_of_ref": "indicator--7e661153-e98c-426d-bf64-48f06751d8fd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecde9f4a-8f3e-4b5d-bedc-80fc8313bbeb", "sighting_of_ref": "indicator--f7a49f50-0978-4000-b58f-7641008a4031", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fff640-fa88-477c-afb9-c886a93f1196", "sighting_of_ref": "indicator--f7a49f50-0978-4000-b58f-7641008a4031", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c08e4c6-8414-45b3-a507-d458c4ae4142", "sighting_of_ref": "indicator--f650f0c7-4dcb-4085-a4db-1e71166762e9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f841809a-c9d2-4862-89b0-e58341d85c21", "sighting_of_ref": "indicator--027daccf-7e0c-4251-acc9-5206cae1d596", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ceec07d-818b-4ac9-b079-819405c5a6d9", "sighting_of_ref": "indicator--816996cd-0e75-4f99-9383-e71bb9d8419c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab42935-c42e-44d1-9ca8-4df32c26d1e2", "sighting_of_ref": "indicator--3c89f857-4e4b-4780-99fb-a205530abdb6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78efa9d3-7fff-4233-8a95-e7ff3e981703", "sighting_of_ref": "indicator--3c89f857-4e4b-4780-99fb-a205530abdb6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfda43b-5e75-46ae-b36a-6def9ecfc414", "sighting_of_ref": "indicator--ce4d756a-4fc2-43c9-aa30-488f47864aa8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6ae332-9a27-48b2-bc68-ab1a8aa7bdb0", "sighting_of_ref": "indicator--68ad5e39-7618-4dda-9994-697e2904b68d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bea7ec-da74-4a23-9dbd-749f5fb52e87", "sighting_of_ref": "indicator--1183892a-8ff9-415e-86b3-aacbb1fb39f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1609cf56-4204-4ef8-b875-488553819a34", "sighting_of_ref": "indicator--fb615d46-8e11-48aa-aeb2-80e16b4c5075", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc5af86-c86f-4537-8ee2-a198ddc8678b", "sighting_of_ref": "indicator--acc19484-af66-4acb-b7c7-1e5f3c5742f4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd63ad46-e9fb-483e-adaa-40a79525a3b4", "sighting_of_ref": "indicator--0781e157-8272-4a07-b37b-c3021578f5a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921d6a35-d1fa-4ca4-bbe6-d861356aea86", "sighting_of_ref": "indicator--32c1fe45-64f1-4896-be17-337552fe961a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ad0df8f-7288-45ef-8ee7-57dc6ead6472", "sighting_of_ref": "indicator--32c1fe45-64f1-4896-be17-337552fe961a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d695f46-ab9c-4e54-a151-aea66238f8ad", "sighting_of_ref": "indicator--57df3ec6-b603-4e58-aa2b-def2862ee89b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fde0d3b-bef7-413a-b486-d3faa594add5", "sighting_of_ref": "indicator--cb9c4a86-7f92-40d9-902e-90fc5796c934", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05c6325-3943-4065-9623-48e12e024379", "sighting_of_ref": "indicator--cb9c4a86-7f92-40d9-902e-90fc5796c934", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe59218f-4ce7-4d4a-a1b2-02b1957e23c4", "sighting_of_ref": "indicator--78131cbb-e5ea-41dd-a61e-92b856e71216", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9faf20-d3d9-4b41-9017-e67f9d1f9610", "sighting_of_ref": "indicator--ae4e70d1-d042-45b0-b9e0-17877d9b4de7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a22d4b4-ce84-4f09-8ac5-b348bdafd9cf", "sighting_of_ref": "indicator--2e78973c-f947-4c26-a6b7-be3bcf8c5879", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66b3d68-e7c5-419c-8dcb-562f52402c34", "sighting_of_ref": "indicator--57e91780-082d-4eb1-a7c3-acf555a245df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8172c60-54f0-4cdc-a455-81b652688b81", "sighting_of_ref": "indicator--8bfd7968-e00b-454f-af27-67e6837e8b74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4538dbc8-d39b-4fc9-a27d-7aa795622f21", "sighting_of_ref": "indicator--8bfd7968-e00b-454f-af27-67e6837e8b74", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b93a26-ce20-4668-96ee-ac04fe3fecb6", "sighting_of_ref": "indicator--39b402f5-9eaa-424a-babf-6b9df87aecd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62a7b06-ae8f-4a49-8a45-79f3b05ded1e", "sighting_of_ref": "indicator--aca4919e-07af-4301-96ee-bafb0284716f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800318dc-3d05-4358-8c00-e02274ccc672", "sighting_of_ref": "indicator--aca4919e-07af-4301-96ee-bafb0284716f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3b4e77-da1f-4de4-b2d0-7a5c7ed5945c", "sighting_of_ref": "indicator--4864287c-3fd7-4d13-b876-a3b98dae9719", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ae9bd2-2286-4092-a89d-42932a1da5fd", "sighting_of_ref": "indicator--c627818d-16bf-416b-93ff-b1340fccbb30", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c29ff6-9984-442f-b568-767ff0c09a01", "sighting_of_ref": "indicator--6983a6fa-7485-40d8-af17-4e2f05b313b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e92390-9900-4847-bde0-134262bc865a", "sighting_of_ref": "indicator--42e71104-09a3-48fd-b314-513ac8f84b64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738265ab-c4eb-459a-9b28-b01b1264ac30", "sighting_of_ref": "indicator--42e71104-09a3-48fd-b314-513ac8f84b64", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e91a9f-e4ee-48d5-8242-649f696b4e4f", "sighting_of_ref": "indicator--28bc5cb0-7517-4050-94a8-be2cbee3eeb8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775c082d-afd9-4801-8136-428f6fcb3bb4", "sighting_of_ref": "indicator--28bc5cb0-7517-4050-94a8-be2cbee3eeb8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15a09ec-520d-44b1-909c-157639aa92b4", "sighting_of_ref": "indicator--0969e1c1-70cb-4928-96f6-eb459e598d9a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e47dd2-28bb-442c-b3a2-5c987df48ea2", "sighting_of_ref": "indicator--0969e1c1-70cb-4928-96f6-eb459e598d9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556adad8-d26f-4b62-89f4-07ccebb4876c", "sighting_of_ref": "indicator--c874b61e-781a-436e-88ca-b0160e396e4a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afe9703-f4ca-4ecd-abd7-852911ee3a63", "sighting_of_ref": "indicator--979cb6a7-fbc7-4b2c-a6c0-e9d997c482d4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb02527-29bf-4a7e-8e07-8dcecf04933f", "sighting_of_ref": "indicator--bcbbf561-37bc-49b9-8061-bf04167d738e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce1cfe7-10ca-43bb-aa13-79b4138af294", "sighting_of_ref": "indicator--3eb1475d-9620-4e66-bdf3-b113b72d3661", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d10c91-6595-4fd4-894a-f1d648bb57c2", "sighting_of_ref": "indicator--3eb1475d-9620-4e66-bdf3-b113b72d3661", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5338662-6928-4b7f-89ea-f35cbe5706b5", "sighting_of_ref": "indicator--c82e076e-2db2-413b-a599-45410e5f3003", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9b09bc-ee4a-4d78-b2fc-a8a927040114", "sighting_of_ref": "indicator--c82e076e-2db2-413b-a599-45410e5f3003", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d0944c-686f-4908-bb75-5fc8390ef735", "sighting_of_ref": "indicator--7e8efde4-0798-49d1-8071-242dbd32bc7f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36e347b-8e0a-4aab-8367-e37db5cf24c9", "sighting_of_ref": "indicator--aec2c061-310d-4eb9-9d1c-abc2e6b5c7ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59aee62a-39c0-497a-844b-ab1e24267f12", "sighting_of_ref": "indicator--aec2c061-310d-4eb9-9d1c-abc2e6b5c7ec", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19bbeae-e36c-410b-ad05-211e53bb6e48", "sighting_of_ref": "indicator--7146394d-d678-4d5d-8879-3aae5f4d5039", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ba6c74-d485-4e4b-95c1-10319a556171", "sighting_of_ref": "indicator--c5f0cf46-d3af-4264-93c0-bd6ea7853fef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04896390-0f0b-4531-8e57-4eb5dd49d628", "sighting_of_ref": "indicator--c5f0cf46-d3af-4264-93c0-bd6ea7853fef", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630cc02f-1a88-42ea-bf75-40a82e1a1b44", "sighting_of_ref": "indicator--88658fcb-5a0e-49f1-9486-d62cb377ceb5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a1b886-a803-4be4-a0b4-5cae54429596", "sighting_of_ref": "indicator--731acc15-66b3-483a-bf42-16625e673eb2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977a0946-bea4-43b3-9334-95837e94421e", "sighting_of_ref": "indicator--731acc15-66b3-483a-bf42-16625e673eb2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8650d2af-51b8-4c05-ad57-9f0fc265a99a", "sighting_of_ref": "indicator--2e156e3c-e5a2-4600-90ae-31dd1684e47f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899e49eb-5756-46f6-9207-7847ee7508c2", "sighting_of_ref": "indicator--743a1e76-6f21-41a8-bf62-7ec5162e68db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f3fa33-d16a-4bfe-ad4f-4b9d6d697246", "sighting_of_ref": "indicator--9fcc3a1b-c8a7-4f5e-9824-a62402707811", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7335960-e705-49fc-8972-d0fb275c24f5", "sighting_of_ref": "indicator--5d004504-7e6f-4663-9e89-f1e8103d4690", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5c3684-28d2-48f7-950d-2ceaf42c4f66", "sighting_of_ref": "indicator--368b9757-6be0-4f11-8246-932ba8f8b170", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e15aeee-a933-4dfd-a0d6-1179b3dfb0de", "sighting_of_ref": "indicator--368b9757-6be0-4f11-8246-932ba8f8b170", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211bf208-9745-410c-a237-1f94447db930", "sighting_of_ref": "indicator--2f66076e-d938-4dd7-b710-9af6de65d90f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad7ece3-f810-4bd4-877e-b01292120050", "sighting_of_ref": "indicator--2f66076e-d938-4dd7-b710-9af6de65d90f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7117c815-26ae-46cf-a5f7-db83a6b4dc40", "sighting_of_ref": "indicator--8cff7a33-a565-4210-9b03-c96980388ead", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ba7c62-7935-482b-ba08-525363546b87", "sighting_of_ref": "indicator--8cff7a33-a565-4210-9b03-c96980388ead", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7c84d1-853f-4ea9-aa07-fc847eae03cb", "sighting_of_ref": "indicator--4c46debc-e868-4b5e-8513-91bed26df631", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598ebb42-cbef-4187-a4d2-8d150ab6a0d6", "sighting_of_ref": "indicator--4c46debc-e868-4b5e-8513-91bed26df631", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88f6394-3d4e-4e58-bc1d-902f0d73e27c", "sighting_of_ref": "indicator--790f95ae-bd52-4c7a-852c-60c3007ad767", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7dc213-b5de-4608-8dc8-c027a179d2e3", "sighting_of_ref": "indicator--790f95ae-bd52-4c7a-852c-60c3007ad767", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68671e23-5576-4816-95bb-6966c3f3746a", "sighting_of_ref": "indicator--3e657081-366d-44eb-9a1f-c206e451612d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1328d18-0986-456d-b683-6ab3def436eb", "sighting_of_ref": "indicator--3e657081-366d-44eb-9a1f-c206e451612d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2eb454f-931f-4a5b-afaf-323e80f175d3", "sighting_of_ref": "indicator--e4e2355a-1dd0-4635-9218-905e8cb59ed6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2303cdc2-9300-437f-8a18-c1e55569ea12", "sighting_of_ref": "indicator--95c4d94d-bad1-4789-930c-18bdeadcf90b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18437290-d979-40f2-a379-673dbbc86e7d", "sighting_of_ref": "indicator--128fc797-8973-4d29-901e-90ed7c145880", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7035a5a3-98a1-449d-bef5-ea9215aa2d56", "sighting_of_ref": "indicator--18863f67-50d0-4666-980e-632cb14a48ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0aab72-d14b-4c9d-965a-974856b36533", "sighting_of_ref": "indicator--dd52b1b7-f03b-44fb-bb44-661f4e4bd227", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c04840-0d09-4772-bd39-67806b5e5e41", "sighting_of_ref": "indicator--90532c16-a75e-435b-916e-780d12659800", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095c3886-5a2f-4175-854e-6b3ffe8305c6", "sighting_of_ref": "indicator--b7250e92-6b47-4d16-a29e-1bba138ad763", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcb8482-519c-4c38-87a8-8a4fb9c76dcb", "sighting_of_ref": "indicator--9f823a32-ae83-48ba-88f8-8c41bc786c3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875eb789-8f31-4e5c-9aa6-94d9e9966846", "sighting_of_ref": "indicator--17be27c4-015e-45ce-b8a6-93fef8fdf1f2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742cf09f-78b9-4fc4-b5dd-57895d866a95", "sighting_of_ref": "indicator--dc2d4ee3-46f1-41a2-8a7c-0d7c7532a340", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881bd23f-b04a-4e45-944f-e589e01fe5e3", "sighting_of_ref": "indicator--870a57a1-028a-44c7-9bbf-51d717c2e68b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afa16ba-cb0d-4f2f-b38e-6e25eaa4fb68", "sighting_of_ref": "indicator--8c8979b5-bc33-4b1e-a6a7-2a7b75c99827", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498ff087-f0e5-443e-97b2-53413ddb7b77", "sighting_of_ref": "indicator--b724df49-7d74-4f1f-a807-a50f2229facc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49895643-f004-46b0-9957-f0b31df7f7b4", "sighting_of_ref": "indicator--c78c0667-8b80-4bf8-9c6b-30ea3e59face", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42401c2-af1d-4467-8014-8a4f43435393", "sighting_of_ref": "indicator--b284828c-764f-4134-95c5-7896d9975f0c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2435d2-7dc2-416c-879c-49879bc5656a", "sighting_of_ref": "indicator--e24d2873-d6ec-4356-8577-c53c0acce389", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2013dad-c7c4-46c7-9e40-bad0552e8dc7", "sighting_of_ref": "indicator--32791ca2-8081-42ef-95da-5e81816b9c95", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1701427a-2c48-45f8-b835-17340665eba6", "sighting_of_ref": "indicator--8b7cbe06-1ab6-4e35-ba92-80381986493d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fd2dd5-67e3-49f1-b426-0392c7bb9f10", "sighting_of_ref": "indicator--7e374fe1-065d-4f93-b8b3-3bde3cb9635f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--347b8755-9510-4053-befc-994b3fe552a6", "sighting_of_ref": "indicator--d57d6a89-5c3c-4f32-a67c-2ec67adbf63d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd00dde4-1acd-4b2b-a50c-b98cca37e870", "sighting_of_ref": "indicator--5ae672c9-6996-4356-8ae7-f6f06da9d34e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dad0366-5f42-47a9-bb89-5951ae8f8959", "sighting_of_ref": "indicator--8ff22a89-6265-418b-abf5-0602d3c12816", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81889ae0-072b-4beb-aa94-f207c5500356", "sighting_of_ref": "indicator--e5c68024-1e4e-4a3f-a47d-3d593554cd6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9b7e71-0f4e-47e6-834a-0257e690425a", "sighting_of_ref": "indicator--6de6222e-68ff-4793-b781-5493d3fc7586", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a427525-cf5b-4243-999f-62a7c3c79fae", "sighting_of_ref": "indicator--6de6222e-68ff-4793-b781-5493d3fc7586", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a27ac00-667d-493f-9df7-48ea5f1360ff", "sighting_of_ref": "indicator--0f32f3bc-e56c-49ad-bdaa-fb50ffd3fab3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd84c5e9-f6b5-4849-9ae8-07dd9b07e96e", "sighting_of_ref": "indicator--062926fb-59ac-4ea3-a81a-efb531eccd8d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c385e2-3c51-432d-8c92-b99fbaf38d1a", "sighting_of_ref": "indicator--404a2d67-0c79-4d7b-ade4-5ca125be3b11", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b75b9d-769e-4419-afbc-d7090226a5d2", "sighting_of_ref": "indicator--2a412351-f116-49c8-b30e-d954c6d8c707", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40237523-3a47-46fe-b53b-6539897592f1", "sighting_of_ref": "indicator--e007c52d-7a9e-4860-a4dd-0ac2548d4a43", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c6b5df-1125-4aeb-9884-7114e019bafe", "sighting_of_ref": "indicator--292dbc2f-010f-4430-84b8-2ebdcd6d9459", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e5eacf-f196-4a05-bc04-cc34c2ffec22", "sighting_of_ref": "indicator--f8439d5c-040f-477c-ad3e-78fcb0fdc290", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313a2c7d-5b41-463a-a194-9bf14ba9325c", "sighting_of_ref": "indicator--e21f3315-d4bb-487d-820a-c09de666d5cd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ebffba-95b4-473e-904a-6ae125d9df75", "sighting_of_ref": "indicator--cb79ff9d-4441-4daf-8f33-b52d1336838f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10cafa4d-7b99-4be5-b29a-2549da915a8a", "sighting_of_ref": "indicator--13b61e8d-5e10-4ca8-be4c-eed19d854db2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c2d0af-224b-43b3-884b-7a0081a36d1a", "sighting_of_ref": "indicator--5df87174-480c-43a5-8d9f-f5a8e227242e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95a2f79-e552-444c-b1ea-67cd42e17ec5", "sighting_of_ref": "indicator--9eb570f2-5944-4831-803e-6ba59360019c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef380e1-c16b-4bf7-be07-2bc9adb8e5c9", "sighting_of_ref": "indicator--0a12fbeb-c3d5-47eb-afcb-60d22e3506c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c081a38-6a54-480e-8b23-3590be2ba682", "sighting_of_ref": "indicator--98660ddb-a386-4595-8495-ac99407aef6a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f18e75-fb66-4280-870e-8bb5d3ee9ab4", "sighting_of_ref": "indicator--7a0d9172-b7c1-4fbb-a910-c6c0f2c2f71d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9801ae-98d9-49f3-8379-65449472444f", "sighting_of_ref": "indicator--3d094d9d-a083-435a-80ef-16d51a488190", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba10070-f6ef-4290-9634-8f373c948c49", "sighting_of_ref": "indicator--a937de36-f648-43cd-9682-17593dd834d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51892e97-d863-4332-a47e-19424816cfcc", "sighting_of_ref": "indicator--853d743a-86bf-4e68-b634-b0420e1a2a88", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce0b12e-050e-4d9f-9fe1-603590b9c1a3", "sighting_of_ref": "indicator--3bb8a33d-3512-47ce-80ac-f66a9e3314e2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b767ea2-b6a1-4530-a8f2-2a952c7bfc3b", "sighting_of_ref": "indicator--f49071b7-f101-4faa-b420-ebcd9795a7b2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--520ab6bc-c436-4d4a-ada6-304ea1bc29c3", "sighting_of_ref": "indicator--74879345-09ab-4960-b124-3402a61c977a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfffefcc-89eb-4304-8eaa-32801a8af2ed", "sighting_of_ref": "indicator--16808358-fe2e-4c83-83ce-a438acd5704b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2266dee-6f9a-4a44-b311-81a0315f136e", "sighting_of_ref": "indicator--8c2c5cc0-f098-4db2-b4dd-680028ba012d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f7b4af-e3e5-4fe4-92af-522bb5806107", "sighting_of_ref": "indicator--28e359dd-3369-42f9-9f84-8a619bce8579", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742a147a-8142-4ce2-a69f-43c683bfed7e", "sighting_of_ref": "indicator--75432cbd-2fbd-4422-978c-625efda45990", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf7be78-3132-4db2-adc0-3c7552b183ff", "sighting_of_ref": "indicator--1599653d-a91c-4149-b4ac-f1ab24abb241", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadcf1a2-b98f-4c9d-bdef-81e525bbf52b", "sighting_of_ref": "indicator--7aabacb5-56bb-4290-99f1-308ff32b5a58", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37081743-7065-4066-8290-0b5692e2929c", "sighting_of_ref": "indicator--161b4d48-12bf-4b7f-8897-edb654cbd6d7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c9539c-23fa-4756-a4d0-88aecdc28f93", "sighting_of_ref": "indicator--17d2b45d-9e31-4763-9920-c77f912bd60a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a5be6c-89cf-4e78-8a68-a3a5819e4002", "sighting_of_ref": "indicator--4b9de853-7ee7-4f13-a1aa-149f2fc67067", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad38199-056a-4113-8dd0-7c3f65bd3001", "sighting_of_ref": "indicator--c3350438-7930-4cc6-8b39-29a906439d57", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9d8dbd-1230-494b-a80a-4460cf10171c", "sighting_of_ref": "indicator--3326ceef-64bf-41f7-857f-635423d5de73", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f213f4ab-ef6e-4c5d-a714-f6473f6654cb", "sighting_of_ref": "indicator--7b20de6b-c7f9-44f5-99de-c7d13712eba0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac61a46-bf3a-4932-8e4c-9ec8528eb76f", "sighting_of_ref": "indicator--079067bc-0f95-4beb-aa12-0ac095cdb393", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73a8af4-24b6-4bf8-a4d8-f3427fc7d834", "sighting_of_ref": "indicator--f53bfe5b-98d1-49fe-8bb7-f79e28c41e94", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a35c74-8f8a-4c69-b4b4-b01e8184f2e3", "sighting_of_ref": "indicator--e654a4ca-4f4c-43a1-93e3-f34abdbc54fa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1063d262-6a7f-4f78-9757-56db7beee926", "sighting_of_ref": "indicator--3721490c-b196-447b-8f09-ccef2467e77d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3144aa91-0784-47f9-a444-28634ad568ae", "sighting_of_ref": "indicator--dcb81c4c-d265-4000-bbbc-f2c54b35f9bb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2257f74a-4289-4bc5-8c8d-9649ac144567", "sighting_of_ref": "indicator--382e884a-93fe-453f-9b3c-cec775f8a9bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf7a883-5a24-46a9-b8cf-41adbbcd080d", "sighting_of_ref": "indicator--fed554f9-6ddb-4bf1-b91e-01a5b49e77d2", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde24120-4c69-4f62-a476-e736834d99ad", "sighting_of_ref": "indicator--bf08e82f-845a-49d5-bc19-21d8423f1746", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a76e930-2112-466f-b0af-b962c3ff3b6c", "sighting_of_ref": "indicator--c0e1401e-34cc-46cd-9895-a5db24a4ede1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c50e965-5a24-4336-80ad-abb9c9030efc", "sighting_of_ref": "indicator--622ac3c6-0be3-48ba-99fd-682b999f3c26", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2471a336-0936-44f6-83f3-4a9b80a7accb", "sighting_of_ref": "indicator--91193d4d-7894-40dd-afd2-7e16f3719b8d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8543a4-7dd2-4857-ab9f-13db1b4d5e5a", "sighting_of_ref": "indicator--495be2ad-a4e4-4fde-89c4-de41cae1e0a9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5da09b-3caf-455a-ad34-2b03a0df4221", "sighting_of_ref": "indicator--da47f49d-9679-4417-a8b4-edc4c0cc8cdd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8091cc8e-618a-45d0-9e2e-1c8a4f283e28", "sighting_of_ref": "indicator--65ff67a3-7024-4753-bb78-ef625988be87", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627fd687-d975-4752-b25e-e6291b0302c0", "sighting_of_ref": "indicator--c489b4f5-8acb-464c-9733-9666937a5fcd", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afcf55fb-ed4a-48e5-8d95-1ba35d750626", "sighting_of_ref": "indicator--d3d81321-28a0-40f3-b52c-59595230a38f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61295c55-8c65-46fe-8c75-1d2ea2bf1f63", "sighting_of_ref": "indicator--bbd17ff0-24f3-4967-93b1-6e5f210e650d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6616c46-c522-4bf6-84a9-19d7dea357cc", "sighting_of_ref": "indicator--e864e33a-614a-423f-8484-776f0503368b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9384c74-0de5-4799-bb21-54ae63b48109", "sighting_of_ref": "indicator--031d7939-995a-465e-888d-2d567a21519f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81059e2-c26d-4a12-b6f2-e6bdf4c68ba3", "sighting_of_ref": "indicator--3111000f-aebb-4c5e-b65c-f8f99f0eaf83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39b1303-a9db-4af0-8eee-d4473723d3ce", "sighting_of_ref": "indicator--24523de0-e506-44d2-9afd-5605f89361d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3632bb-7b23-4cfb-8a23-b21d4fe675cb", "sighting_of_ref": "indicator--6b3550a9-93e2-477b-8a58-9959b8d350e4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87bd1bb-9d18-4c9f-bb1c-b7fa397d0876", "sighting_of_ref": "indicator--0e5d780a-c16a-439c-ad22-b160dfd78079", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf116e1-9a2d-4850-8699-14599a5f292b", "sighting_of_ref": "indicator--2c9e3e6a-3fee-4ca6-aa6d-8861b20f14e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badbf2e1-85b2-4d75-a8ea-eb886765bca6", "sighting_of_ref": "indicator--2c9e3e6a-3fee-4ca6-aa6d-8861b20f14e3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cb5d24-df14-4b57-839c-af455cac766f", "sighting_of_ref": "indicator--2669f950-8926-426c-a973-917e2fc8bc20", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3157afc2-f3f5-4526-8f0a-f54993add62d", "sighting_of_ref": "indicator--ad2e8fdb-de15-4f43-98f0-de5c4e73212f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9565e0-7942-4e1a-b41b-5eded7a603b1", "sighting_of_ref": "indicator--ad2e8fdb-de15-4f43-98f0-de5c4e73212f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c059f9d2-8cc6-4fe1-9e8e-5839575ddaea", "sighting_of_ref": "indicator--51dc1007-1f4c-40b2-b27d-f41053621b10", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c101d7f1-be62-467b-b467-979be0e94dfb", "sighting_of_ref": "indicator--51dc1007-1f4c-40b2-b27d-f41053621b10", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3a8da7-3221-44e5-96e7-0ca4964eed06", "sighting_of_ref": "indicator--cf50320b-3b83-4b49-8142-b1f35f9ce360", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384fd4ba-e30f-4749-8201-aac775d238ca", "sighting_of_ref": "indicator--829df83f-47c9-4488-8faa-321057e7ecd3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc262963-705b-47b3-b39b-d16c59385daf", "sighting_of_ref": "indicator--829df83f-47c9-4488-8faa-321057e7ecd3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394a29d0-8463-429e-a333-5224d388d046", "sighting_of_ref": "indicator--a014e734-b93d-4c3c-8e26-cdf57c7cec67", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43dfdf58-7b88-4b0c-b8b7-b9890f05c8e0", "sighting_of_ref": "indicator--0d134a3d-75b4-4fd2-be14-105dc31fed58", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe5224f-740e-4063-9b2c-c01f74a4f52e", "sighting_of_ref": "indicator--0d134a3d-75b4-4fd2-be14-105dc31fed58", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f257c473-bc57-45a7-af98-ba56130e6ce0", "sighting_of_ref": "indicator--d2ba5954-2624-4350-b262-4ceda48b607a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cd8434-4a4b-4519-9cfd-ff016bb14574", "sighting_of_ref": "indicator--d2ba5954-2624-4350-b262-4ceda48b607a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e418c11-8d65-4a61-8a17-d01bf92c8e48", "sighting_of_ref": "indicator--54aff6f4-aa8b-436e-b2e1-c2d0373b1462", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bc566d-cfe6-4104-91ae-11e16f7e64dc", "sighting_of_ref": "indicator--22086675-f718-40d0-87f5-aea7187588c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f751e7ef-acbf-4b10-9ac6-b6e9f2d7935b", "sighting_of_ref": "indicator--fa389913-0ec2-4dc1-8267-18f359ce804b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7f720d-1020-48c7-827e-a451adaad304", "sighting_of_ref": "indicator--fa389913-0ec2-4dc1-8267-18f359ce804b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8990424d-cd0d-4d47-91c8-b84d7cc4fc1e", "sighting_of_ref": "indicator--649fc9be-2f14-4cb3-8ffe-390aa0bfd696", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835760b4-ffbd-4357-ac3d-4091c33799f8", "sighting_of_ref": "indicator--d6997b34-c358-4b42-b55a-d48c2761edb2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f166ca05-136d-418b-bdb9-09d919bf0cd3", "sighting_of_ref": "indicator--04e5a4fd-8d48-47d5-acc3-426f126dbfe2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48899f4d-fbae-483c-9dfa-298d8be2d208", "sighting_of_ref": "indicator--d1492f32-8a74-41b4-b2c2-f144998ed574", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e998140a-0060-45d8-bc53-70454ebe6511", "sighting_of_ref": "indicator--40f7056e-496f-4573-875e-9d120a3b79b0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e4c3f5-ea28-449b-899b-fd4b6a00e194", "sighting_of_ref": "indicator--ac99fada-8fd4-4cac-9abf-1af71f918006", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3a394f-85f0-4227-9eca-a15079f672e8", "sighting_of_ref": "indicator--f7408f7b-ac2a-4e1b-a572-b58824c14478", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e6ac6d-3f8f-4a70-9613-82be30773584", "sighting_of_ref": "indicator--c50188bb-f8fe-49fe-8d10-2fac1db88e54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e293f609-4df8-4c04-91e3-f649bc8575b6", "sighting_of_ref": "indicator--a83cbde8-8d6f-4450-93b1-7213854db979", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786f4be3-2627-41b1-b03a-95a21c7b7a56", "sighting_of_ref": "indicator--b5bb0ae5-1989-4e3b-a806-01826bfc5cdd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb07f6b-99b3-423f-91ac-79bc39e18075", "sighting_of_ref": "indicator--b5bb0ae5-1989-4e3b-a806-01826bfc5cdd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c80190-bed2-4c98-8626-52e3fc41cdbc", "sighting_of_ref": "indicator--76440a51-b10d-4cd1-967f-829a478ccea4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc44f48-5530-442b-a795-9e0c4d5aa4df", "sighting_of_ref": "indicator--76440a51-b10d-4cd1-967f-829a478ccea4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634a4da1-f6be-4268-ab0d-826fcf9e3c01", "sighting_of_ref": "indicator--aaf4a5aa-a5f7-4293-8909-0abd54305f57", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82fe847-13c1-47fe-b452-9091cacb3af0", "sighting_of_ref": "indicator--950f9695-aabc-4daa-9674-d7691ba72143", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b479dbb-02b8-4d99-98ad-06f79722148c", "sighting_of_ref": "indicator--5e31e784-ef08-4ee2-a67c-505227b2508e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebcabead-2f3d-4d36-a4bb-be465377e438", "sighting_of_ref": "indicator--8ce864b7-69fc-4617-b456-87a00e0ab5bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be61e64-dd2a-4ee4-8bd6-5d98e7179cd0", "sighting_of_ref": "indicator--3abac014-422b-46d8-83ca-8f54e8654f71", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64878eb1-b493-47f2-b12f-dc9007eaad88", "sighting_of_ref": "indicator--a174c07c-f87b-43b6-844b-ec79db4e155c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5a5aff-3c3a-4de7-811a-6fb4f3862d9d", "sighting_of_ref": "indicator--a1750912-81a5-4de9-a0e7-98975f002b1d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf20838-a123-493b-a3e9-dd6dce47862b", "sighting_of_ref": "indicator--6e084cb6-05eb-43e2-9871-727d5394ecd3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404d4a11-07e2-447d-80ed-4d526d06c911", "sighting_of_ref": "indicator--adbddbb5-7cb5-4a2f-8add-136102e72d0b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f354ff-f5da-4bcc-b600-2c75ec3852ba", "sighting_of_ref": "indicator--33402f52-5d29-4be1-9cf2-d8b8a314f002", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9023f0-2b59-4019-97d7-9d57b13fc0f7", "sighting_of_ref": "indicator--d93ff6c6-a0b2-4c36-9ce9-535aab72776b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308aae10-cc42-4a4b-9c9c-86ee6a6a99ee", "sighting_of_ref": "indicator--ce185e07-c0df-491f-b0f0-e49cfce4c95d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df38692b-1a93-474d-990f-54a0688f93f4", "sighting_of_ref": "indicator--e7cca139-9811-492a-ada5-329c557c9c1d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5beb4cbc-de6b-4f05-bc6e-e7d3df16f695", "sighting_of_ref": "indicator--27ec4fee-0a9c-43da-8b62-3d975c50585d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f688b705-424f-49b3-b52f-ef34b7e3a3ce", "sighting_of_ref": "indicator--27ec4fee-0a9c-43da-8b62-3d975c50585d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88947b15-6a6c-45c4-8cb6-5e4c73dae865", "sighting_of_ref": "indicator--0a7386fa-6918-4505-90d5-d3ac489b7d0b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fac6db-0abd-4489-a42c-394fe6d15b01", "sighting_of_ref": "indicator--251f770b-19d4-4eb7-a43e-39275b1b5706", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4facae-8fae-4b10-81c7-ec2f83f26781", "sighting_of_ref": "indicator--251f770b-19d4-4eb7-a43e-39275b1b5706", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa5086e-65bd-4b8f-9452-b750e57db51e", "sighting_of_ref": "indicator--fc324e19-1a1d-4f71-99c0-81f14d979898", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e9c789-f2c2-43a9-b181-9cd035d4adfb", "sighting_of_ref": "indicator--d2324b15-66b2-4945-8dea-f5b6b4826275", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49926fcf-a9a5-4eb7-b3c3-14e0d61cb77d", "sighting_of_ref": "indicator--6b6b1b98-0dbc-4f41-91d8-e8adfbb3adb2", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cb95a4-295e-4680-9bf8-c1226c3e236d", "sighting_of_ref": "indicator--dddbaf81-967e-4893-98fc-ff738c6ea154", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0a9926-fbe1-427f-b22c-655e4dd368a3", "sighting_of_ref": "indicator--a5888b05-c855-4b82-838b-c419d49a1004", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887e2f66-0ab8-42ae-b1a9-ec1b87905cda", "sighting_of_ref": "indicator--5f472814-f8d4-4c3e-988e-b3359aa4de83", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efb4996-a506-4c04-9895-70b2756abf48", "sighting_of_ref": "indicator--54aa3381-9a11-4075-be84-5df77fc686b5", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b560359-07ba-4855-be29-99c4cbcc9fbc", "sighting_of_ref": "indicator--4a2b9815-b127-4532-8bca-3274fdb56b38", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452c7098-8de4-4e07-b340-4e58b36a904b", "sighting_of_ref": "indicator--465b4382-d35a-40ce-b456-21af03bbc0f7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a086e9-38fc-4798-9fa2-57679be772cb", "sighting_of_ref": "indicator--4b7ad4ee-cd34-44a5-871e-df1b0fdba7f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--469a0b1f-a64c-4939-b131-9a1e7268058d", "sighting_of_ref": "indicator--80b079f7-bacc-4e6e-a14e-73064fda1da0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb4bbf1-a7e8-4eb8-9e9b-a66a3b8ebdaf", "sighting_of_ref": "indicator--5494d280-3d10-4fb5-bec1-781b86c6e1b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205ee68d-aa83-4e21-8afd-ed0433408cc1", "sighting_of_ref": "indicator--b817b594-f3c6-43bf-a89d-6c7f19f7c3e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a27dbb-ff04-434a-a609-e43611518037", "sighting_of_ref": "indicator--6736781a-bc22-407b-9e4e-8fc45b1d4a39", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a4462b-3c11-4971-9f12-c3ba31597b9d", "sighting_of_ref": "indicator--703fd198-47a2-42d3-86e4-dbd484c4fb0c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd9f88a-03f7-4751-b7a1-5ffb8a37b565", "sighting_of_ref": "indicator--dea23e87-398e-4a30-a694-86d56cbcbb5f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9acbc45-54d2-4c66-8eeb-87699f47a768", "sighting_of_ref": "indicator--31015190-21c4-459b-940c-8ee7f36d4c05", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2b3c12-eb8a-4f9b-9607-bd839383d1b4", "sighting_of_ref": "indicator--31015190-21c4-459b-940c-8ee7f36d4c05", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd95aa5-aa1d-4d1e-aed5-16e461f1a42b", "sighting_of_ref": "indicator--28787961-b817-4613-a152-b0d0479b1032", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b68a3f9-5b35-4460-bb9e-b24580fb35ea", "sighting_of_ref": "indicator--28787961-b817-4613-a152-b0d0479b1032", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23e77e7-1e02-4cfa-bf14-c6336dbc41d0", "sighting_of_ref": "indicator--af79acc0-831a-4b03-b8ac-f2133dc11df3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2735ac87-6dc6-420a-8da6-87f8beadea91", "sighting_of_ref": "indicator--af79acc0-831a-4b03-b8ac-f2133dc11df3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99d7733-8552-410e-ad9b-d95204f362b3", "sighting_of_ref": "indicator--258b5463-8355-4a2c-a72c-d968d21415a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba56a2d4-805b-4dcc-95dc-ea47b187cfe6", "sighting_of_ref": "indicator--258b5463-8355-4a2c-a72c-d968d21415a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ede437-c783-4b64-b4a3-1fe5b0cde002", "sighting_of_ref": "indicator--3ad00c36-92c5-4c1c-9088-60d23ce967a2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f792dda-f813-4d43-ad79-96b7678fcd49", "sighting_of_ref": "indicator--607e2dc9-2f4b-49b0-9242-af937b8e6f62", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a655ac10-401b-4792-b846-8d923560bf94", "sighting_of_ref": "indicator--af015634-1550-46ac-91ee-a5fa5d7d973b", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73312df0-a43b-4913-bba9-f0fe842d317d", "sighting_of_ref": "indicator--af015634-1550-46ac-91ee-a5fa5d7d973b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c081e6-b1eb-41d8-85ae-f33c626b4579", "sighting_of_ref": "indicator--af015634-1550-46ac-91ee-a5fa5d7d973b", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313b28b2-cfe6-4612-9f5f-e5db9e41bbfb", "sighting_of_ref": "indicator--944d05cd-ab24-4fc8-bbd6-01c8c6a90b39", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5679eef-3fd7-4f40-a066-eb1d0800ac78", "sighting_of_ref": "indicator--0a5950b1-a20e-4708-ac28-4841036d8ef6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0705e0b5-2423-4e0c-b5b2-d17ef36399db", "sighting_of_ref": "indicator--9afb39f2-cd58-468e-83a6-960ba3a1d809", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732702dd-9b5f-4459-aa37-484bd1f1d673", "sighting_of_ref": "indicator--a0197eeb-98e5-41ab-a5b9-db12dfb1b9dc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75dd8d4-e642-4a24-8a39-e06dedee30cc", "sighting_of_ref": "indicator--a8472cd5-e3e2-42b2-ace2-06cd94a74e54", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8570f9a-1d2e-49e4-b83d-9474d103778a", "sighting_of_ref": "indicator--308a0eab-2bdc-43a7-9970-a70e45f483de", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0eae7a-ea1a-4acc-a0d7-72475d71812c", "sighting_of_ref": "indicator--bcbf2deb-dfad-400e-abad-fb9943e4bc3c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b441956e-ff64-41ee-a24f-c0d396a03a37", "sighting_of_ref": "indicator--5cc672fc-5dc7-49b3-a8ce-cc1b9f5321ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eec9aaa-f8ec-4f18-8a49-7cdb0e16aee2", "sighting_of_ref": "indicator--da06d670-5a09-436c-a481-b036d03eb364", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19073395-e5eb-451b-990c-d8dc34812d8d", "sighting_of_ref": "indicator--c4b72d42-3df8-4c19-97e2-12caf8e2a902", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006704c6-8d12-4a95-b35a-77c11a9c2c29", "sighting_of_ref": "indicator--38afc6a3-973e-4b62-b880-e31a6ef7bdcf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1624d8-1575-4bff-be08-9a1440315ccb", "sighting_of_ref": "indicator--a867a012-e353-480a-bb30-7e84c84195c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24a20cd-f2a5-4128-86f5-c8c466099952", "sighting_of_ref": "indicator--37bd7a44-49d5-4579-a314-a5d553aabdee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62996e7d-27fe-4975-9bcd-eff1c5b9106d", "sighting_of_ref": "indicator--3f99daea-2b15-4ac2-baf6-636f07563082", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb8b964-bd47-4596-abb8-7227f22495b5", "sighting_of_ref": "indicator--12df99c9-66fe-45cc-a84b-11def36d32ef", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4ab948-8e30-43b3-991a-43adffc2a684", "sighting_of_ref": "indicator--9307023e-4048-480b-bcf4-4d2cf126eae7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bbacad-1c36-4fd2-ad86-14656815adb7", "sighting_of_ref": "indicator--21e717ea-6b67-4302-8d6c-e8ce7829e56c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc8e9ae-bb23-4599-99b8-9391641f1a11", "sighting_of_ref": "indicator--28a048cd-9104-4e0e-850c-459784f92216", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced4c6b8-0162-4cae-9ac4-3e8a88d0fbca", "sighting_of_ref": "indicator--785eb345-c36f-4251-bfdd-4604d542ba72", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8681036-72dc-49be-93d4-4f21c689ffc6", "sighting_of_ref": "indicator--1ecaf8e1-79f5-4609-8b66-d9a09f1e900d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b00bbb1-1cc1-4b7f-ba34-e410b0421007", "sighting_of_ref": "indicator--847c2f2b-aedb-46f8-802d-018621b83f4a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a381a1cc-fa8b-44af-a959-5b1f2d103274", "sighting_of_ref": "indicator--af9e1d5e-fee1-4161-8d5d-34a7d7547cd3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909ef6cd-034c-4194-ab96-b56341e3c998", "sighting_of_ref": "indicator--be9d4ef6-7b21-4473-aa83-51e9780e1ec8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46609542-aa9a-4fbf-99a2-79674958e366", "sighting_of_ref": "indicator--350b5034-bdb7-4abf-bb00-59a824e0e47e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79561035-e5b3-4452-9370-106038111dc4", "sighting_of_ref": "indicator--239d6ebe-a1f3-4c49-b17b-2489e7795897", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21535c1d-680f-4c0e-86df-63c6741bc69c", "sighting_of_ref": "indicator--a60f7d86-bf7e-47c7-a781-e3acd311322e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1aef5aa-1606-4708-ad16-7dd7ffb467b7", "sighting_of_ref": "indicator--414bf6e5-154a-4d4f-a725-04f445e9b21b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533e756b-73ab-497e-ae3c-1ceeaa350223", "sighting_of_ref": "indicator--7952452a-0689-4a5e-a79a-367ae424d728", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1bccd1-3a59-45ed-8776-a6fdc15ccd4d", "sighting_of_ref": "indicator--a1df8dca-b80d-4d51-8c55-e485c25b294a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1288b2fb-789e-4999-af98-94035cfbc4af", "sighting_of_ref": "indicator--44627168-4633-4a08-b080-1867adad1458", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52706b08-7844-4472-95b6-2d267f9424dc", "sighting_of_ref": "indicator--791591ca-dc1b-41a7-a9b1-34155b47a364", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bb25781-3d56-4358-b810-fd5ab786be41", "sighting_of_ref": "indicator--22334fc8-429d-4a19-91be-bc497413e317", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775113b8-5144-46a8-8aca-e10cfaaee53d", "sighting_of_ref": "indicator--808ba64f-1004-4002-b764-785a9460a430", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a451cc7-2692-4bae-bcaa-e2c01a549cc7", "sighting_of_ref": "indicator--304a7d9e-8b52-4428-9be1-07fbc7d29665", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983fd7fb-255c-46db-bd74-ba26e1a5dbc9", "sighting_of_ref": "indicator--6151be8e-78a7-4d18-8b87-1cac50523202", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82151025-dbcf-4f23-825d-0f4fb8283881", "sighting_of_ref": "indicator--3718ddf9-1607-4d79-b5b1-8f2ec9cb80ff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959808b1-f87e-41de-8049-be7175847831", "sighting_of_ref": "indicator--8c03a47c-b07a-455b-a8aa-07a820d34fc6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8ff242-62a4-4d8b-8d31-d41876d628a2", "sighting_of_ref": "indicator--a79668d2-0259-42f6-9cb6-80de9dfc5bea", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca736f3-c2f3-4295-95a4-c320a4c5812e", "sighting_of_ref": "indicator--57dc813c-b1ff-4241-802d-9fd016ea833b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2edbc9e-bd6a-4c4a-97a4-6659b813b3ba", "sighting_of_ref": "indicator--eb7748c4-1514-4659-b1ef-eda20fe1d66b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5459f8c7-4638-44cf-a3ac-c6c14448e278", "sighting_of_ref": "indicator--9cd36671-2e22-47fe-8b91-5f26120fda2a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b41200c-b33e-472e-89ae-62327b4860c8", "sighting_of_ref": "indicator--8af57481-2afa-4754-b58f-a251ea6f4abf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3299e780-6427-4c19-a7ec-a7cf326c2b1d", "sighting_of_ref": "indicator--fcdfa597-419c-4753-b282-f6cf7e481290", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b4dd30-4dbd-48da-83f8-40ca72c615dc", "sighting_of_ref": "indicator--d8ecc8e6-50fc-453c-bdf0-770ce2c02920", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d16b86-2164-402c-9016-09e7b1a06981", "sighting_of_ref": "indicator--2fd59a92-c0ca-46eb-b1f2-a936c028507e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93d6ad4-73a0-4509-994b-bc9c565d91fc", "sighting_of_ref": "indicator--66887e35-8c7a-46bf-a8ad-199ef478d2eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981c04de-8319-49d3-80ea-949071653890", "sighting_of_ref": "indicator--a954dbc0-d2c1-428d-b7c3-c858485bca7b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9887b0-59ee-478c-a57a-4155eedc0c2f", "sighting_of_ref": "indicator--54bebf5e-0dd9-4ab6-a0b2-85758be022b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fe4de8-a533-4ad7-a55f-f88c56400c62", "sighting_of_ref": "indicator--7e33d140-903e-422f-b32f-18beb6a22014", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03272ed7-5e0f-4a65-a4c1-ffcf75706835", "sighting_of_ref": "indicator--8f145a66-5e91-4d7c-b336-6778a5b9e956", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f35e4d8-e188-4f4f-bc09-100938006a43", "sighting_of_ref": "indicator--b4284eed-caee-4565-a911-0414d36553dc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bbc425-d0a9-4e6b-ae0f-6f7d30e70928", "sighting_of_ref": "indicator--7fc7d3eb-e8c9-42f0-863e-b176c55c3ef7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e361049-4a8a-4fce-871b-c77b31e42db9", "sighting_of_ref": "indicator--17a1a858-17e0-4ba0-b772-06be996e468c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d67595-cdbc-4e40-86e1-12a73ea944bd", "sighting_of_ref": "indicator--4d74837b-8ce2-4a17-997c-9ee49ba09c34", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea53610e-9e8a-4150-87ba-8e37907cd380", "sighting_of_ref": "indicator--267a9f9f-f20c-4b39-84a1-50717de438c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9846b886-fe22-4258-8432-14ed1809b7c2", "sighting_of_ref": "indicator--b4f8accc-a8a8-45c1-84ee-d0c531dce99f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75f3834-d489-4522-9ec1-554572c74e75", "sighting_of_ref": "indicator--0e87264a-87ab-4d3c-a85a-d2203ae237d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2cc6c88-70b9-4c95-8efb-52759f10a1b6", "sighting_of_ref": "indicator--a29d7bca-2c30-4d5d-a4c7-b927ab6ce264", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9e1867-5eeb-48b8-9142-fba85d46e1cc", "sighting_of_ref": "indicator--be03c9db-fed6-4318-a0d0-34829f18d11d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aeb90ed-f414-4b3c-92df-68e499e21772", "sighting_of_ref": "indicator--9da92545-0801-4c57-9991-d6858c35ed0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1517694e-aeb6-4acb-8203-4a6673ef69e3", "sighting_of_ref": "indicator--b6942caa-db2d-41bd-838b-a984252e1d32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7305674-2d23-4fcf-8160-06effe56e6fb", "sighting_of_ref": "indicator--7a92c172-1de3-4377-b315-48525a44c1a0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad65c37-c291-4ef3-a117-c6f19ee715ec", "sighting_of_ref": "indicator--7a92c172-1de3-4377-b315-48525a44c1a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff2f8b36-052d-4d98-90d2-565f21867bc3", "sighting_of_ref": "indicator--089fa77c-b2fc-4551-989f-f4a4cd27aaea", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028cb939-8fea-47de-a7a3-2fdfa188f992", "sighting_of_ref": "indicator--ce886efe-5798-4a6f-8c3f-3e4525aa8df8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec58ef5-ebc5-4663-9593-48fc330e35d2", "sighting_of_ref": "indicator--d6c2de4a-0d5f-4f22-ac1b-b9919cb904b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647d631c-7838-4c2f-93b2-1881bbdfc99e", "sighting_of_ref": "indicator--1f520fd8-48f6-4d43-a894-1e194f6e7250", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b164dad9-026f-4819-ad56-b213b7f9c067", "sighting_of_ref": "indicator--313068f1-5847-462b-a3d9-e108991a5174", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fe27bf-e94e-42da-9d19-cc5b7c98e93d", "sighting_of_ref": "indicator--7a33656b-c8e1-41c9-9dc3-c8b3eb17461f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0928cb62-0204-4cb5-8399-c62afbf8a6ec", "sighting_of_ref": "indicator--ecd69fc0-718e-4e81-a0ff-dffbecc3c2f5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd800979-2ce8-4101-8aad-6e5caefa7566", "sighting_of_ref": "indicator--11cb9302-a9b0-4bed-b992-a1c62ddc49ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfa1e76-b2e5-46a5-b514-4814af9784af", "sighting_of_ref": "indicator--3dc781a0-202d-441d-97a0-2596ddb9680e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c154e2e-ef8f-4ead-a14e-8036ac8a04c1", "sighting_of_ref": "indicator--ce82211c-4ff3-43c1-ba02-fc137d66bf95", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773582a9-91b9-4a38-a65f-103b033dcd2a", "sighting_of_ref": "indicator--ce82211c-4ff3-43c1-ba02-fc137d66bf95", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f1cc241-c74e-43df-b437-78c03969266d", "sighting_of_ref": "indicator--88bf241c-0657-4845-a3a8-cf07693d14e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f863cbf-ce8d-4200-b879-f1bfe8d1f86b", "sighting_of_ref": "indicator--ddcbdb7e-d1df-4042-a834-984bdb9428c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860ef6a7-0c35-47ea-a9e4-2de43b04e6bc", "sighting_of_ref": "indicator--e4116ecf-4720-40f3-b86f-e9308e698c21", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74db10cb-9602-4283-b42f-cdf799683c01", "sighting_of_ref": "indicator--4c01e0a3-22d2-4c50-9709-a5f17f0b6f71", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bee37b6-a026-41b6-aec3-d2ffa03b55e5", "sighting_of_ref": "indicator--c2a3edec-696c-4da0-aeab-3336586f19ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f7a2f1-e435-4c3b-b4f5-4aaf1f61cf84", "sighting_of_ref": "indicator--b434026a-599c-4d3f-8ca9-6bf5d1176492", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd037dc-9230-45ad-a0ec-0853fb4f9b88", "sighting_of_ref": "indicator--094fec8b-b4fd-4678-a44e-79659e839076", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9597a789-5376-4995-9308-9785963210a0", "sighting_of_ref": "indicator--a478c299-2335-4b79-9a2b-e6156dff974a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c9235a-d15c-4f29-aaf0-bae543760111", "sighting_of_ref": "indicator--a478c299-2335-4b79-9a2b-e6156dff974a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e3a979-877e-49c6-ae42-8a54e4945581", "sighting_of_ref": "indicator--119cae75-219b-46a6-b8ee-682e08b1af24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d2df79-7a9b-45bc-882a-7f11f6be9f23", "sighting_of_ref": "indicator--119cae75-219b-46a6-b8ee-682e08b1af24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7182d71a-6264-4375-8c6f-a2908ce31eab", "sighting_of_ref": "indicator--3e9514e4-ba52-47ff-b362-2a75f28b8eea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c9c45bb-781f-4a65-8498-36238749759c", "sighting_of_ref": "indicator--114638b9-a1a2-4f30-9ada-2138dc2829b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e0e675-4328-4e72-9612-4ff6fadcb242", "sighting_of_ref": "indicator--2dce0b91-60a8-434b-a450-fd4b65f573b8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b521632f-1bc8-4873-84af-c48163b161f4", "sighting_of_ref": "indicator--0c6e0fce-6420-4941-b652-7155071b35da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc339e75-d785-4a85-858b-76ff5a9cb208", "sighting_of_ref": "indicator--72aaccd2-e835-4493-bb65-305131c5a161", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da83f4c-fb6b-4a83-966d-4cd6cf488f82", "sighting_of_ref": "indicator--c09e8dcd-e37c-481e-98f9-fa783e199833", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e420ab1-d34f-4a89-bb07-44de3e2ac3f0", "sighting_of_ref": "indicator--c09e8dcd-e37c-481e-98f9-fa783e199833", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd010282-564f-4cb7-af3b-922b843f2b44", "sighting_of_ref": "indicator--495bf104-acf2-451e-aa73-158441f61c07", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba3f449-22bf-4cc9-b642-50790ccdebf8", "sighting_of_ref": "indicator--a4aee56f-f75a-4e61-a88e-ccf85c2963b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9a62c6-e8d1-4096-a90e-9d3c854b1d33", "sighting_of_ref": "indicator--87963725-9b8a-40d5-8420-2a2c589334bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbda078-0dca-4db0-abf0-c58782a79118", "sighting_of_ref": "indicator--87963725-9b8a-40d5-8420-2a2c589334bf", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6241cc80-793b-4116-89d3-544984b86710", "sighting_of_ref": "indicator--8761d4f7-a68c-4b47-9a05-44ccfd78c1e2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d5cf05-e36d-40c2-8831-3ab37bd2bae2", "sighting_of_ref": "indicator--8761d4f7-a68c-4b47-9a05-44ccfd78c1e2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d817c7bd-3370-41a9-be77-bb8631e04395", "sighting_of_ref": "indicator--17edd0e5-1e66-4b30-86bf-871fd4cff383", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff1446b-b3a8-4512-b871-4ddf61014199", "sighting_of_ref": "indicator--b189e188-d6c7-43ec-8425-ad2d8a881a3a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c15453f-479a-498f-b159-062e1e880fa3", "sighting_of_ref": "indicator--b189e188-d6c7-43ec-8425-ad2d8a881a3a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a26b56ea-0ec8-4c27-8645-4f590a61503b", "sighting_of_ref": "indicator--2f499d0c-164a-455c-82c9-c831599a06ba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1b856e-1ef4-4218-84f9-1c953ca154dd", "sighting_of_ref": "indicator--0e1f3c58-9241-42f9-b28b-d96d565b292c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82508b4a-3a0b-4d62-b411-4c6ae8d22df6", "sighting_of_ref": "indicator--88ec7607-4fa5-45e2-addf-0e59b8aec6bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e0b5c1a-0447-4046-9247-e43e93785c36", "sighting_of_ref": "indicator--ce831c8d-f52b-46db-a6a7-090c1ffe5c10", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--870ee70e-c76f-44c5-a770-81ce385b6dea", "sighting_of_ref": "indicator--aa1f1a6c-1543-4e87-a979-d8a69923efde", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4d4a54-46d2-4283-a0c1-83dd91262a10", "sighting_of_ref": "indicator--21bc7ba5-c996-4b2e-83a6-84f367a041b6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6ecab6-652d-4618-8565-448462912bd5", "sighting_of_ref": "indicator--40a92ad6-7cd5-41fa-a90b-8c00cfaba9f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6086554c-119b-44de-ae42-9d1c80953374", "sighting_of_ref": "indicator--7eaa9c38-dc83-4b38-acab-55c3d11d1916", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a14e4608-11db-4f36-998a-aacc22474181", "sighting_of_ref": "indicator--d2c51099-2f2f-4771-948c-2d9388c5140c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a72c2b-524d-4980-84bf-9912bf55f3f8", "sighting_of_ref": "indicator--0acae680-3004-40c9-95b5-50a52de57bfb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0056e5d6-beba-49eb-b767-709480007111", "sighting_of_ref": "indicator--693ee1e2-5618-4cbf-b03d-f9e18802eb0d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d299e1fc-2ee0-4a32-9f7b-6f93b4b3b208", "sighting_of_ref": "indicator--b7d44f25-26da-468c-965f-d09afd0b020e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b31794-c926-41e6-b82f-4be53a19cc2e", "sighting_of_ref": "indicator--e22fa53c-b147-4522-8d2a-72cfc17d6a12", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316c3941-60c2-4f35-92ed-e048bb311b4a", "sighting_of_ref": "indicator--41aa726e-4634-4037-8767-4e0941b466f1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974cbb51-d2e0-49eb-9602-02645b1f9a21", "sighting_of_ref": "indicator--989c7e89-540f-456b-9672-b8e10341cbdc", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25cf4f7d-b6f1-47e1-a3bb-2005101b41df", "sighting_of_ref": "indicator--fe13d0ba-fee6-402d-a850-38d7470e5f2b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5d6501-9bcc-4a20-83b3-5a8175db2dfc", "sighting_of_ref": "indicator--5be9d7dc-c759-4f48-a39c-8eaec8a9304b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d288379c-4716-4646-a5d4-45547095be00", "sighting_of_ref": "indicator--a77c1734-ad3b-4bd0-a522-5981d8f2a9cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b59acd-e347-419c-8f73-e8b2dbd2167a", "sighting_of_ref": "indicator--5729fb34-e43a-4399-8b07-daeca30d8e67", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--443d4c0e-d0bb-44ca-a580-fff608995785", "sighting_of_ref": "indicator--50956622-9998-4e3d-9778-6cb1a30ca382", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17299c54-ec09-45ae-9dde-714bbb555dc3", "sighting_of_ref": "indicator--67c02931-e153-474c-99fe-5c1b72299da9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dab0839-1b79-4884-835f-9321d955b032", "sighting_of_ref": "indicator--de7f686d-8bf8-4195-b790-d1939d548f0c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b387453d-4847-4ea8-8561-4e446cfbdc12", "sighting_of_ref": "indicator--8f822686-21a7-40a3-bd35-d8e0a3ff45ba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd754bc7-d55c-49fe-8a3b-d2347de6fc4c", "sighting_of_ref": "indicator--426d6ac1-1973-48a3-86ff-3b0009e15c79", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5526b9-8101-4d4e-a65c-8370c14eeace", "sighting_of_ref": "indicator--1c4e85b4-14ea-40d7-ae2c-47abd476f4c1", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4add9f29-9a4a-4609-931c-1468d051aeb3", "sighting_of_ref": "indicator--21b9a09d-eba0-418c-b8ac-1fd74474641a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d867132e-d30b-42b0-9b8b-bf7d92eab409", "sighting_of_ref": "indicator--a2b6c290-c1eb-495f-9992-b8ffffef7e35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae55ddb0-64fc-48fa-9964-0ffe150b920c", "sighting_of_ref": "indicator--94c7c113-746b-4a9a-acab-7d59feb50d93", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74921627-663e-4657-8e08-c303ec4d0795", "sighting_of_ref": "indicator--65220a60-4889-4fc7-b1e2-3a588c8596ce", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ada70a-cd8c-4b3c-b7e4-553bc6c7627a", "sighting_of_ref": "indicator--07bb2633-fcca-4fbf-8905-2c4935b6381b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab6be0e-8909-44c1-ac7d-1ad30680dc70", "sighting_of_ref": "indicator--b97723a9-7e99-49be-9728-812088637f5a", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56718ba7-48f2-4bf0-8de5-c25db475e9c9", "sighting_of_ref": "indicator--fe559cf8-4bcc-438f-8cd0-17ac2979f83f", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bced155b-924d-41de-a657-c6dbebd94f4c", "sighting_of_ref": "indicator--a1df1017-f559-4274-9f74-86329d990214", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc58643-ecea-4979-b72b-b04e8443f0a6", "sighting_of_ref": "indicator--265a1ef6-cc31-49d5-9d7e-db51e2c7a50b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51b0f59-87ac-45a5-b96a-bcb230ed7a61", "sighting_of_ref": "indicator--fd7f28da-956c-4023-8f69-d5addaf3fdd8", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44d701c-b674-49fe-8bbd-fb3bb63133e6", "sighting_of_ref": "indicator--37a2f3ac-f6e1-44ef-a09b-555181ab24a3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98bc7d9-f0f6-41f5-ab10-28693bae843c", "sighting_of_ref": "indicator--eb45a61c-f8ac-47bd-a906-11a45dc4f571", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f999d884-1d15-4a3f-aa28-9d832af50f1d", "sighting_of_ref": "indicator--61d0b527-1b66-4748-92c4-5ef33d9500e8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d44aba7-99fc-4cbb-a3a5-46bf0dad8a0a", "sighting_of_ref": "indicator--1896be26-0651-416a-914b-ce39d1d42eb9", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e43a77b4-b012-4221-8723-4a3094aa6e9d", "sighting_of_ref": "indicator--929f9a1d-45e6-4209-b093-a70d3bbd0793", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b769367c-8091-40d3-85e8-9cf32e842738", "sighting_of_ref": "indicator--18b66a72-c0d9-48fb-82d0-9ca4ccea8a53", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6587457b-4004-4074-aa2b-021bc70e47ac", "sighting_of_ref": "indicator--cccd8a7c-0a01-42ec-8431-bb091f690a8c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b1158a-12dc-4f05-910f-e9f9bea7e9b0", "sighting_of_ref": "indicator--64db26b3-a104-46ea-99b2-f48bbdec22aa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd1ef9e-9cac-4153-848c-6b640ef6d018", "sighting_of_ref": "indicator--0df796a7-5237-4ab6-840e-5f467e3b68c8", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f80269-0d5e-46ec-9fca-209606b704e6", "sighting_of_ref": "indicator--db3b21cf-4f3d-489f-b579-c1f2b3139e14", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f94eef4-c070-4bc5-a515-505b520aea03", "sighting_of_ref": "indicator--489a9b13-7b26-426a-b465-1b53cfb653c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb59891-3690-4c7e-a410-c2865546886d", "sighting_of_ref": "indicator--a3187d92-1e4d-48ef-9d33-47598d73f026", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609dedee-5f86-4f4c-95f8-bbafff0e7f9b", "sighting_of_ref": "indicator--30a18dc3-9fad-4919-847c-6da3ba14904d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6709b4-9c1f-4e62-955b-57372e9d6627", "sighting_of_ref": "indicator--93ef7570-0fea-4c53-baff-e3be2844f871", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04bc343-c14c-4327-9638-1bbba94434ed", "sighting_of_ref": "indicator--b5e60eb2-0cd3-46a2-89d3-93472e5c6531", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8004c974-04c5-4e5c-a788-657d0cf1ce36", "sighting_of_ref": "indicator--c71f4491-d9a3-445e-9f1b-6029ae0a4892", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6378780c-298f-4255-b250-530f1837dd26", "sighting_of_ref": "indicator--c219872f-2864-46b8-bf01-88a1ab9b6b08", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727d0dd6-a24d-408f-acf6-cafc6d66fc78", "sighting_of_ref": "indicator--34a6fa34-51a8-4a6c-b113-83ff34feb6d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691bfdea-14f5-4ba3-92cc-d1e0b03b61c1", "sighting_of_ref": "indicator--aea64619-76c5-4f6f-8d71-9312e71b2396", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a67a798-acbc-4521-99a6-497c4fece95c", "sighting_of_ref": "indicator--49640ff0-a21b-4add-a6dd-afdd6dfe4f4d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03fed7bf-c866-4866-b8a4-87c87c56419e", "sighting_of_ref": "indicator--0c40092d-0390-44ee-b075-709356e2c376", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6552e52-f514-4070-a9da-f54f1e7b2acb", "sighting_of_ref": "indicator--63105309-94b7-44b9-b847-02dfaf4cebb1", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48277bd-739e-43a2-9ad2-1c71cd877239", "sighting_of_ref": "indicator--1ea023b4-d682-4c20-af73-61a90037b13e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38aaff10-bd38-4dd7-8cde-0ab64339c558", "sighting_of_ref": "indicator--8e8c28a7-f6f7-4ecb-99f9-12edae35ba03", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6161d97-cb15-4426-a5ff-42906214f796", "sighting_of_ref": "indicator--3402874f-57c4-469a-87c8-a3d67a8d13f7", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c37247-18b3-49df-9c7e-d1f4d3e13958", "sighting_of_ref": "indicator--54cc9c5f-33d8-40e9-8d0b-97b497ed3c61", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144f589d-4f3c-476b-845c-28838d9ccc3d", "sighting_of_ref": "indicator--3b185e2e-2e7e-4cd2-b4ca-659aa6fa97bb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebdf8a0-f134-44b2-b4d2-f48a62f9cd24", "sighting_of_ref": "indicator--b1396d44-f8c2-4c16-b849-31d310e7dbb6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb96327-e0f3-43f6-8d4d-8b1220e49561", "sighting_of_ref": "indicator--b1396d44-f8c2-4c16-b849-31d310e7dbb6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49510e04-7525-4049-bde8-c8aa23fad07d", "sighting_of_ref": "indicator--a3967305-e406-4b1d-9125-85838435df65", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc5b7e7-5865-4160-bd7e-ff600df22b85", "sighting_of_ref": "indicator--893fa528-1e81-4384-b0e4-4dd1798ff4c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1d7f83-8925-48d8-b095-e3d5f2a2588c", "sighting_of_ref": "indicator--893fa528-1e81-4384-b0e4-4dd1798ff4c3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74fde74-74f2-4677-a194-17da4bf9e352", "sighting_of_ref": "indicator--b6f6a56e-fa3e-49a3-b580-4d8c5624fd2f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f536c06-be38-43d0-934b-928a35274582", "sighting_of_ref": "indicator--b6f6a56e-fa3e-49a3-b580-4d8c5624fd2f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f0b6ef-e4ca-462a-b95c-b546192aafcc", "sighting_of_ref": "indicator--383addfa-3b25-461c-8b56-1444b0ed3d9c", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ef5509-4aef-4815-9280-0ad57994e4b4", "sighting_of_ref": "indicator--383addfa-3b25-461c-8b56-1444b0ed3d9c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a755910-a210-4ff9-86bd-3f64f04e293d", "sighting_of_ref": "indicator--73ba1aa4-75ab-4f18-9880-828b8bb43187", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2782dab8-ada1-43e3-87e1-08cc0da91a47", "sighting_of_ref": "indicator--3d3cdcfb-386c-4ed5-a58f-fb13d9d65b18", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0712881d-b157-4c8c-9cee-539aa48f7bd0", "sighting_of_ref": "indicator--514c1dbd-b268-48c2-998a-3aff813f5d7c", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47b1c86-6c4a-42c0-ad5f-885908cddd2a", "sighting_of_ref": "indicator--1fbabab3-1f64-4411-993d-0c546329ea67", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f367fed9-388f-45e4-9283-0c8528ea2dd5", "sighting_of_ref": "indicator--cc08b52f-61aa-41d5-9e00-8b0654253edc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1baccb-46eb-4a1e-aad1-a17587158e44", "sighting_of_ref": "indicator--6353b18c-edbb-4576-a861-43c6bf498e4b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9856c3-2eac-4471-8748-85d8047651dd", "sighting_of_ref": "indicator--6353b18c-edbb-4576-a861-43c6bf498e4b", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e9c90c-6e4c-461e-afc4-a8e803d0ee9f", "sighting_of_ref": "indicator--f974f2bb-5444-4816-a84a-b40713990ec7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966a3f47-4107-4bcc-b0e8-4ee0b17cd53a", "sighting_of_ref": "indicator--21c1b833-ac80-423a-ac43-cec9a3fdf468", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91793e21-4bce-4568-9898-afe6b251d790", "sighting_of_ref": "indicator--fcdb5f3b-2317-4e0f-8d04-c0141707a6e1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e90206-b859-4115-af67-ae29aa1accfd", "sighting_of_ref": "indicator--57b4c812-024e-454b-a238-7ed45cd42ddc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2906ba1b-ffe9-4378-b334-76af079f439d", "sighting_of_ref": "indicator--be93287c-2b87-4c0e-bde1-786e232a9c89", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d812d82f-aeb6-4bca-910f-33a04a5be9b1", "sighting_of_ref": "indicator--10c78923-a315-48f8-9f6d-613b2cf1a66d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22cb127e-5d0d-48d5-8b5b-9735788aba2c", "sighting_of_ref": "indicator--10c78923-a315-48f8-9f6d-613b2cf1a66d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbefa29-ad53-4da4-b5b7-3f00553fc5a7", "sighting_of_ref": "indicator--bf57780b-c11a-46e1-afea-8171f0078529", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f471aceb-3e6f-4a67-b2b3-279577054968", "sighting_of_ref": "indicator--7b83924d-a73e-47e4-a39e-328bb1589771", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18cb9275-bf00-4580-b236-f1c5c6bf9f02", "sighting_of_ref": "indicator--196ea48b-b57b-471e-9891-91bbd52c4d62", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e9b4b8-247c-4e03-803f-00b432857020", "sighting_of_ref": "indicator--9c54273c-5379-478e-8400-70607ebbc779", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85729859-ef05-4801-a7d7-4e18dc35377f", "sighting_of_ref": "indicator--1d5b3a0b-f846-40a9-80ab-f6a0314a096b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d33eb87-efe1-45ba-b514-702a85373f6e", "sighting_of_ref": "indicator--1d5b3a0b-f846-40a9-80ab-f6a0314a096b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c291fe60-6904-46fe-9c2e-71ec09b6ac89", "sighting_of_ref": "indicator--ba390945-cfa1-4ea5-8c63-61cdb0167efd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffa8944-965a-4d08-9e35-ce7d55647075", "sighting_of_ref": "indicator--70a70966-d47c-40dd-a2bb-8ff9fd690a33", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67869e23-3b35-4d89-8ac0-cca133528571", "sighting_of_ref": "indicator--756c9b77-cd0a-48c8-8fc7-fd5390bd6f4c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f17028-2141-43d8-9173-61984f322852", "sighting_of_ref": "indicator--a105dc5f-1e5b-40f4-9dbd-8225182c2018", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--589c436c-5c52-4a04-959e-e9208ef05bae", "sighting_of_ref": "indicator--5c581a0e-ec62-40d8-addc-df3810bcb32d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb48c7e-3c9c-414b-90b7-a3052614a72f", "sighting_of_ref": "indicator--59c5ad1f-9c89-4776-b4b1-44c61e3f5f58", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1719fa4f-2909-48ad-97dd-7870950d6169", "sighting_of_ref": "indicator--4070bfbc-aeac-4fd8-af9f-dbc7019addf6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6860966-d768-4594-a5ef-50ded9b9866f", "sighting_of_ref": "indicator--a3c1d499-eb81-4599-972a-dafc214404ad", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40db01ca-f974-4554-8891-3d047653866f", "sighting_of_ref": "indicator--fde07f75-5009-4f38-9619-cb635477549e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8d55bc-5260-41b2-a63f-65a2cddb7148", "sighting_of_ref": "indicator--1e52ccc9-806c-4f84-b947-b1c559184410", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14480613-3908-4868-b87f-75e48438bcc4", "sighting_of_ref": "indicator--53261b52-c530-4397-9f30-64f838e05cb8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168e3b91-ae83-4a11-9bed-1c2f7febb76e", "sighting_of_ref": "indicator--48d6fa15-d4ca-4e7c-9973-cef0e82b5297", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42a67593-faf3-4fa3-9b63-354219fbd464", "sighting_of_ref": "indicator--6ff0f519-9e46-430e-887d-d1607ec576d0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d82c7b1-8703-41da-b328-67f7c087e1f8", "sighting_of_ref": "indicator--b5b70cd0-16d3-4dfe-82fc-94fbe0e17c9a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3964535-f90a-4e5d-9130-7039f7ca0ae4", "sighting_of_ref": "indicator--c5ad5786-d5bd-4ddd-b387-cee1ebf28614", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f21c442-c309-4de8-bdb7-ae2875b260fa", "sighting_of_ref": "indicator--c5659913-2a32-43b4-804e-f04c002e3a6d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7a563b-d946-47a3-8517-6eec7b94b6da", "sighting_of_ref": "indicator--e64afe8f-8275-4c7a-9f12-e66084ca5de5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26bded60-7413-4c60-8192-4a3b57b5d6bb", "sighting_of_ref": "indicator--9fe0a52d-abe3-47e1-9a5e-bd5ebb2ce8e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae62a51-d652-4586-8fb8-4926eec8130d", "sighting_of_ref": "indicator--b1a9b156-3621-48f4-9782-5ddfc0edfb2f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44d1be4-88ba-4fa9-b21f-36fed8940acd", "sighting_of_ref": "indicator--2e0fb7f5-fc26-491a-b245-ae0bd668b33f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5a8e83-f8f8-4532-be42-048e253e45f4", "sighting_of_ref": "indicator--4345d6e7-3569-48a9-b8ff-cb030386bcc7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463530f0-43b5-42a4-9518-f2dae40926af", "sighting_of_ref": "indicator--febb5804-4da9-4c95-930a-7f19e8708d94", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54dd092-9c59-4928-bfc7-1f43aed070dd", "sighting_of_ref": "indicator--febb5804-4da9-4c95-930a-7f19e8708d94", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1561286-7cd5-455a-a714-36c2d6df0d7a", "sighting_of_ref": "indicator--77b83b75-beb9-4eef-905d-f42601615cff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b17a434-f599-439e-b163-ef6703f4975c", "sighting_of_ref": "indicator--77b83b75-beb9-4eef-905d-f42601615cff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a44800f-b7ac-466a-a76d-dae27c8db5bd", "sighting_of_ref": "indicator--9e3038f7-9075-47a2-8ecf-bd2c11d227d7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f42adc-7206-4f7a-b49b-2f9f259e4b03", "sighting_of_ref": "indicator--9e3038f7-9075-47a2-8ecf-bd2c11d227d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--495cb173-9896-47cd-ab06-d1b9294d7281", "sighting_of_ref": "indicator--83c510d4-defb-4d9a-b0ba-9499e31c4e4b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e1d89a-9b5a-4423-83a1-37daff99da8e", "sighting_of_ref": "indicator--62956fbc-43c7-4431-968d-f17c21cc3e6d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8adbf37-55dc-4664-b553-06825a94ec7c", "sighting_of_ref": "indicator--62956fbc-43c7-4431-968d-f17c21cc3e6d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d631fd-b7b3-448f-ab00-0749b2e497e2", "sighting_of_ref": "indicator--69bf2f62-d421-4157-8522-a703d39b8036", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b207e4-0927-4bac-8f57-43f7af3cf6e1", "sighting_of_ref": "indicator--69bf2f62-d421-4157-8522-a703d39b8036", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7297b30b-1949-412e-8b8d-7096b913aba8", "sighting_of_ref": "indicator--09f30b65-b847-453e-b889-07233405371a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ea83c7-3cf8-410f-88f5-e10206c4f88c", "sighting_of_ref": "indicator--09f30b65-b847-453e-b889-07233405371a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b6e218-008d-47df-8679-803a285cecb8", "sighting_of_ref": "indicator--eca87854-6177-46df-af53-a85918e7572e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51f59025-aa70-49b9-8fe9-a393394971ca", "sighting_of_ref": "indicator--9fcafdd2-7c1c-4bf9-a7b7-39fa87b69e85", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676d5d49-c978-482a-b9a4-dac13112e293", "sighting_of_ref": "indicator--fe01ee51-0914-4396-87f4-99c033d13c17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de945abf-7c5b-4bbd-8145-4b8e311d4d89", "sighting_of_ref": "indicator--fe8ec67a-eaf3-439a-acf7-73f85fffaffe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf559e5-4d7d-4ee0-812c-0b1f149586bb", "sighting_of_ref": "indicator--fe8ec67a-eaf3-439a-acf7-73f85fffaffe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed0df51-c00a-4487-9f08-8d8287101a3c", "sighting_of_ref": "indicator--a6817a3c-fc56-46a0-ae6d-d9ffc6350d35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fedf202a-3fd5-48c0-8cd6-c8f8f5713eb7", "sighting_of_ref": "indicator--a6817a3c-fc56-46a0-ae6d-d9ffc6350d35", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b64018a-d7a7-4fb7-be2b-4a0c6ddb3b0a", "sighting_of_ref": "indicator--c1f48faa-71b3-4a25-9e4f-587562a13e86", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--192b0c68-66ca-46f6-9994-9268a3670902", "sighting_of_ref": "indicator--c1f48faa-71b3-4a25-9e4f-587562a13e86", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ddae9e1-c272-46e5-b2b4-ffc6378ea7f6", "sighting_of_ref": "indicator--6a9a94c6-9a5f-4f7e-a6a2-510e873b2584", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722e6529-5bb7-48a0-a4f7-99a1a2108d56", "sighting_of_ref": "indicator--6a9a94c6-9a5f-4f7e-a6a2-510e873b2584", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebc4695-c184-4e0f-a4bb-2854a95a6b74", "sighting_of_ref": "indicator--6160faab-664a-4e1c-9f96-36ee1dbcdc04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d45ccee-3eb0-4a91-b35e-3af1e579cc55", "sighting_of_ref": "indicator--6160faab-664a-4e1c-9f96-36ee1dbcdc04", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cdc9d7-38bf-47ac-bf9a-7679cb7a0e95", "sighting_of_ref": "indicator--f706f297-b70d-48cd-b17a-36ce1bac4ba9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e0695d-b437-4c6d-8458-9dced2e4e1a8", "sighting_of_ref": "indicator--f706f297-b70d-48cd-b17a-36ce1bac4ba9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41d9b3c3-783a-4a7e-956b-c3fb464d5140", "sighting_of_ref": "indicator--4a6a9765-86f8-4b7b-b91f-d33bc652831f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a57cb32-084f-429d-b6cf-5b764a6d1036", "sighting_of_ref": "indicator--db92d447-da22-4991-b9aa-85e1a496d4db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d8adf2-d092-4e45-9586-f144f24a8b80", "sighting_of_ref": "indicator--db92d447-da22-4991-b9aa-85e1a496d4db", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7557f07-0b41-4c78-83fe-6cb2824423a9", "sighting_of_ref": "indicator--6a200e52-5316-4062-a822-1c33d458e702", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bf5f87-96da-4d5b-945f-fc09d7c48323", "sighting_of_ref": "indicator--6a200e52-5316-4062-a822-1c33d458e702", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b66719-74c2-4986-9ed6-c2a0445ca4e6", "sighting_of_ref": "indicator--75f7c228-8736-49b7-bf49-802098f02425", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730e7018-eaf7-4215-8f6f-874ba6b4e5bc", "sighting_of_ref": "indicator--75f7c228-8736-49b7-bf49-802098f02425", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca9f5ca-1185-419d-be8b-a78a5e57ab11", "sighting_of_ref": "indicator--240ecd38-6715-4d9c-bd78-c51b2384160e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfac44de-0e7e-4d9c-b892-098d34eaf6fe", "sighting_of_ref": "indicator--4b22ebc7-5f08-40ad-8b34-b85dd1a00c68", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceb996c-8a11-4ed3-8416-af0ff6e06c9e", "sighting_of_ref": "indicator--9ab1a0ec-79be-4c98-8b9c-08c541ab519e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216e54b6-5a23-46d1-9d95-f3c815bbbda7", "sighting_of_ref": "indicator--acca3012-0b05-48c3-8cdc-7f793ec5ef4c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce893e0-1864-4481-a318-d892f56c3887", "sighting_of_ref": "indicator--acca3012-0b05-48c3-8cdc-7f793ec5ef4c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81242e8b-cd2b-42d8-b73d-147a07fb73a3", "sighting_of_ref": "indicator--e58a0447-d88e-4c83-999c-e8a1ed2e7cb9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7906fba2-f9ee-42b0-b079-326bbcc73866", "sighting_of_ref": "indicator--6d091e5c-7732-4808-9b26-229e7263f187", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be744801-ec42-446b-8511-f64ac543c5e2", "sighting_of_ref": "indicator--cf00e7b2-ddec-4ead-8778-5ff175be18da", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0622b98e-f2b2-4196-b5be-55b02a8e5dc9", "sighting_of_ref": "indicator--d5be30d2-f501-4c60-9a35-2a3b19a670f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88ed0fd-6313-4eed-a6d2-980362b8cb31", "sighting_of_ref": "indicator--d5be30d2-f501-4c60-9a35-2a3b19a670f0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95a5137-d70d-4c72-9865-0678f3a1d3e5", "sighting_of_ref": "indicator--a5c34769-6c9e-4907-b750-b8332034ee0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622a3ab1-f05f-43a5-bdfd-ca6e70f9b051", "sighting_of_ref": "indicator--5487bc82-b506-4226-95d0-655043a95d46", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769ec1e8-2311-49a2-940b-57b7e8ae24bf", "sighting_of_ref": "indicator--77702445-52e6-4434-8f88-2cb928ca9afd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e7b0a24-3ec6-400d-b018-134ce45e5be7", "sighting_of_ref": "indicator--de8bc37d-b042-4796-8128-3e0a072d8bf4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33104c2a-f3bf-4976-b832-2c875adf5dc8", "sighting_of_ref": "indicator--de8bc37d-b042-4796-8128-3e0a072d8bf4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f593957-892c-4312-85e8-c61661a2cae6", "sighting_of_ref": "indicator--d7dcbe26-dc2b-432a-a62d-18df0d1afec1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc964682-07b0-4948-b6e4-2f7e203ac896", "sighting_of_ref": "indicator--7c01e36c-1603-4b52-889c-c42e1f4313a5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dbcd29d-043f-4e69-8e62-972114d677d2", "sighting_of_ref": "indicator--ef76762f-4aa1-4e27-94d6-2bc4ad308835", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb411d33-9fcc-40d9-98de-47d2bfe6cb36", "sighting_of_ref": "indicator--26bd6ef2-2748-409d-b9fd-8908b68ed815", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f68d7a9-bb85-49d5-9696-5ffe2279050a", "sighting_of_ref": "indicator--647f3d74-edf9-48a1-ae2c-b30bda87ef0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e9bf55-eded-40dc-98e9-e8782960ad94", "sighting_of_ref": "indicator--a9e95ca3-5ae7-43a8-9043-e6adcdea5717", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb27374-be03-4bd8-b03b-19048ccc36af", "sighting_of_ref": "indicator--400f7d16-1247-43f1-9aad-2c57bca53514", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749fa717-a781-4f43-8de0-8101a3a9bcd8", "sighting_of_ref": "indicator--8a89b5a0-9dcb-4876-a8f3-3fc18d6d0ade", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e2a30e-a030-4eb3-ab2d-892c00c92a9d", "sighting_of_ref": "indicator--fd62f717-c0bb-492b-9488-b27e776ae913", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91b4177-b97f-4a63-a919-bb3943026df0", "sighting_of_ref": "indicator--0dfcb6ff-d665-4f7d-98f1-aa6a27ce3c4f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4e16c9-d140-45a0-880a-4f63e96db58a", "sighting_of_ref": "indicator--724e880d-6644-4770-9a8a-d91b99b4a50d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1079b18b-57ef-4452-a9e7-0702765f1c2a", "sighting_of_ref": "indicator--4bdee9ef-56ed-49f9-b66f-95967692eef0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2b2f1f-5d02-4cfc-a5c3-836df686ad1b", "sighting_of_ref": "indicator--4bdee9ef-56ed-49f9-b66f-95967692eef0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da677a1-b753-4d8a-a589-4aee86681ab9", "sighting_of_ref": "indicator--670bcb60-8604-449d-9691-92ae231ba8ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166788b3-f919-41e1-8855-309da9338627", "sighting_of_ref": "indicator--670bcb60-8604-449d-9691-92ae231ba8ed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffdf702-b99a-4951-af9e-dfaa8ed2a11f", "sighting_of_ref": "indicator--30e8e684-da1b-4d92-8f98-f9aeac60dd91", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f42151-1280-44c9-a002-d6eb682bc71c", "sighting_of_ref": "indicator--30e8e684-da1b-4d92-8f98-f9aeac60dd91", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eab9114-ae2f-4e1d-8891-bdcaddb50f0b", "sighting_of_ref": "indicator--0734eb85-40c4-4209-bc5e-5a75aac61bc7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814f5713-e1e1-4ad1-b0d0-82bb9ed7bf32", "sighting_of_ref": "indicator--aff2f836-58e5-4b87-8273-2d80fd74616e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d99fabc-66d7-40c7-9cda-7aed4b6064bb", "sighting_of_ref": "indicator--1b5eac81-9842-42e8-839a-903fc4b39ba1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a8b4d0-a272-4040-9e80-be547c7c0efb", "sighting_of_ref": "indicator--09605c8c-8c8b-4367-aa2d-c872c62c9b9c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79412b0b-dcff-4599-aeb7-3e282d09d93e", "sighting_of_ref": "indicator--29088fd4-834c-4a0f-8699-7d6c99bd6f9b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8255a2a7-09fc-4d91-822d-4c7c00ac43f7", "sighting_of_ref": "indicator--a0f19abd-c223-4eac-a73b-137b63f0c45c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4626a944-acc2-43fb-a049-2343b24cd0ff", "sighting_of_ref": "indicator--23d53a4c-4442-4632-b58d-31dcc334bfe4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d51918a-a12a-431f-b4e8-a98bd1b42904", "sighting_of_ref": "indicator--1bb287bb-abc6-4c0f-a7d9-de74f8831988", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3c0696-fddf-4cc0-b4cf-de620eae0b72", "sighting_of_ref": "indicator--befb5580-3bd6-48ee-adcc-fa66975ddb52", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a14c0e-728d-4215-aa9d-de23ade48885", "sighting_of_ref": "indicator--befb5580-3bd6-48ee-adcc-fa66975ddb52", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0aecb9f-befc-4645-a43a-c6a76c7a4a04", "sighting_of_ref": "indicator--94cf7017-ce22-4554-9933-66f254b9dc1e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcfe3ace-3b38-4e59-a2b5-e481e8667be9", "sighting_of_ref": "indicator--ac917c54-2749-4482-910d-eec71fcb197b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e74c435-5dce-482b-afd1-7460f1e14a18", "sighting_of_ref": "indicator--b61ea14e-d5c3-448b-9ada-51b236e9bf87", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc279464-2d1a-436a-8e37-6ede3342f508", "sighting_of_ref": "indicator--3c26a7dd-a8ba-45b6-a710-ed84bd1b997c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec62d8a-31bd-47c6-b3f4-40e81f1f3ed5", "sighting_of_ref": "indicator--3c26a7dd-a8ba-45b6-a710-ed84bd1b997c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a8238a-357f-4cb1-b6e9-835f956aca51", "sighting_of_ref": "indicator--192998e4-3c14-4930-aa96-c93c8f31fe67", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec2ea63-4e81-461a-9cfb-3ac99566e142", "sighting_of_ref": "indicator--e4d0ee73-b532-48d3-b9d8-8aef0d307eaf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16c3d3b-b435-4812-8f3c-ea2fae497ec6", "sighting_of_ref": "indicator--f5f0e3fc-8805-427f-835a-717f2036ea12", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af2adf0-783f-49f6-9836-499ae6c1826c", "sighting_of_ref": "indicator--f5f0e3fc-8805-427f-835a-717f2036ea12", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cba0761-a67b-4b40-8b15-2134ce30324f", "sighting_of_ref": "indicator--6d180150-e7f6-4e33-8691-7abedd10a08d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb03bf8-5fc1-4b8c-8cfe-6751626184a7", "sighting_of_ref": "indicator--e0d2d815-71f9-4a52-bdb5-f258cb38da33", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d5bf95f-07e1-4b9f-add5-8378d973ca19", "sighting_of_ref": "indicator--9630e6b2-ac42-4bf2-bb8f-b946cd179d1e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26db382e-0c43-4f7b-b876-2e7a0334a30e", "sighting_of_ref": "indicator--9630e6b2-ac42-4bf2-bb8f-b946cd179d1e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002b91c2-a11a-47a6-9d4f-21916b18359b", "sighting_of_ref": "indicator--53ed917d-0be2-471e-a5f1-bea36e4c2469", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e20c726-d5b3-41b1-8272-1f5d5b6012b6", "sighting_of_ref": "indicator--9be9ead5-4a5e-4d8b-8387-c96cec687647", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409bb8d9-64d8-4363-897b-c89cd040609c", "sighting_of_ref": "indicator--9be9ead5-4a5e-4d8b-8387-c96cec687647", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30dbc6ea-81e7-4977-b960-5d35572b89a5", "sighting_of_ref": "indicator--9be9ead5-4a5e-4d8b-8387-c96cec687647", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d3d5b6-9871-4567-a5b4-1fc035c3f601", "sighting_of_ref": "indicator--2b078592-9e1e-4ec8-bbce-e087bbd37704", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54577c96-a22c-44e1-8c0e-c3dfb01c16ed", "sighting_of_ref": "indicator--2b078592-9e1e-4ec8-bbce-e087bbd37704", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a98351-71b1-4f2b-b001-622dae7d790a", "sighting_of_ref": "indicator--3cff9d3c-8a88-4e27-b761-73180c59dcc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debcf267-5be0-4d70-8002-0f521f52d28e", "sighting_of_ref": "indicator--f4c63c11-e369-47e6-af63-cf18b1ad5c16", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53d8f95c-bba2-4aca-bcae-88a28089f195", "sighting_of_ref": "indicator--6a300fa0-9341-4e26-98fe-89132c3746e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4658585-28b5-49fa-92a6-d56c9c9671bc", "sighting_of_ref": "indicator--ebf75c8c-261d-4451-b37e-3649b5636dd8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37aafd73-a6de-4231-a025-c4584405a8e4", "sighting_of_ref": "indicator--0b72efa8-9615-4ab1-aeb7-cd308e52a6e6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e8b952-4abe-45f8-bf4a-75043d12566b", "sighting_of_ref": "indicator--f8e50eeb-2167-498e-b264-108f7c890abc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e6b45a-953f-4abc-8705-39edaa4fb17b", "sighting_of_ref": "indicator--c7bdbaed-abcc-4ebe-a232-35ddc551d7b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25897d5e-910e-4350-8d5e-1f2c3848a0c6", "sighting_of_ref": "indicator--c7bdbaed-abcc-4ebe-a232-35ddc551d7b8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e115800-5092-4e6c-afbe-ccb0a5e6273f", "sighting_of_ref": "indicator--95cf0e0a-92d5-4083-9a9b-cff94892cc3c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0437d4b5-93a7-4de9-8595-926cb0408950", "sighting_of_ref": "indicator--95cf0e0a-92d5-4083-9a9b-cff94892cc3c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ced2ebf-89f0-40d8-8b5e-00e1a30229a9", "sighting_of_ref": "indicator--5e62c208-248a-4622-a73c-e1eccb73252a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80b83db-2e4e-4444-a80a-a3fa0d9ddeb7", "sighting_of_ref": "indicator--76822b6a-2d7f-482a-9951-f806c3c1c4d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b844fae5-11d1-4028-8bc4-fa302a02a9b5", "sighting_of_ref": "indicator--76822b6a-2d7f-482a-9951-f806c3c1c4d2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d60849c9-8e9a-439e-ae55-8b7cd26bd6b0", "sighting_of_ref": "indicator--cdb62283-27c6-4fd1-bc40-de85f23d349b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a92b314-affd-47e9-a354-39d371026476", "sighting_of_ref": "indicator--967a153e-7e12-4274-8a6b-0e304f7c8238", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4eb7cd-78c0-477f-b804-4edc82a3ba85", "sighting_of_ref": "indicator--967a153e-7e12-4274-8a6b-0e304f7c8238", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab32ce8-545f-466b-9c70-115d65b32228", "sighting_of_ref": "indicator--f1f66041-5fb3-4512-9aea-cde7f2b70adc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d155e7-f6fa-42ae-b9e2-da7264c7fa47", "sighting_of_ref": "indicator--12a24901-2c20-4f48-8b0c-e30da59ca8c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52be0e9f-abdc-48f5-af09-3a7b825dd845", "sighting_of_ref": "indicator--eee7f09f-7c72-4577-a0cb-6accfac8da46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cc950a-c7b5-4aa2-bcb8-454d35130ee4", "sighting_of_ref": "indicator--eee7f09f-7c72-4577-a0cb-6accfac8da46", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98312cad-fc92-4e37-bf5f-c727ec8f37d4", "sighting_of_ref": "indicator--6591cd3e-89f6-4250-bb89-541979e7bee2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c83c70a-9db6-4267-90ba-591688101798", "sighting_of_ref": "indicator--c5e4a5b0-6d7a-47a9-af2b-88823f430b59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1f2872-4d5b-493c-9037-e4a475f65a06", "sighting_of_ref": "indicator--c5e4a5b0-6d7a-47a9-af2b-88823f430b59", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03ac3b7-c2c5-4cd8-bcf3-f83a706c856a", "sighting_of_ref": "indicator--16682013-76a2-4a68-bb95-b6fbfaa5cf50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2476c6e6-bf99-4de7-b6a8-9767e8e1dcf8", "sighting_of_ref": "indicator--e0bf272b-0144-43c5-b13b-e739f5da3223", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a56a9eb-ade0-4881-9347-04bdf4073812", "sighting_of_ref": "indicator--8e149b09-3f5e-45d5-a2a7-6644c8222558", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152099ac-4f89-40f2-b5bd-5b994169014f", "sighting_of_ref": "indicator--426916f8-da9f-4e0f-843d-508833b2afc3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81470cbe-1d98-441a-a206-0e85d01191e6", "sighting_of_ref": "indicator--b7b706b6-75c8-4a83-a830-0415cebeebdc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0f0f53-2e1c-44d8-b28c-89346c355583", "sighting_of_ref": "indicator--a02f7b22-23d3-4e2d-8160-164e5280ba54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2a1e193-3b86-49cf-b406-ee5e1b0229f3", "sighting_of_ref": "indicator--a02f7b22-23d3-4e2d-8160-164e5280ba54", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdfd96f-b006-4267-81d1-a5f0bbcfdf7b", "sighting_of_ref": "indicator--419c93b2-9724-413c-b71f-6adfbad0a5a3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c962eb7-9a8d-49eb-96b1-67d1c0a2bde2", "sighting_of_ref": "indicator--fbd04c38-8ee0-43e5-bd98-57171c7f14e5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3e0f8d-1ca1-4db5-a6a3-40a3ba8a0321", "sighting_of_ref": "indicator--3f79119f-318d-4390-8f97-96251805c4d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3a4da2-2773-4228-bcee-c3207306eec3", "sighting_of_ref": "indicator--0242f54f-f93a-4e02-b9b5-112138edb21b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074257d9-4a6f-4390-8c92-b35d50bb4e8f", "sighting_of_ref": "indicator--0242f54f-f93a-4e02-b9b5-112138edb21b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4383b6f8-7068-4f11-93ab-7258a73faeb3", "sighting_of_ref": "indicator--235d6569-4813-46bf-80e7-eb4150d67b11", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d640665d-e2b0-4860-8855-9fd2480ba616", "sighting_of_ref": "indicator--bf0fa544-12f5-4ce1-a00c-1f4db6788c0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edd807e-30a5-43ee-bae5-052b495c7b0a", "sighting_of_ref": "indicator--4f06e341-dad5-42d6-ab28-119fa0b01e85", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f03d19-a406-4967-a6b4-f16d14e1ab35", "sighting_of_ref": "indicator--e4eac398-9a8f-4018-af5e-bbf1d0ae85fe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b5cc6d-48cd-4529-b7db-cbd4df480e03", "sighting_of_ref": "indicator--fa6983f9-dab7-4897-9db7-2ccaa9f4aed9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d45d864-d22f-416d-bb49-f45f62d801e8", "sighting_of_ref": "indicator--9612cf5c-44c5-4e95-9af0-08a336179375", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a0cc5d3-20f7-450d-b549-4d767ac52207", "sighting_of_ref": "indicator--fbace985-e0d5-448b-947d-995775de3e3e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f333b47-d8a1-4d9f-8f81-fd9d88ad130a", "sighting_of_ref": "indicator--fbace985-e0d5-448b-947d-995775de3e3e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8c4fce-f770-4846-bfcd-61c96dfea902", "sighting_of_ref": "indicator--0c1fdfe4-b5a0-4a4b-bd36-3bf2abe2afb2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112245b6-3561-4104-bd8f-04135d5e4137", "sighting_of_ref": "indicator--ef2d02c0-71f6-4fdb-b7f2-e5d959084483", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c0e1a9-2e74-4375-9dd5-78c9e40e5809", "sighting_of_ref": "indicator--ef2d02c0-71f6-4fdb-b7f2-e5d959084483", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--692d168e-c498-4720-9dad-d4632a200e35", "sighting_of_ref": "indicator--a2a3c757-63d0-4aac-8744-a4cc081ea3c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c0f514-e5fd-49aa-99a4-cb6a6ca924aa", "sighting_of_ref": "indicator--a2a3c757-63d0-4aac-8744-a4cc081ea3c6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38b69de-0678-4243-b224-e19a0f3b4236", "sighting_of_ref": "indicator--85110003-01df-4204-812c-555ffc95d3c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d1fc90-8252-46f0-aa92-3722910e6a3d", "sighting_of_ref": "indicator--019b4148-c214-4505-a44b-ccb1a2715e64", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b98c30-4140-4ce2-8a3b-6f0dcb2e0651", "sighting_of_ref": "indicator--37cc5547-96cb-44eb-b6dc-9af4b042033b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef299e8-de9e-4736-9777-c4b3e3ed107f", "sighting_of_ref": "indicator--960d2490-8452-4a82-964a-5e2b424e4479", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f0b539-69d7-4339-944e-4ef59419c2e8", "sighting_of_ref": "indicator--7e0d0d5e-f451-4b46-af06-3e3af6b85b6b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2044036b-05d2-4976-9407-b07c9130e181", "sighting_of_ref": "indicator--6bd1db55-7aa1-4af7-a209-0a9310451c8a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2ad3a7-b11f-4205-81f0-6e40a770e426", "sighting_of_ref": "indicator--e8575aa6-a71f-49e8-8abe-2981dc2c2491", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59b930d-dd8a-467d-8533-795fdf57817f", "sighting_of_ref": "indicator--e8575aa6-a71f-49e8-8abe-2981dc2c2491", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acf0ccb-6adf-4917-88a1-f4e6559c776d", "sighting_of_ref": "indicator--ab728a1f-c56c-4191-a7ce-f38542e5f341", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc380b9-9df4-45c8-a6bd-3e0db9ff5305", "sighting_of_ref": "indicator--42f8209e-4118-46d7-b777-c9d13e44cdd5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cd8bcf-e5b2-4afe-a955-1479daa8b96e", "sighting_of_ref": "indicator--42f8209e-4118-46d7-b777-c9d13e44cdd5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--116a1f3b-3bd9-40ef-b237-8e40b2d747c8", "sighting_of_ref": "indicator--9c298de6-58e0-4661-8ffe-8d188daf48fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f53277-b736-498f-8d51-767ae674c7fa", "sighting_of_ref": "indicator--9c298de6-58e0-4661-8ffe-8d188daf48fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba906df-0f50-4775-b93b-e171aa5fd312", "sighting_of_ref": "indicator--0c279af7-46aa-499e-9223-ac493c8d4231", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb54c38-fa51-4138-ae23-a2de1f4eec3c", "sighting_of_ref": "indicator--1d52385b-953a-44af-a913-5fa5851417d7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17458d18-9f00-488a-936a-cd14e7220ba6", "sighting_of_ref": "indicator--e6d25720-6c90-4a33-b554-0e3f66bcfb1e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b4c13ea-eb4f-4a22-90f3-2a420aeb81e1", "sighting_of_ref": "indicator--e6d25720-6c90-4a33-b554-0e3f66bcfb1e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcefaead-0620-495a-be66-16bad0974030", "sighting_of_ref": "indicator--018ee4f1-2417-4598-a4cc-d80cc8bb0bb1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ba07948-bed7-4493-8fa7-3d2b03ed008d", "sighting_of_ref": "indicator--018ee4f1-2417-4598-a4cc-d80cc8bb0bb1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9589d521-6455-41d4-944e-0d278d068f48", "sighting_of_ref": "indicator--1840af33-4c10-4d8d-9d79-3c8ccac19d0c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091528a7-d7d8-4602-b115-25721344fe5a", "sighting_of_ref": "indicator--2d4ad282-97f5-4d6d-91a5-e9bd4482908d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8e1f90-34a3-44fa-a01d-bcae3dbbb304", "sighting_of_ref": "indicator--c3e4c6ea-c1dd-42bf-be22-d872775b2d24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51463a3a-660d-4ddb-bac6-684e30463c7a", "sighting_of_ref": "indicator--c3e4c6ea-c1dd-42bf-be22-d872775b2d24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342db9ed-a621-462c-b5b3-36d1951813ea", "sighting_of_ref": "indicator--60b3214c-76d0-485e-85f9-0ff4344e5c87", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800cbdbc-9faa-48d4-84e3-0a2415f66c83", "sighting_of_ref": "indicator--882ec8cb-0620-4893-8a63-c67ad14ef6c3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd56929a-65f1-473d-8c85-e2259e73936b", "sighting_of_ref": "indicator--89134d6f-8cc0-411f-84c8-bdbad955f6ce", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80c56e5-3a4b-4b3e-9bfe-ecee2e179d9e", "sighting_of_ref": "indicator--433b3fa9-4792-4264-a5a2-0ec8b755c7e2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa3eb57-5185-470f-88a0-e1a3896f4607", "sighting_of_ref": "indicator--0096f543-ca2d-4748-abf9-f80bd3f82017", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020d70f8-cb48-4bc0-9ac5-882d4a4094cd", "sighting_of_ref": "indicator--4abfeb2f-da5b-41a8-9ade-a95f25b35c67", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0f9794-2ba0-4f36-9cdc-7b0be6120ba7", "sighting_of_ref": "indicator--f8346481-7f1a-45d2-9d79-1fd51db65424", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edaba551-aac5-4d76-b9a3-8045c40698da", "sighting_of_ref": "indicator--769b632b-f5f0-43f0-925f-7219f211620b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203d690e-b84a-4021-91ab-84790b030f3b", "sighting_of_ref": "indicator--53bba409-cc09-40c1-a149-06079eb3aaea", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b28720-bab3-459c-8e4d-7f62b41919eb", "sighting_of_ref": "indicator--a71d0f16-b83a-4cb0-9e8b-49d7aec0d4ba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f621e62-13bc-4474-ad7e-33375eb7b28c", "sighting_of_ref": "indicator--a71d0f16-b83a-4cb0-9e8b-49d7aec0d4ba", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb1f708-ff40-444c-9581-e285d5487365", "sighting_of_ref": "indicator--6adc07c9-ce51-4273-b5f7-1a2351fb0795", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e22eb4-870e-449f-a6f0-bfc5f7862bbf", "sighting_of_ref": "indicator--e93af7ff-0a6c-45c7-bafe-4a299c388131", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e77170-2b64-439c-9528-40af24cd4cbd", "sighting_of_ref": "indicator--6b8cef28-2118-49ac-abc4-58613628c184", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbb27ef-1ba5-4372-a055-26206d6f2c73", "sighting_of_ref": "indicator--cba0c571-170f-4307-acd3-833aa1ef746e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ba8d6f1-6982-49e1-bd0e-aa6fb5d96f75", "sighting_of_ref": "indicator--17fdbce4-ba34-49b6-a39d-29a88be9af79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40e2e50-3d56-423f-b004-9649e4f82a1a", "sighting_of_ref": "indicator--17fdbce4-ba34-49b6-a39d-29a88be9af79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84075ad3-0c88-4646-b4b9-8ac3026f5354", "sighting_of_ref": "indicator--a217de50-b777-4976-8794-2483b6d71b4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f1f71af-1902-45bc-b669-29f330a33641", "sighting_of_ref": "indicator--bc924033-34d1-4ce0-b71b-5ca172051a41", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6f00a4-c135-4af5-8ae5-80056926f1df", "sighting_of_ref": "indicator--9687089e-1126-4b9c-9fba-8ceef74e168d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541f2130-d88d-4b6e-920a-d27ce8334297", "sighting_of_ref": "indicator--7940403d-7c18-47d8-a163-06d4ced1a67f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d514652-2fd2-4a2e-b886-f2c82dbbe670", "sighting_of_ref": "indicator--a6f1ea9d-0aa8-43d8-bd5d-a178778f6707", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a2d055-e78a-491c-b4fe-b65c9c92c441", "sighting_of_ref": "indicator--cab8e3b8-0aa3-4072-8bf0-7cfc8573ae41", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10444156-b16e-4486-8ce9-f2c459926429", "sighting_of_ref": "indicator--f8d4df88-1ddc-4f0d-9979-870fccd9692f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04d2340-418a-4b72-8e38-737d95bbe9ff", "sighting_of_ref": "indicator--21341e43-d3a7-415d-be1f-6fe77d00fb32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f699935f-2309-4b86-9b39-a3b081efa950", "sighting_of_ref": "indicator--8e226449-3ff5-493f-b39f-2b1cca2df06a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c93c69-1d94-442b-8069-9ca599b40025", "sighting_of_ref": "indicator--8e226449-3ff5-493f-b39f-2b1cca2df06a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13cef33-d2bc-49b6-9122-c1c0684aef44", "sighting_of_ref": "indicator--fb3993cc-9714-4802-a33e-063425cea39a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111aa9db-46c2-43f5-8a10-f48e438e6164", "sighting_of_ref": "indicator--7b3c76a4-91d3-4c6f-b86b-b48d64f79552", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a504bb-8eea-4074-aa79-1211d2b64892", "sighting_of_ref": "indicator--7b3c76a4-91d3-4c6f-b86b-b48d64f79552", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00c2bd1-76d5-4626-bc35-c363860209e2", "sighting_of_ref": "indicator--a3bbd5f3-bc1f-4e06-8492-4f54e435fb40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8044c818-16a4-42eb-9407-e8675aacc6bf", "sighting_of_ref": "indicator--e7af29c0-8e09-45f1-8bd9-795de9deaba0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc0923b-180e-4c15-a754-af320be77189", "sighting_of_ref": "indicator--5a6b4a90-4ea2-4c18-92ba-26247e47e52f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf16373-36f2-4708-992e-046781957b00", "sighting_of_ref": "indicator--e96faab8-1830-4de3-9ac2-57c7396cbd22", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d756dc5-a46a-4cbf-8167-1447351bb422", "sighting_of_ref": "indicator--b5ba64f7-f6cf-4224-aa07-e79be0086ba6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b784d8-663f-4ec3-b7f0-9f530c55a01d", "sighting_of_ref": "indicator--b5ba64f7-f6cf-4224-aa07-e79be0086ba6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d81623-2edf-4e02-9ae7-c2edc6b946ab", "sighting_of_ref": "indicator--da49a019-6ac1-45b2-ac9a-21ce07b73836", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6e790c-3f16-4ab2-861d-95eb6fee3de6", "sighting_of_ref": "indicator--da49a019-6ac1-45b2-ac9a-21ce07b73836", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a3c3db-4942-41d7-82c0-2c3ba247cbda", "sighting_of_ref": "indicator--c575c380-3083-4deb-ad96-52195f5d4347", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0d0759-46bc-4194-b62b-02be11fba0d7", "sighting_of_ref": "indicator--c575c380-3083-4deb-ad96-52195f5d4347", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48db980-369b-4ef0-9dd3-d53bdbfdea5b", "sighting_of_ref": "indicator--c575c380-3083-4deb-ad96-52195f5d4347", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7791b799-d1c6-4007-88d1-ce1cba212764", "sighting_of_ref": "indicator--fc011c38-f161-45c0-883e-a4bc4546ea19", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ec4c13-ca8c-4170-8e09-1c84a3d6c8f4", "sighting_of_ref": "indicator--8f34855c-5d88-4b7d-8c4f-d78a4108d031", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842faaa1-1a14-46a7-948b-72453cb56f6e", "sighting_of_ref": "indicator--651b3449-a1e0-4075-92f8-8f9b409999ba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeef238-602f-498a-b4b9-57623645f85f", "sighting_of_ref": "indicator--32fc5bf4-3014-461b-b19e-4aee45fd0832", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5592d5fb-6b0d-4dd4-b6e0-b2aaf287bc91", "sighting_of_ref": "indicator--17208015-1b6a-4bc8-a138-d929e07db9de", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d28e0f-1444-47c9-b6cb-3a3c6c554d67", "sighting_of_ref": "indicator--32a9f50f-2380-46d8-b2a7-13c858f627e6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb40c5c3-0af5-4db4-8a6e-093c27f8b3f5", "sighting_of_ref": "indicator--894fe185-5f88-44b2-be2e-d72a1a75597c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7928a4f4-485e-4e4c-ae0f-9465cf5ededf", "sighting_of_ref": "indicator--427a3398-fd1c-4154-a4bb-369cddd67a2e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b92c3e-4129-470e-adc7-c49e0a3f2ed9", "sighting_of_ref": "indicator--4b3624d1-d36b-4cd0-90e1-4f2670643daf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4463f71e-7178-4dff-ada4-91b4a3e0fe7c", "sighting_of_ref": "indicator--1da4f9d8-3243-4d8e-ae69-e20f1216a1f2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cf6366-6d64-495b-bd8d-50a4ce974d16", "sighting_of_ref": "indicator--e240f48b-d7a2-4738-b7ca-879e586a3693", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54dbfc1e-6966-4f1b-b296-cb0514f722be", "sighting_of_ref": "indicator--6de36571-d8eb-4db3-88cf-3ea870fe8fbe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c50aa0a-c882-4b73-a4b1-d8240181f581", "sighting_of_ref": "indicator--3ff28ccc-535d-43b1-a7ae-c8f71d09851f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301a1b66-49a4-4eef-8ac0-2e5c75a9e7f2", "sighting_of_ref": "indicator--3ff28ccc-535d-43b1-a7ae-c8f71d09851f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90db4298-a15a-4bfa-be61-2b644e739e3d", "sighting_of_ref": "indicator--576c0be7-4192-4997-bc5b-e934eda31ec7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a509048-53f4-4d57-9ab1-ad0a9657a06e", "sighting_of_ref": "indicator--7eb7707b-8741-4740-819e-53af98dcbd0d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff277c2c-706f-4fe4-bac2-d12b0a091576", "sighting_of_ref": "indicator--7eb7707b-8741-4740-819e-53af98dcbd0d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4645038f-bb9e-4e43-9d42-14054bb963a3", "sighting_of_ref": "indicator--5aa9e932-1db5-413a-b439-1516e64aea3e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f4b873-4bf9-401d-96e7-fa4abfdeea01", "sighting_of_ref": "indicator--9a92d8b1-8105-4821-a8f8-5daab1a859c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7587d4ec-8c68-4f01-a14f-b5669e3a1c31", "sighting_of_ref": "indicator--9a92d8b1-8105-4821-a8f8-5daab1a859c0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf816190-293c-4678-bf4c-fea6be7ddc11", "sighting_of_ref": "indicator--cf1e9a8d-3cd4-4f1b-ade7-6387d1343629", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814f6079-5722-43fb-bb01-04351f0ab459", "sighting_of_ref": "indicator--cf1e9a8d-3cd4-4f1b-ade7-6387d1343629", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193cb74f-e155-4dc8-878e-9a07aa2b243d", "sighting_of_ref": "indicator--739a7277-27ed-4289-bddb-f3dd68a3582f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae5f1e5-0ba5-44c2-9023-085ea05fef9e", "sighting_of_ref": "indicator--46851cd2-efb3-4b30-928f-7942de0b7d8a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b32688d-5295-40fd-9271-89581e0a239b", "sighting_of_ref": "indicator--3a952114-a4fd-4cc1-991d-4ea8c7efb989", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd98dde-aa70-492f-86e2-c0eccccbfd08", "sighting_of_ref": "indicator--689ed8c3-475f-4932-aee5-64358d5c44ea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d84220-7685-4b78-afca-bd58bec747c6", "sighting_of_ref": "indicator--ea0ebc2b-460e-4f7f-a923-79b78372aee0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdadba3-6452-47aa-b0e9-905fdc18e3e8", "sighting_of_ref": "indicator--f6e0effa-d0c0-49fc-a158-68cbd242f443", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d2ae2e-649c-405a-81b2-86937a45e777", "sighting_of_ref": "indicator--f6e0effa-d0c0-49fc-a158-68cbd242f443", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd24a836-518f-47d0-8b30-52bd98394874", "sighting_of_ref": "indicator--00bd977b-1095-43f2-93f8-5d9a7f93720a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f38073-52a6-4fbb-8f49-888d0888c7d5", "sighting_of_ref": "indicator--ff805d95-fa2f-4c66-9fc1-3a5a896c79b4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00611ce1-ef32-4cba-ac0f-091230bcce38", "sighting_of_ref": "indicator--b9d1d8e2-9050-4215-9bb7-37ca0d7638ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5888a4-93d1-4915-abc4-df69b1aa7eec", "sighting_of_ref": "indicator--616e29fe-c69b-4d71-9871-747563287c77", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b871681e-d2c1-4d78-ac38-27f00ea54a78", "sighting_of_ref": "indicator--264dfb47-d2a1-4a93-984b-ebb6a633d8fe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b05bf93-e2aa-46cb-947d-c43a3ddde2eb", "sighting_of_ref": "indicator--ab9f5a44-36c9-4a76-8988-7c2fa932d1a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11470dec-0f80-4622-bb4e-dbac2cd4c165", "sighting_of_ref": "indicator--e4805816-040d-4578-85d0-f25ecb2145b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195afe86-763c-41bb-8418-f72643163811", "sighting_of_ref": "indicator--c0df8f99-531e-4233-a03d-e635018f87de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e21b2aa-a1da-4e55-891a-509ed271155a", "sighting_of_ref": "indicator--4d3067ac-b688-444f-9615-c381c1f6c11f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d38d78-0d2a-49de-ab78-518dc0ca2891", "sighting_of_ref": "indicator--274bcf2d-dcfc-44c7-8248-d7e410a5471b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aef7b95-8f4c-40cc-bc46-1e254054c7e6", "sighting_of_ref": "indicator--274bcf2d-dcfc-44c7-8248-d7e410a5471b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e954bf9c-0d23-4e1e-b989-31dfcd25a70f", "sighting_of_ref": "indicator--0a300e39-a20b-4123-be2d-b336364b59d6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fc0ac1-a1c8-4009-9e6a-3767d4ad3326", "sighting_of_ref": "indicator--8fdf7fe2-66f3-4ca0-a366-8a95d5183c69", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66df7775-17ca-4c2a-aecd-54627161a256", "sighting_of_ref": "indicator--8fdf7fe2-66f3-4ca0-a366-8a95d5183c69", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee020336-290f-484a-93b9-3f50a6dfb624", "sighting_of_ref": "indicator--c0c3693c-083b-4e60-822b-bd2293ec0e56", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf02c1e-d54f-4bc6-85c5-5b9e07cc00dc", "sighting_of_ref": "indicator--52cb7e85-b161-47be-95d6-707bdb8118d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46364f7e-3d51-4395-b95c-d9743ab36e9e", "sighting_of_ref": "indicator--e59b3c19-9657-4ddf-ba93-747c99d21a20", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16cb1dc8-95fc-4a23-8aa4-ab793d3a21ec", "sighting_of_ref": "indicator--04c2bd94-5d08-4bae-965c-c7d9b983181b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bc6ef0-39d3-4783-a577-ebc068cea0bb", "sighting_of_ref": "indicator--7ff91468-7a66-442f-ad01-d640fed2bc1c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0fd832-01dd-4f54-bd12-3add0fb854b3", "sighting_of_ref": "indicator--560a0c19-8e01-41b6-99b5-39198defc675", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad462ca-d79c-481f-9608-8325204a27f1", "sighting_of_ref": "indicator--fb24577c-08f0-4336-a607-f0a46c652f07", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c020d581-2249-4583-b7e3-0b80d9db8448", "sighting_of_ref": "indicator--ce6fab39-1378-4db6-ad21-1ef7927efe4c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695c261f-bda6-4139-ad62-8ca0dc685bec", "sighting_of_ref": "indicator--a9539ba6-f4da-4e2e-9bc4-a6ab687f5657", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea129793-8c24-437a-811b-d684113b6148", "sighting_of_ref": "indicator--33738674-b2f0-4523-857b-31405ef9988c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325ab6f5-fc06-4eb8-bc4d-303293e3c28a", "sighting_of_ref": "indicator--0dfbdab8-d284-4b70-80b2-170040b48777", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e11b4ff-56d2-4613-b870-de430b53b17a", "sighting_of_ref": "indicator--65b1adb8-a8bd-4739-8fcf-4180e79f58fa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3550633b-ac06-4cc8-ad96-aa17e75e915d", "sighting_of_ref": "indicator--b9b200bf-521d-4644-8bfb-cbda14a9b11f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f5eff1f-6c54-4ccc-b603-2acf5a27a4b7", "sighting_of_ref": "indicator--0a33780c-1097-4bcf-9f1e-ca712d2d470f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78ee63e-b25a-4bcd-820d-1b86ca2c51ed", "sighting_of_ref": "indicator--0a33780c-1097-4bcf-9f1e-ca712d2d470f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09efeb15-a780-41f9-84ee-d8041a585c05", "sighting_of_ref": "indicator--0ad01c44-56ae-467a-861a-6c231de18cf0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b5a0d7-e8aa-4a86-b486-99ab75302ddb", "sighting_of_ref": "indicator--c9770225-1ee3-4465-b57e-efbac57bdd55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992ecd52-2405-4bd6-ac8d-06be003ca4fd", "sighting_of_ref": "indicator--a062d7ad-be86-4c5f-9a7b-ab6b3d5dcbeb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c1cafc-11e9-4fd4-b119-1418908b9064", "sighting_of_ref": "indicator--c9204b7a-47a7-4927-9110-536da9a4847c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c057b482-d684-44db-a5a6-17bb0a5c9241", "sighting_of_ref": "indicator--db95ded6-2108-49eb-ab00-97d84ecdc264", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38129da-75bb-4d5f-843d-966ac3e14d2e", "sighting_of_ref": "indicator--44ab0557-5def-4d5e-a614-02c9254b3a8b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfbb0e0-45fa-480e-9975-343fe5a53de1", "sighting_of_ref": "indicator--913fa54b-4ce3-4609-8484-76c243587b08", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642a57e9-cc38-4672-90e3-9ba535fdb0cc", "sighting_of_ref": "indicator--6d0fe54c-b001-4bb6-8172-179f598a3640", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335931e0-8e56-4190-a04f-a57a5c7f0fc2", "sighting_of_ref": "indicator--6d0fe54c-b001-4bb6-8172-179f598a3640", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a05ff56-4dcf-4ebb-824b-f37e97b68613", "sighting_of_ref": "indicator--84c81c09-42fb-4ed8-8af0-b410287b2d1c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--739f58d6-843d-487f-82cf-8f1abc63c766", "sighting_of_ref": "indicator--0031f82c-0a0f-4885-ae47-180006d13398", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fdf7360-96ee-4d67-9ea1-f8defcd27b7f", "sighting_of_ref": "indicator--c271da1c-8337-40ae-b9c3-b9128a4a86e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8a74b8-eb93-44f0-b2e3-eb03a1df0604", "sighting_of_ref": "indicator--c271da1c-8337-40ae-b9c3-b9128a4a86e4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4171b06-90f5-485e-9a2f-69cb9e5dff21", "sighting_of_ref": "indicator--a8d62a30-2532-487a-b54e-f35e5e19a35a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9170f396-bd43-4c2b-83e9-28aef56fb26f", "sighting_of_ref": "indicator--256c2398-3a31-4710-a2e6-3ca80d0b6b72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3614c1ec-8d2a-4846-9833-fde0db262503", "sighting_of_ref": "indicator--b9548ee6-3a4e-4fd3-a860-a17d55892698", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3d4a36-d8a6-4996-b03e-0a45a4776a98", "sighting_of_ref": "indicator--b9548ee6-3a4e-4fd3-a860-a17d55892698", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225b53ca-28ae-4873-826d-112c3c7ad0a9", "sighting_of_ref": "indicator--24da0422-b9a6-4529-87dc-c4b5b1348105", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a647d202-3a7f-4d05-b4e2-0e1fb5b15405", "sighting_of_ref": "indicator--2c3fad3a-9cf4-42bf-8144-e3d4c0147db2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0fdbdec-8903-4529-b9de-6fb521e855f5", "sighting_of_ref": "indicator--fc635389-f30f-4f86-88f8-bcd65fe73322", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a94d38-0b68-4d01-9de2-84f15a5017ff", "sighting_of_ref": "indicator--c409f5a5-3777-4591-bd3e-2003120afeb2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b85477-2d53-4f05-890c-d442479edd9f", "sighting_of_ref": "indicator--6bb10525-263d-4825-af17-75238ef43149", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5db779-a520-47c3-bca0-7422195263bc", "sighting_of_ref": "indicator--ad9d5e98-2b8b-4fac-a223-02959e9f3291", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812da068-9e12-437c-a872-36d19b8c775c", "sighting_of_ref": "indicator--5e6a28d2-7c91-4d69-8ca6-8cc7372f78ae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c33cfe6-5f78-4950-b701-cc4e2a15eb9c", "sighting_of_ref": "indicator--1a4fca59-1d0d-4858-914d-597ecf5ad6da", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1607154-d6d5-47a3-ba6f-01169456bbe1", "sighting_of_ref": "indicator--47b1ca54-5d16-4cb2-9f00-f0a37150130a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef344ae3-b325-4c2b-a401-e4c8ce137daa", "sighting_of_ref": "indicator--6ae0f088-69af-44b4-99b7-fdbe3f7b2fd0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ced84bc-ec47-4945-8272-af4688c0c015", "sighting_of_ref": "indicator--1f6a29e3-a0cb-44aa-bf96-985ae8f40fae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830b4fe1-2ac3-4f1d-9bfb-84eb79bbf30a", "sighting_of_ref": "indicator--1f6a29e3-a0cb-44aa-bf96-985ae8f40fae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ff2e3bb-d68f-484c-83cf-1bd33804858a", "sighting_of_ref": "indicator--744cb4c5-ca1b-4db7-8cd6-b3ffe3c648fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d06796-5007-4a23-852d-6dcba87d18b1", "sighting_of_ref": "indicator--54e98bb2-d95a-49b0-9647-fc88ed31b663", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb46d733-abb2-4780-950b-835b1bb0d101", "sighting_of_ref": "indicator--54e98bb2-d95a-49b0-9647-fc88ed31b663", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f514e0-4467-4687-ad02-9dbfad234030", "sighting_of_ref": "indicator--6d26d9c6-c044-49b4-9320-83f6860d34d3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87696e6c-c847-4829-ab83-79283e9312ed", "sighting_of_ref": "indicator--487e8de4-c563-4bfb-b527-4c0021bae378", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787f9436-82b9-4e99-8289-1011bd3021b7", "sighting_of_ref": "indicator--03de3ef2-ba4a-457f-8fe6-12cd96ffd3f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bcd295-7bec-43e0-aba4-4969e73aea3c", "sighting_of_ref": "indicator--f8a110e3-e527-4e1a-adf2-ea52e72c67eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d8e985-3ff1-444b-b4f6-93d86f3e3c3a", "sighting_of_ref": "indicator--4fc4633a-21d7-43b6-be8a-84610fa49972", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f314db-6b2c-4638-8cf0-6e3b4d7f38ed", "sighting_of_ref": "indicator--4fc4633a-21d7-43b6-be8a-84610fa49972", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a70c2af-1b96-41ae-b797-30287a0b79f3", "sighting_of_ref": "indicator--1c9f4b48-6468-4473-bfe6-ccd2507e954b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c29c90d6-3698-4d7a-b814-d0382085bde5", "sighting_of_ref": "indicator--6e0c024b-a3bd-4399-a3e5-12681cdf46fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b84477-4964-4a5e-a6e2-bc8c74b1e512", "sighting_of_ref": "indicator--71877420-886f-4394-857a-9b0cfe3ecdc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195946c5-c5b0-4c06-8da0-7aaf1b120608", "sighting_of_ref": "indicator--3dd391c8-9326-42f3-86e9-3b10bc6b5173", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea9090b-d54c-4c77-a8ec-27062e33729a", "sighting_of_ref": "indicator--92548035-ea24-4ecb-8429-0e3ef79644d0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d977f1-6b8e-4c31-a19f-761b122bf752", "sighting_of_ref": "indicator--67262f88-3e0b-4c37-ace3-04121fb3e585", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05645d4d-d881-4a19-bb78-029335ecdf37", "sighting_of_ref": "indicator--67262f88-3e0b-4c37-ace3-04121fb3e585", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af7ca7f-80a9-443a-a16c-bfe9843180ee", "sighting_of_ref": "indicator--30e53cb9-098f-42fa-b098-6edc34e00e24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--022b4379-ce12-4c83-bf34-c3559e2cc88f", "sighting_of_ref": "indicator--c6df9c2d-315f-4cce-ac43-1e2426272a92", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0213b0a9-44ce-4762-9e95-371d76e873ec", "sighting_of_ref": "indicator--c6df9c2d-315f-4cce-ac43-1e2426272a92", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f86edf-548e-4f1a-917a-c89d1dc8b260", "sighting_of_ref": "indicator--2ada7a10-64cc-4799-9507-ee6dc0ff80b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e1f8f58-2207-4e29-b1cc-67fa8c3fa643", "sighting_of_ref": "indicator--2ada7a10-64cc-4799-9507-ee6dc0ff80b3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded8a784-7ebe-466f-ae47-1474685a0ee5", "sighting_of_ref": "indicator--558dc221-ac0b-4bea-8d37-9197a8d067c7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0743b79-748e-4634-89a5-dc29f780696e", "sighting_of_ref": "indicator--215ef840-1e72-43b0-98fe-42e5dc17951a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268761f5-d287-431c-a7af-de198c0ab689", "sighting_of_ref": "indicator--bc1baea2-750f-46e5-84f9-d50955581860", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d18495b-ef28-4ce0-b1f1-f6b0b30e3b34", "sighting_of_ref": "indicator--c8326a9c-5d15-4270-a7dc-dbf70f8609cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06943b73-36c9-4a69-86c9-13bd8959ab74", "sighting_of_ref": "indicator--c8326a9c-5d15-4270-a7dc-dbf70f8609cc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750576f3-66b0-441a-b6e4-ab47703fb226", "sighting_of_ref": "indicator--b4734e65-6987-4bb0-bc69-dd3bb5fda0f5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6345522-0fa8-4fec-b419-98b070461ae0", "sighting_of_ref": "indicator--f0e6b158-acb0-445a-a3f1-81602d34f392", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b12dc33c-2e6a-4e3f-8dc2-3af18dd8601f", "sighting_of_ref": "indicator--0225f02e-13a2-4ddd-9de3-757b23920f20", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c1800b-dd2b-450f-bd3d-e237fd04077a", "sighting_of_ref": "indicator--dab91bf7-23e0-4712-97aa-ad6efc1ece55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db29ec71-77fd-450c-9e60-6a5e00c52276", "sighting_of_ref": "indicator--30c9e892-ec6d-478e-94e3-adf8849f56fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a9e8d7-b6f1-4b01-ae74-1fbdb0a9ae71", "sighting_of_ref": "indicator--d98aefff-0092-4e47-ae94-460a976b6335", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e1818e-2781-4f91-b6ed-c83cd731988d", "sighting_of_ref": "indicator--66a5df40-ece6-487a-b953-0541d3408a6d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16e6533-a3b8-481f-b374-3299a4980729", "sighting_of_ref": "indicator--66a5df40-ece6-487a-b953-0541d3408a6d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dd11a1-f5d7-438d-8fb6-09ff5ab2bb51", "sighting_of_ref": "indicator--4fd215b4-faac-46c9-8357-470662d5a142", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa2f407-02ea-4082-a080-1c3d11ee14b2", "sighting_of_ref": "indicator--3bd93bc5-0804-4440-911e-38c412938acb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942f6e09-8e33-477c-ba92-1e7eae9389d7", "sighting_of_ref": "indicator--3bd93bc5-0804-4440-911e-38c412938acb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62506052-57c8-469a-a6a3-6ba63226d3b9", "sighting_of_ref": "indicator--3d87a887-703b-4274-af56-30e025590697", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27ea39ea-520e-4396-91b0-b49f4968da99", "sighting_of_ref": "indicator--f595d9f7-aff2-4852-9c29-bbd43a2b7b89", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e8f49a-2f5e-4125-9a8b-c79c018fa739", "sighting_of_ref": "indicator--1a2a086d-2c43-4011-b724-25ac8dd01718", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2932b5b2-ac85-40c8-b9af-6dfc5f31bfad", "sighting_of_ref": "indicator--59632710-e4fd-4f5e-9cc6-099f8da0093d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c795a50d-44ff-4b88-967c-21260f50327e", "sighting_of_ref": "indicator--1ac5688c-bb24-4aeb-b4a7-c936e8b2eeac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7b3f70-fd4b-4ed0-b606-a559c4f53104", "sighting_of_ref": "indicator--855eed75-5b72-4d2f-a56f-a806c70766ab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cb87ae9-98ba-4036-a2e8-b3c217e868b8", "sighting_of_ref": "indicator--855eed75-5b72-4d2f-a56f-a806c70766ab", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46d8f43-cee2-468a-8afc-6575963cb429", "sighting_of_ref": "indicator--9ebdfdd6-a77e-4cd2-9202-72bcf6084073", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef6a7f9-b7e7-4412-976f-b374decbe3a3", "sighting_of_ref": "indicator--fdf41c1b-6aff-4f5c-82d0-dc55ab1bb77e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9362db76-814a-4c91-afce-5e713027ee33", "sighting_of_ref": "indicator--f2c9890d-0a83-4c62-8946-ee2753ae6ef7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacd5d4c-0cee-4b80-ab83-0261a7f73472", "sighting_of_ref": "indicator--952a1828-7058-438e-897b-5501fefbc38c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78f7572-8f6f-4003-ab2f-c8fb62147c15", "sighting_of_ref": "indicator--9427005d-a0f0-433d-8e00-04f4b63b3322", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da272c5b-327e-4875-b871-089f11da0030", "sighting_of_ref": "indicator--21f9b719-d236-469a-9404-6fff4bee3002", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b0fdc1e-38a1-45e3-b854-78425e18b9d6", "sighting_of_ref": "indicator--21f9b719-d236-469a-9404-6fff4bee3002", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77bb889-a4ea-4845-8e22-918e9a37f2f6", "sighting_of_ref": "indicator--c5b38b37-5810-41eb-9f32-6c175ec370e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fbf59d-706f-4b29-bfaa-8811069e7145", "sighting_of_ref": "indicator--3d221999-520e-4572-8954-8efac3380422", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d310be-4b91-4521-84ca-42e99f12cdb7", "sighting_of_ref": "indicator--6e11aa62-0696-4a96-a1e8-5e9e4835619f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c17440-e25b-4192-9420-389e336e4e97", "sighting_of_ref": "indicator--6e11aa62-0696-4a96-a1e8-5e9e4835619f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f59e5a-30a6-46da-abcc-a5bc61fc5755", "sighting_of_ref": "indicator--20dc8873-2b6c-44e2-802b-835336e8929b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4156a2-396b-46ec-aa33-571f766ae786", "sighting_of_ref": "indicator--20dc8873-2b6c-44e2-802b-835336e8929b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--502e89b8-2cd2-4add-a782-089e13b8d055", "sighting_of_ref": "indicator--25897269-c253-416f-8aee-4bdd3e9d5519", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86092d04-8c8e-44b9-9a20-b66983f16eba", "sighting_of_ref": "indicator--74c3cc23-90ed-463b-9011-61d6665770c5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fbcb0e-2169-4709-980d-d505b3445e7e", "sighting_of_ref": "indicator--c281c007-697e-4a91-a559-e85fada17200", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688e8a11-694a-439f-8437-582080a62a0d", "sighting_of_ref": "indicator--0a40942e-18b4-4396-8c41-6edfff9db5a3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ba77d7-82df-4f61-8290-6fb313c0ab80", "sighting_of_ref": "indicator--55a65072-5a02-45fa-9fde-22c5b0051ae4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffa721f-8f78-4152-ab5b-b3dc2c0b74a0", "sighting_of_ref": "indicator--86596bb1-1499-486c-b053-398b6895a6d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a870c5-6308-4cb0-a960-0a91e0d16e15", "sighting_of_ref": "indicator--86596bb1-1499-486c-b053-398b6895a6d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6d6cdc-cc7c-4e67-890a-858a473223c5", "sighting_of_ref": "indicator--42e3cbf4-b4db-4237-b772-475033d867a2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ebc2e2-d5e4-43a4-8c8d-88751eae8320", "sighting_of_ref": "indicator--ffa4e4d5-7268-450b-8030-6f73bb8c4410", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebff3a53-cefd-432a-a789-35dec77eee6f", "sighting_of_ref": "indicator--2dac0b38-4a82-4aea-8559-633518cb4f46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de1e0fb1-087f-469c-92e3-5fb5c200df95", "sighting_of_ref": "indicator--2dac0b38-4a82-4aea-8559-633518cb4f46", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2701eda5-fc52-479b-8c29-3bf326c22dcf", "sighting_of_ref": "indicator--8e01b9b9-0bed-4912-9c7a-4b59d3dd1c9a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec24b0d8-5c90-403d-9ebd-ad5f7a4ab9e9", "sighting_of_ref": "indicator--8e01b9b9-0bed-4912-9c7a-4b59d3dd1c9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ec2e01-14c7-48f8-b393-194dd966d46c", "sighting_of_ref": "indicator--6fd46d2f-972d-4005-93b0-56e02114471f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b583e7-a619-4a49-9d0a-db6fbafcaf48", "sighting_of_ref": "indicator--51d18595-1a6f-42e1-a9e3-9fcdf3c44825", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4783e4c1-1d93-4637-93d3-1ea6d45bff7a", "sighting_of_ref": "indicator--e691da88-e308-49ed-98be-08f79be24b03", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38354ff9-858f-490d-ae96-5a4b7c499cff", "sighting_of_ref": "indicator--cf799aa4-9f66-4ccc-9d61-65df9199a8b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4326e3-275a-49b6-b22d-b1fc759d0caa", "sighting_of_ref": "indicator--dd800370-afd6-4928-aac6-d1b6e0a07a49", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9f0fbd-4206-47c4-bde3-6debb5c54d22", "sighting_of_ref": "indicator--ad0d89dd-1353-4ca7-b760-3c101d64f1a9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fbeecd-f653-40ca-8000-c7f1b424d3c9", "sighting_of_ref": "indicator--4a306e78-1ff3-4c1c-a364-d67c3bf490d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43b9418b-5bbe-4b4c-b015-f16a3cb147f4", "sighting_of_ref": "indicator--116948d1-86a7-44d5-abc9-199ff7a65aaf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba694fc-15ba-4bda-940d-214fb76d3e14", "sighting_of_ref": "indicator--5c4220c5-a2c8-4d54-9e12-9bcb6e2bb842", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e23d7e5-466e-4767-b751-48a1df4d8251", "sighting_of_ref": "indicator--e46a2c36-82fc-463d-9ea3-a85bbfbade96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227128bf-28b1-480e-80e7-16a9a905c630", "sighting_of_ref": "indicator--c4a548da-68f2-4322-90ec-6726e98aa9e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eff4d9f2-1773-4722-8c83-1cb9db185e62", "sighting_of_ref": "indicator--6f7386b0-ee34-41ea-b5f3-40ed7c3f72bb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abe5498-b481-4a51-84d8-96a6e9b7e53b", "sighting_of_ref": "indicator--a36c7637-c896-449d-8c53-170b6e1befb0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2f4f2d-fd35-4a20-aeef-0fc429d4a7e2", "sighting_of_ref": "indicator--13019119-2dbe-4714-b8ff-d7d6d5627d3f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e95efc93-0b04-49df-a2c0-37a2eecf588d", "sighting_of_ref": "indicator--dea29ca0-0624-4975-9c65-88fbee88173e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f195ec-3031-4063-a67b-b231889199f1", "sighting_of_ref": "indicator--b9f2fce7-76db-482d-8d7c-dbbeff922c22", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b764944c-0737-438e-8ccd-2994e638783e", "sighting_of_ref": "indicator--577ac5dd-2eef-495d-a4f8-f7e569082534", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a02add-b0bf-4898-86e8-f8b896497c5c", "sighting_of_ref": "indicator--577ac5dd-2eef-495d-a4f8-f7e569082534", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f78875a-3c97-4356-88c6-8748662c5150", "sighting_of_ref": "indicator--c92d8cc0-c3cd-4f9e-9c83-2458f4e5fafc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b926a88d-f81e-4ce4-99d1-ff6a4b68bc23", "sighting_of_ref": "indicator--c92d8cc0-c3cd-4f9e-9c83-2458f4e5fafc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8eac93-6b36-49f0-9a37-4e945920d27d", "sighting_of_ref": "indicator--597681c3-2411-4bbd-8832-e36e30834e95", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1dd682-11cf-4f3a-8eae-f32149c83942", "sighting_of_ref": "indicator--576dda17-211e-47c8-9013-7d6a7c4af500", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c60ac4-f72e-4d4d-a751-66f208e8c3b2", "sighting_of_ref": "indicator--d611249d-723c-461d-a8f5-0e2618712a3b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5da33d7-5edc-40f8-8d76-001fc9158885", "sighting_of_ref": "indicator--d611249d-723c-461d-a8f5-0e2618712a3b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc61184-e435-4b22-bcbe-7bc02cb1f566", "sighting_of_ref": "indicator--3a83a6af-d655-488f-b3a1-ef9da6e9c2e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b427c05-a1cc-4d35-8006-215cfc950955", "sighting_of_ref": "indicator--2765801e-241c-4e24-beb4-fc83de116b17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb16b58-a652-4acc-a166-a0e5720ca5a4", "sighting_of_ref": "indicator--6510daf6-e4c9-40bf-bfe6-dcbff67b4044", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf7cfef-e2c9-48cc-8bd7-0af1d24c7ec8", "sighting_of_ref": "indicator--cd9b9bdb-50d1-43d9-a8ab-62463a690df5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ceb4fe1-bf26-4bc1-a00d-984d1a1fc9e0", "sighting_of_ref": "indicator--a71c5bc0-5bf3-4f20-81b8-3936eefadc9e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a5a9c8-d552-4317-8efc-83aeef76aed5", "sighting_of_ref": "indicator--fa4810e8-2a8f-488e-9752-4488058a3498", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf440ad8-b819-4c01-a217-1631b3ef2712", "sighting_of_ref": "indicator--43d5ee79-d180-4b3d-98dd-2815872fe3ae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c90d0e-a466-4c17-a4c7-5f2ef5b9785d", "sighting_of_ref": "indicator--d84ff500-24a0-4e87-b878-f733bea60800", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1a938b-4d63-4950-9ecd-aeea6ac799b9", "sighting_of_ref": "indicator--2963d808-1dd4-4f6a-a8cc-19032b83641b", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9fe5d3-d075-4023-a265-bd34adc23d33", "sighting_of_ref": "indicator--5b9bd647-520d-4f68-b7ff-d921d7a6c0b9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e4bcb3f-2f8b-4387-abed-f885f76b0acd", "sighting_of_ref": "indicator--f00c1441-4fc5-42d9-859a-f38e179069d4", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7026cf7d-6376-414d-bf90-cef1f562fb6a", "sighting_of_ref": "indicator--f5d459ab-4f34-4d18-9649-422b0632982e", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2eafb6f-58fd-479a-b28c-5c5596e85ad4", "sighting_of_ref": "indicator--de571318-4e49-4ac3-ac2a-bbbc5a2e7571", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de4f580-4244-471a-983b-cc2c80a2f53b", "sighting_of_ref": "indicator--f900e619-2fee-420b-b813-3a11fc3988fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81c85a6-11d3-42e3-89ee-6bedeb9c1200", "sighting_of_ref": "indicator--fa9f0f82-f248-4a50-a0ee-811cae987fb6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e4a8e7-4f9a-4cc3-982b-c2806ea25348", "sighting_of_ref": "indicator--4312370f-4c65-4657-8821-859b1c1d580e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abeea6da-98c4-4a1f-a9fa-c68cf5d0d2bf", "sighting_of_ref": "indicator--f4d2dc02-4a23-40a8-b940-5f9a8c13ad9b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1ac8d1-72d1-456c-b022-795134b08529", "sighting_of_ref": "indicator--f4d2dc02-4a23-40a8-b940-5f9a8c13ad9b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4228879e-69ba-405b-a693-ccb41851cc6e", "sighting_of_ref": "indicator--dd568fbc-c4f5-40c5-932e-cb1d0dc7cf7b", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5401106c-dec7-47b0-b470-394ea0168af7", "sighting_of_ref": "indicator--20186e56-0b94-4a51-a986-91c0c1f7b350", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef72b4d-03da-4b5a-bbfc-4295f08f6a91", "sighting_of_ref": "indicator--a9a4132c-81a4-420f-b15d-12a50b7b490f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726d0f7a-3a95-4a4e-9647-e7719463a1f3", "sighting_of_ref": "indicator--55861fc5-3233-42c4-82dd-a8627ecde523", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef68da72-fc26-4060-a371-30bf6251dafd", "sighting_of_ref": "indicator--55861fc5-3233-42c4-82dd-a8627ecde523", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b294dd-d342-45b8-97e3-f953ce4bc0d6", "sighting_of_ref": "indicator--f41c4099-4879-4543-a31b-f50fc43d1abe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5814d420-e5b9-4532-86b0-d8e6ac2823de", "sighting_of_ref": "indicator--8a855bd4-580f-4940-97ad-c592af2de1c0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af19923-b870-404a-b6ba-82f78577e648", "sighting_of_ref": "indicator--989a0437-1d4a-4929-a81d-891f4f22901a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66283dc-529b-40a5-8942-88fb4c52f3c4", "sighting_of_ref": "indicator--55738dd8-9a68-420c-9029-a9c42c60c6a1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411bab94-244b-4fa8-b11e-246368b4b206", "sighting_of_ref": "indicator--c9523f19-f63d-45dd-b810-ea9b78a458f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f073465b-eeb2-4805-99b3-49ab4cdae733", "sighting_of_ref": "indicator--b785e33c-3c58-4e74-be2f-0fba2be41435", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7277149-08bd-4dbe-97cf-dd4c15a3988d", "sighting_of_ref": "indicator--b785e33c-3c58-4e74-be2f-0fba2be41435", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a244736c-a057-41e3-bdbf-9d821fa02fca", "sighting_of_ref": "indicator--43d20819-b93b-44be-a44d-b9407f4a85df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a356dc5-6936-4aca-94ca-1dd6c5ac17f3", "sighting_of_ref": "indicator--b560551b-d5ba-4202-aff2-30bc9e1e5d8e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9db7ca-c3be-4894-a30c-9250d4a455ff", "sighting_of_ref": "indicator--088c0653-f5b1-4de8-872c-859056acbd63", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d5df61-f9a5-4732-9b9c-64fa19ec33a1", "sighting_of_ref": "indicator--893cd1a1-6636-4bf0-9236-bb846627c770", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9213ee44-c06b-4e5a-be87-d02bf1b2aeba", "sighting_of_ref": "indicator--b71bfed7-12cd-45ef-b5c5-011ebd2e0ee9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdb7c4c-cf89-41c5-a1e3-4875b0653572", "sighting_of_ref": "indicator--837f3edc-f111-4c38-a668-e3598d970308", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c3fce7-22cd-4fe2-a2d6-79cf168e481a", "sighting_of_ref": "indicator--8b21aa0a-8e95-4756-95ee-00153d7e48d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d82a01d-4cc9-4e9e-9d19-2e80f06f2e35", "sighting_of_ref": "indicator--fe612200-bb3f-4f2c-aa67-a1ea93edf20c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1599515-173d-436a-9392-68806fc46623", "sighting_of_ref": "indicator--08aa523f-47ed-4eba-8064-5dc98ba05a3c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a4beb6-d79a-4b9e-9b55-4a3d434e9e62", "sighting_of_ref": "indicator--77bf7add-37ef-4732-96f9-157fa731534e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a68c98e-2652-40dc-a283-568d09c34928", "sighting_of_ref": "indicator--7326e629-b8c7-4bf4-b6b9-e208fc03f3e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f24673e-c02d-46c4-b8e7-a18dbec183b7", "sighting_of_ref": "indicator--5b6a26e0-59c3-4a8f-b625-4741679aa9b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4c8931-163e-417a-919c-d927579d9636", "sighting_of_ref": "indicator--fdcdc56c-543e-4a4a-ae25-ed34f8a05a66", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152b498b-d4d9-42aa-bb09-c4577dbfedc3", "sighting_of_ref": "indicator--bd569868-987b-4031-833e-a4fa4c6f2ad5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c7b9d0-ba01-4f51-a182-21cb6fd743f9", "sighting_of_ref": "indicator--c267749c-c916-4223-ab73-b9ba1bb9f90d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683166e5-1f70-4a66-a37e-80ab30207b40", "sighting_of_ref": "indicator--a1cf16e1-8d63-42ac-8032-12ab30da1703", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abe4dd64-4997-413f-94ad-099709cec6cb", "sighting_of_ref": "indicator--99ce5a47-b501-4316-a8a6-421abae48b79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99612be-3c2b-4660-88e6-aba294ee316d", "sighting_of_ref": "indicator--ae50bb87-95b9-44d0-a8bd-72f8f35d126d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57db1dd6-318d-48f9-9367-aeac04aa3835", "sighting_of_ref": "indicator--ae50bb87-95b9-44d0-a8bd-72f8f35d126d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--791ea73f-05f0-481e-b17c-86ee7fe09141", "sighting_of_ref": "indicator--171eb50d-710a-458c-aa49-4458adac53fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f01473cf-dabe-4726-ab95-ad3904bd1fdf", "sighting_of_ref": "indicator--197d253e-7df7-4178-9d06-867a92a73599", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce7d9a0-2967-4086-8895-9e60ca25dffe", "sighting_of_ref": "indicator--c953a04b-7cf7-4674-b23a-00926003166a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c2e26b-9745-4f83-b30b-aec2f47febc3", "sighting_of_ref": "indicator--301802dc-6ae2-49ae-b099-d2975cc089cd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a732ab-5350-4dce-9fc0-587829f3ff51", "sighting_of_ref": "indicator--21160c95-14eb-4de4-9127-a52534051714", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f682f7-709a-4d9d-922a-d5e75fa8b7dc", "sighting_of_ref": "indicator--f1d34709-35f4-4dad-9088-9ce7f1ccd911", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bcafe6-b089-4e3c-9481-18650f7491d2", "sighting_of_ref": "indicator--1978c2e2-cd80-404c-8049-947b1d2c1d04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a479cfb4-5677-4ca4-985b-5b1d4f5ce56e", "sighting_of_ref": "indicator--e1bef9c0-6f7c-4163-8f81-2c7cf1756127", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea14c830-72a8-4113-9d83-4d1d4ddf5d89", "sighting_of_ref": "indicator--e094318e-cda6-4086-91c4-3831a8ec7081", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4b11f5-87d5-4a1b-80cc-b72281064525", "sighting_of_ref": "indicator--73c1b140-2129-4b4c-bf3f-6fa55740ccf7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778cc8aa-321d-4853-9502-5faf9739a98e", "sighting_of_ref": "indicator--35105e4e-c46c-4ae4-aacf-549982b22c16", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2bc817-5d00-4981-973e-cb51cb531d36", "sighting_of_ref": "indicator--cfc352fb-3bc5-4258-8f4b-144f1a6371b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453382c8-a1ee-4f87-960e-04d0367a466a", "sighting_of_ref": "indicator--b0ae00e6-7a29-4eee-9ede-082f56e9a4d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d77b6e-839a-4704-aaf0-b88c69b146dc", "sighting_of_ref": "indicator--b0ae00e6-7a29-4eee-9ede-082f56e9a4d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e972b78-caf3-4719-bc99-96232e8344bb", "sighting_of_ref": "indicator--8e8a22ef-14a7-4f33-9b00-2fc946d72b0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21dca6c2-ab56-45fa-be3d-a4434fee7b1b", "sighting_of_ref": "indicator--cb675127-58f2-47e0-a486-e5098668e2fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d098a4-0ac3-4e2b-aa93-4db05f8818a5", "sighting_of_ref": "indicator--066ae2b3-bdd4-4160-8275-30e017e938bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9125b931-4cae-4cff-aa03-2c41c92df0d8", "sighting_of_ref": "indicator--f01427b9-78a1-4f12-a222-805a979892f7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcab487-6a4a-40a9-b423-699cc1bc4975", "sighting_of_ref": "indicator--d036d176-977e-488b-8a98-6410762b73fe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbabbcd-4433-45d1-a614-c8b014a7e967", "sighting_of_ref": "indicator--1f47f010-b8b2-4788-bdaf-4e4d91e98744", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39327c03-8429-4d94-b007-f031be585f12", "sighting_of_ref": "indicator--10d065a2-d3fa-4b87-9454-ca4cfbb0af13", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9787ef17-c4f1-4f46-b065-17f9a99c2284", "sighting_of_ref": "indicator--7082d02b-df1b-43d1-989a-2de0a4affe46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04e0e94-e842-436d-984c-8e73e53f4e98", "sighting_of_ref": "indicator--1ae733d4-b4d9-49a6-85e8-795e747caf31", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace03b44-4def-4f6f-b5b7-22f0d757d1b8", "sighting_of_ref": "indicator--d4f66933-7a31-423d-af6e-293a2c3097d0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c22e0e76-d41b-4f57-849b-5fd1741ceef6", "sighting_of_ref": "indicator--ed29dd83-d6a0-461b-bacb-4a5fa9e4cc50", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514321ef-f838-433f-a7a5-1b1744949799", "sighting_of_ref": "indicator--538352cf-796f-4f23-a76d-e7e8befccc29", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59869b39-b05c-4f67-86b5-8e75036f4707", "sighting_of_ref": "indicator--d4a14764-9e87-4d40-829f-27ccebcdf176", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22d2095-79d9-48bc-b3ec-bb6aa579fed7", "sighting_of_ref": "indicator--137755b1-b107-4e43-a1fc-97da31ecb763", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0f8872-e5ce-4248-9c3e-aa7ed83195de", "sighting_of_ref": "indicator--5706a9d2-2305-4709-9c71-40784c3d4ffc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e4ab674-7363-4aad-aa11-7bae38cca2c8", "sighting_of_ref": "indicator--0079e77e-d9ce-4653-a97e-0ab7956a530c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0987870-b911-41af-a0a5-d46626be4e7b", "sighting_of_ref": "indicator--49c790f4-afa5-4454-88aa-e0baafcd244b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771f0f01-2932-4c85-acfc-8ea308b8d83c", "sighting_of_ref": "indicator--e0a84f9a-0d32-49ab-8696-97ea4c5a4231", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e4a0c2-0894-45cd-8a17-468a0c7ed20a", "sighting_of_ref": "indicator--f0d96b9a-86a6-4091-903e-8b7b5c148ff7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13379c6b-c41a-4d68-bc22-558d2d73e314", "sighting_of_ref": "indicator--65cdda1f-ee3f-4d81-b5f8-3005d967e86c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7245128-824a-4f4e-9fdf-5ccbdc557a3c", "sighting_of_ref": "indicator--fd727618-affe-471b-9d61-e5577d442bd4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00704f67-7a3e-43f4-b77a-de651c58c0f9", "sighting_of_ref": "indicator--31c1faf0-f9f6-47b3-a59d-170fbc600079", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feee811b-fb43-41c1-b38d-08a5187f6332", "sighting_of_ref": "indicator--099a4dda-9635-4042-baac-bc458f902d54", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e260b48-2639-4a2e-800b-888bdf1eb27c", "sighting_of_ref": "indicator--0674ec99-47ab-4a92-917b-e15877bf62bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30aa7f60-c43a-46f7-b41c-24c1883c911e", "sighting_of_ref": "indicator--0674ec99-47ab-4a92-917b-e15877bf62bd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f802add-ff7e-4608-92df-6cbda20d9c20", "sighting_of_ref": "indicator--c6ba6b20-dab7-4b8e-a061-10a9ccf7f000", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2082da-4cb0-4da3-a7e5-19d8ee58c391", "sighting_of_ref": "indicator--f8fc991e-ca82-488e-81bd-81e1b2f1ee88", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19564165-91e7-4253-8a43-a0315a9c6606", "sighting_of_ref": "indicator--a5c00aa6-c656-4d79-bf76-26a26e7924f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a9c04fd-aae9-40ab-8e29-efb7aa95ae90", "sighting_of_ref": "indicator--a5c00aa6-c656-4d79-bf76-26a26e7924f2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38cbacc-de69-4024-838e-8b887b09a3c8", "sighting_of_ref": "indicator--3dd93471-f5ad-4225-a39d-0cf81368115e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7af224-dddd-4370-a320-06ac72ba70a4", "sighting_of_ref": "indicator--342d1cae-6e7d-4807-a2e0-5d35666613d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae82fb16-fc11-4213-b945-1d6d9e04b09c", "sighting_of_ref": "indicator--342d1cae-6e7d-4807-a2e0-5d35666613d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4f1d48-6d68-44dc-8a6e-6bff230fbd04", "sighting_of_ref": "indicator--39d8f908-7776-4615-8d8a-64d2e82c639e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d62e5f-e753-4441-a632-68d0018bc740", "sighting_of_ref": "indicator--74e77c8d-b868-447e-a0f4-b698f256b421", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535416d5-a516-430b-8b00-fb39d3c72119", "sighting_of_ref": "indicator--72ae615e-6cad-4f34-8827-c7a7b1db06fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7adacd3-7ed7-402d-8b49-8aa3e972dbca", "sighting_of_ref": "indicator--72ae615e-6cad-4f34-8827-c7a7b1db06fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13619860-7ed9-40e3-af36-3fb9b2bcd8a7", "sighting_of_ref": "indicator--df82ad61-05dd-4bae-8c1c-ad65c00c3895", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d0b72b-7280-4979-b21d-4f0d21a2f91d", "sighting_of_ref": "indicator--df82ad61-05dd-4bae-8c1c-ad65c00c3895", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371c8f3c-720f-465c-b5aa-d09971c711cc", "sighting_of_ref": "indicator--ba8f30c4-38b4-43e8-843b-e8527a563306", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a9dbb6-caed-43e2-b6f5-725a13bbab4d", "sighting_of_ref": "indicator--af93d9ef-e111-4225-a0e0-dd2286ddf90e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108c3716-3f29-47d7-84d8-10bbceb541c9", "sighting_of_ref": "indicator--af93d9ef-e111-4225-a0e0-dd2286ddf90e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe628b2b-5b2b-4b40-b221-ccb227aaaf3e", "sighting_of_ref": "indicator--91bd1d79-e911-477a-a809-898a200c5743", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bbe53c2-5252-4bea-a8fa-529bbaa43b34", "sighting_of_ref": "indicator--c60035aa-eeed-4ab7-b422-8a55d70bbb62", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b306eae4-a985-4abe-bc4f-8db10f481e65", "sighting_of_ref": "indicator--c60035aa-eeed-4ab7-b422-8a55d70bbb62", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d0148c-7a16-4f96-8d75-7ab4efd82f50", "sighting_of_ref": "indicator--0d9dd488-5061-402c-bead-1b38631b0322", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47be408a-586f-4097-b4ff-080c9d7cdfce", "sighting_of_ref": "indicator--0d9dd488-5061-402c-bead-1b38631b0322", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00901d94-755c-4203-baa1-f90f2f490e88", "sighting_of_ref": "indicator--0f3c0d95-4dce-4983-b942-cca4c8700a1c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68656be0-7c47-4bff-a444-0076685981f9", "sighting_of_ref": "indicator--70319f93-9a34-4085-8392-14921b7bded9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdabadd2-c6f1-4dc3-acb0-22094d7e93c1", "sighting_of_ref": "indicator--70319f93-9a34-4085-8392-14921b7bded9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1c207c-125d-40b8-a6f2-6300f8f678e8", "sighting_of_ref": "indicator--bc2a3eb7-5c71-4f0d-a437-63ec93d45271", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28b6002-8167-4ec7-9bec-d7c7a9574651", "sighting_of_ref": "indicator--bc2a3eb7-5c71-4f0d-a437-63ec93d45271", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9221f515-548d-44eb-8e59-9bedddc36cb6", "sighting_of_ref": "indicator--da160b50-9c35-4e05-9e42-c498f668bdf8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244eda33-aef0-41c0-8704-fcc88ad9dca1", "sighting_of_ref": "indicator--c5f64c28-9478-4531-aa0a-207d23169f2a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a22dd514-a31c-40fe-b85a-e3a49577f5bb", "sighting_of_ref": "indicator--130b6c64-6890-4815-aac8-c966e9fa417c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b50c8179-faa5-4309-a73a-db2b475b7c26", "sighting_of_ref": "indicator--70822ef0-0d6c-4c71-86af-16f1b4917fc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1b4788-80cc-4c6c-977f-9304b3193715", "sighting_of_ref": "indicator--70822ef0-0d6c-4c71-86af-16f1b4917fc5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bf23dd-f070-400f-9e11-ffd224e8b9ca", "sighting_of_ref": "indicator--f1501b54-cb74-4f1c-b3fe-ead5e2ab66a4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c574dbf-6410-4ab7-b56b-56d2274c45ac", "sighting_of_ref": "indicator--05c5310d-a911-4329-a3e1-38262e38e6bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bf158d-d6bf-40e2-844c-b031d063355f", "sighting_of_ref": "indicator--218cc31d-a6be-4d6c-85f9-cde53f62cb9f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11d8764-bc01-4c4c-82a0-f67300875589", "sighting_of_ref": "indicator--fff25a47-58f3-4cd3-b782-42c01124b2de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7550cbf-1647-4ba6-bba8-e06f745bec16", "sighting_of_ref": "indicator--f8da1833-f972-4abc-bc0e-1af5f9785b17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455d0b6f-5106-422f-b958-50addf7c6181", "sighting_of_ref": "indicator--46ca2eaa-cd4f-4adc-af3c-a8f9db396336", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5815bc-b7a7-4c67-955a-dc1ecddd4fcc", "sighting_of_ref": "indicator--4a98775f-dbad-48cf-9bf5-63307c2ff31b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6302d4bc-d61f-44af-8da7-70d31ce5ce92", "sighting_of_ref": "indicator--4a98775f-dbad-48cf-9bf5-63307c2ff31b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bcee549-a001-432e-a21c-9996fbf91c48", "sighting_of_ref": "indicator--35b28dda-8ca1-4573-b562-731049b7d7c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67857b9d-42bd-4c6e-8307-2d65f64d2225", "sighting_of_ref": "indicator--35b28dda-8ca1-4573-b562-731049b7d7c9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e525cbd5-1d4b-40b6-a57f-3be931f039a0", "sighting_of_ref": "indicator--f9007a39-7581-4cd0-81f9-7c779e2e2ec7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f931adda-9834-4038-88a7-d3c912e676f1", "sighting_of_ref": "indicator--229a191d-c0f4-4994-87f8-a214b8f55863", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76452b7-73b2-4e7f-8ebb-7e05016d9faa", "sighting_of_ref": "indicator--229a191d-c0f4-4994-87f8-a214b8f55863", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7fff3a-2e3c-4d1e-8197-cfe474117ef6", "sighting_of_ref": "indicator--f34eeafb-421e-4b70-b032-7e1e1e8ef722", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe08a6e-c5cc-418d-b1ca-f89425d4173d", "sighting_of_ref": "indicator--f34eeafb-421e-4b70-b032-7e1e1e8ef722", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c365f808-a7c0-4314-a857-5cefe0c94541", "sighting_of_ref": "indicator--e988566a-8b1f-4b91-b84e-581945798f03", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd771a0d-b573-489e-a151-82b6a76b2871", "sighting_of_ref": "indicator--97b265e6-e34b-4d38-b9be-5a585665ee35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c966e80-e9e1-4667-85ff-303b6a92a60a", "sighting_of_ref": "indicator--97b265e6-e34b-4d38-b9be-5a585665ee35", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb53a357-f3c2-4e64-bcb3-8da7968bf1ac", "sighting_of_ref": "indicator--b0fec1dc-b50c-450e-b4a2-6266ae6a6ca5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fe9dd4-b474-4061-a8b7-eabe25cf45c2", "sighting_of_ref": "indicator--73058ffc-f42f-4ee5-8112-65097b7a2e6d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0236700c-41bc-47b3-b466-34e4786debc3", "sighting_of_ref": "indicator--73058ffc-f42f-4ee5-8112-65097b7a2e6d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd580973-1b19-4efa-9e21-fceaf6f28eb2", "sighting_of_ref": "indicator--3059d964-7e1d-4706-9a7b-10b3b5670b73", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3b45d6-127a-4e08-907a-46a65bcd0fec", "sighting_of_ref": "indicator--6436c14d-1d55-45bf-bc16-4613c3b9c883", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396ee5fe-81fe-4473-aa26-a3eed1c0aa79", "sighting_of_ref": "indicator--791d4b1f-6121-4be0-89a3-f625939a6d25", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce25be5c-2f4d-4fc3-ba3e-c33ebe24687a", "sighting_of_ref": "indicator--29db90fa-541f-4c85-9444-c437029bf705", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c06878-cf2b-4aea-9b9e-29cb67b3faa1", "sighting_of_ref": "indicator--166b45d4-c6c2-465e-9c56-1dd66c0b74df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf9c82f-92eb-45a3-be34-5530fecbe9e7", "sighting_of_ref": "indicator--166b45d4-c6c2-465e-9c56-1dd66c0b74df", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb83b60a-81aa-427b-ae7f-8c7aff9ee102", "sighting_of_ref": "indicator--dd3a068d-62a7-4dd0-b92c-ca3ecae58994", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--628d654b-f864-4a44-a6a5-39b294b3c0b3", "sighting_of_ref": "indicator--abf3ef5c-da9b-4ebd-b6c6-05bd8c522599", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d76a716e-ffa4-4baa-b487-4040a7b0810d", "sighting_of_ref": "indicator--abf3ef5c-da9b-4ebd-b6c6-05bd8c522599", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796965dd-c730-410d-a0eb-67eb15dfd2ed", "sighting_of_ref": "indicator--418db91e-3e87-44de-80d1-abf1ab5ffd8d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda126e5-1645-4d64-8527-3baa4e4c4033", "sighting_of_ref": "indicator--7071be99-dabf-4477-b9fd-faa65e0129d1", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3196ee54-914b-4521-b8b5-57c33e69055d", "sighting_of_ref": "indicator--22c02f11-cf70-48db-9b11-0892396f6062", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c65f30-8aa0-43fa-aecd-7efed3754609", "sighting_of_ref": "indicator--2e507365-15f2-4cc7-b353-4e9068ccce8a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f72991-4374-4e41-92d8-5a597be2bc0c", "sighting_of_ref": "indicator--56b23f22-b6c0-4c3e-b66c-8900bc625320", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b44c842-b09f-4c20-a02d-41ebc3275a9e", "sighting_of_ref": "indicator--3c2d9b6a-3a1b-4543-b888-2310a1599055", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42531f27-e63c-41ac-934c-db21328eb44c", "sighting_of_ref": "indicator--004a6d75-e25c-47bb-9542-2e2d06726e39", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc8b5c43-b6a2-4e5c-a16b-63eae9fe91ff", "sighting_of_ref": "indicator--7f2e6576-aac6-44f2-8f95-610ae0393d80", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691c52a9-4781-4e59-bb35-23bc34fbaa11", "sighting_of_ref": "indicator--8ad99692-02fd-48d5-80a4-965ee0973eb9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390e7db3-2619-4385-be56-0cdd7661ab25", "sighting_of_ref": "indicator--d2f014b4-5cc7-4695-a52c-11fe9a63241c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9da79e3-64d4-4d6a-8dd5-f0359c8ce9cf", "sighting_of_ref": "indicator--dbb1a49b-66d3-4b48-af33-7d9597fc552c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd8e50e-39ab-4803-ad4b-bf657ca67b1b", "sighting_of_ref": "indicator--46ea1390-d523-4f6b-b1a3-63d0193c1335", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81c9ee6-f2f9-4e2a-ad04-aea77391df4d", "sighting_of_ref": "indicator--1b88169e-4797-4ff7-8a92-3f73a3e9dbbd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--231b14b1-50b9-44a3-a808-1a73e3ac3cdf", "sighting_of_ref": "indicator--d7c0c2e5-0fca-4001-9118-f6ff15465c7f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0b7b66-502e-4890-ac7c-4a1825a9b645", "sighting_of_ref": "indicator--5242de30-3021-4576-8d8e-37c89daa0a9f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681c2967-5d3a-44a4-a4f1-f61717bc8055", "sighting_of_ref": "indicator--681de24d-34f9-4b98-ac5f-fbb6266e3ad6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154eaef0-ac27-4cab-8491-dd86a66fe151", "sighting_of_ref": "indicator--270c9cea-a853-4f00-8c3f-39d249964738", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da01aed-2be4-490c-b625-d77c0ce653a6", "sighting_of_ref": "indicator--270c9cea-a853-4f00-8c3f-39d249964738", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fcf82a-9ea0-427f-b900-308859c52f46", "sighting_of_ref": "indicator--c552d0d7-4fab-41f8-9802-a81b500aa6df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a9690d-2d03-406e-bea7-511772b3d7a5", "sighting_of_ref": "indicator--f984ec71-12cf-40f3-bf28-5f03a7362b73", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef18d20-3fa8-4b47-b05a-802bf66ac42d", "sighting_of_ref": "indicator--f984ec71-12cf-40f3-bf28-5f03a7362b73", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db35e35-dd42-41d2-9c82-49462ddbccf9", "sighting_of_ref": "indicator--b3d62247-5182-442a-872b-9d75ec0d921e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d262ab2e-5d55-4108-ac64-99af1889b216", "sighting_of_ref": "indicator--b3d62247-5182-442a-872b-9d75ec0d921e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ecc225-6909-416b-a83b-bddfe936ca1d", "sighting_of_ref": "indicator--7982d043-6127-4e3c-b704-375c793a5426", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3d1ecf-af1c-4075-a166-ce4daeb9c57f", "sighting_of_ref": "indicator--7982d043-6127-4e3c-b704-375c793a5426", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33c24b9-c632-423a-b5e9-698247c7b704", "sighting_of_ref": "indicator--beaa3248-9317-4ed3-933a-73677a46e764", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f589c6c-7d19-48ee-9c7f-dbaa5824dff3", "sighting_of_ref": "indicator--beaa3248-9317-4ed3-933a-73677a46e764", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24be029-8e31-465d-822c-c9a140c4fc50", "sighting_of_ref": "indicator--bb045746-9b81-4675-b870-a81c25ebc60c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febb525b-0de2-4b1f-af36-b6f2737e8905", "sighting_of_ref": "indicator--bb045746-9b81-4675-b870-a81c25ebc60c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a4d6c9-8d64-4b20-9711-f02148217365", "sighting_of_ref": "indicator--5d75f3a0-6454-4250-8fd7-80b22e17413d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2283f234-fa3d-4f39-b4ca-6d19ba08d138", "sighting_of_ref": "indicator--5d75f3a0-6454-4250-8fd7-80b22e17413d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308c7f9e-34e6-42c4-be73-2215a78249e6", "sighting_of_ref": "indicator--7263552e-6cc7-41a0-882f-dd04459f0bd8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24a2839-84e2-4573-a05c-f0f7edfe9e89", "sighting_of_ref": "indicator--7263552e-6cc7-41a0-882f-dd04459f0bd8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1ac119-b4ad-4047-81d0-96540809b3bd", "sighting_of_ref": "indicator--9b016e9b-5a20-41d6-972a-0b3366f09746", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711c9d9f-b706-497e-97a2-a2c60b6ca541", "sighting_of_ref": "indicator--141625a9-ce17-449f-ab34-6df123f84594", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5513d7-ff40-4b71-9811-fa1b91c011fe", "sighting_of_ref": "indicator--357ac26b-10c6-4a0a-bc65-3e67aaa4c8c2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48632b17-3b9b-477f-818b-351b0d758f74", "sighting_of_ref": "indicator--357ac26b-10c6-4a0a-bc65-3e67aaa4c8c2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6244b7cf-911a-4e34-9a8b-9430d1366e96", "sighting_of_ref": "indicator--f0d82e96-40a5-49a2-8e2f-36e9d2783a8a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743d8a35-f7eb-4ff7-a6de-dfe96367bd9f", "sighting_of_ref": "indicator--e898eeba-fa2e-4c4f-96ad-0db7f8a3e771", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6d5a87-e475-4396-ab97-0a114603adbf", "sighting_of_ref": "indicator--52eff7e0-a80e-4302-aff9-a4591d54c126", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1264b42e-e92e-4587-b02b-ea6dad5c547c", "sighting_of_ref": "indicator--9f9e5562-3946-4971-8d43-6900d55054de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac8494e-7e10-40ea-b932-53fe2500b1c1", "sighting_of_ref": "indicator--d70a66dc-e0b1-468b-9fef-9b51aba04f7d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8aadb4-e732-491d-9afd-d83dbd6bcb73", "sighting_of_ref": "indicator--43508a97-4069-47d2-9f97-9b61867d12c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45cf830-dabb-4363-979d-91f1a63da5fd", "sighting_of_ref": "indicator--143d9448-6a4a-4f65-a4b5-b467f0f93e68", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7b2572-f6f4-46a4-8b95-bbf03ae21a01", "sighting_of_ref": "indicator--143d9448-6a4a-4f65-a4b5-b467f0f93e68", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ec0342-a103-4057-8277-c9134b52934b", "sighting_of_ref": "indicator--b2145f83-7672-4fa3-a9d6-b4127a2cf15b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed55f0b3-5c71-45e1-8960-64190223e75d", "sighting_of_ref": "indicator--b2145f83-7672-4fa3-a9d6-b4127a2cf15b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec6f9c0-f6cb-42a1-9470-850c594d573c", "sighting_of_ref": "indicator--f8005c22-3f78-4394-b803-261334374de5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27877d0c-79fa-45a3-90f7-72548422da6b", "sighting_of_ref": "indicator--f8005c22-3f78-4394-b803-261334374de5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64200662-2968-4900-9b1e-31ebb5bd19ce", "sighting_of_ref": "indicator--d8470e8e-c22c-43a5-b191-ec5fe965d4c7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45905ed6-f309-4063-b968-d5010849b360", "sighting_of_ref": "indicator--d8470e8e-c22c-43a5-b191-ec5fe965d4c7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25d3a22-9e1d-4690-9486-b2fdf657b849", "sighting_of_ref": "indicator--57ee9d18-f820-42eb-86b0-08363d15dba9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fdb650-2e12-4559-b4eb-88d72ac4165b", "sighting_of_ref": "indicator--57ee9d18-f820-42eb-86b0-08363d15dba9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d08d8d-f6fb-4037-b9a0-93b2f6c7ec14", "sighting_of_ref": "indicator--6dbccb12-397c-4327-88d8-a50e286cd5b6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915b79a1-fda6-4fcb-8b53-9ad263faa545", "sighting_of_ref": "indicator--3309e128-b764-4adb-837b-7e69e55ca030", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63f9b29-2b8c-476e-9829-936fa9b5c148", "sighting_of_ref": "indicator--3309e128-b764-4adb-837b-7e69e55ca030", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ee3fce-1e2b-480c-91cf-c36756dc74de", "sighting_of_ref": "indicator--1bd80ef5-b814-4a80-b74e-8a2a27bc3da8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74494fa-4e2d-45da-bc74-a18f448ec4b1", "sighting_of_ref": "indicator--78273df9-8040-4dc1-8404-d21ac75922e9", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d3f3f81-2a2f-47ff-ae75-4f4d9f43fc72", "sighting_of_ref": "indicator--44c2b3d3-37c0-4dd0-b757-2d670d2f85ae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae01dbec-5423-486b-933a-4bb698dfe07f", "sighting_of_ref": "indicator--44c2b3d3-37c0-4dd0-b757-2d670d2f85ae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e09ca39-a00c-4e83-8e79-2b4a891da687", "sighting_of_ref": "indicator--d097c589-e879-407a-b1be-6d24027e1456", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660af307-a4a5-4a39-8ef5-8138e21fbc5a", "sighting_of_ref": "indicator--d097c589-e879-407a-b1be-6d24027e1456", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd8c898-ad7a-49e7-ba1f-f35f1d783dd6", "sighting_of_ref": "indicator--02bdfb59-8dca-4374-a692-f00f6cfebb22", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221583c7-2e25-4025-9cee-559a6efe424f", "sighting_of_ref": "indicator--552f1d86-d21b-453f-aed5-4105d02c2e3b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a9ec1b-7547-4548-959a-eb48ea55d068", "sighting_of_ref": "indicator--83135b9e-09bb-4798-b388-fb44c855ea9d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2094aedc-0f63-4c40-b085-198fe54c2c65", "sighting_of_ref": "indicator--83135b9e-09bb-4798-b388-fb44c855ea9d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504942d3-b044-42a1-970b-c77406abb557", "sighting_of_ref": "indicator--772da283-73f1-43fa-a5f9-09e1d93117f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad38e289-c99a-454f-8b4d-8e631468f65c", "sighting_of_ref": "indicator--772da283-73f1-43fa-a5f9-09e1d93117f3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7347cc9-2799-4dd6-9705-6b18be61773c", "sighting_of_ref": "indicator--fe1c79e7-1fb0-4230-b4a3-7b8ce42bf7a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec7a01d-e0a4-43f9-8e1d-fdafa5e52606", "sighting_of_ref": "indicator--0ca6dae2-9775-4b64-bbcf-7f5e5b090e13", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65ba15b2-18aa-4354-9146-3eb9b5156164", "sighting_of_ref": "indicator--30087dba-ff2d-4adc-9629-e6200e36b5cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376bec88-b15f-4c4b-9154-febdf883fe41", "sighting_of_ref": "indicator--34505c0d-0301-46d7-a025-cd947959b85b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2a3946-47e9-4308-8f27-c961bc2ac6eb", "sighting_of_ref": "indicator--34505c0d-0301-46d7-a025-cd947959b85b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8fe921c-b20c-49e6-b5c6-ac1fda9f2570", "sighting_of_ref": "indicator--745e7448-2b09-417c-b868-5bfc196a4bda", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d7c354-74e0-4802-82a9-3c7e81ed0d9d", "sighting_of_ref": "indicator--e802efbc-6d5b-48e3-92c6-8de8965ffdd4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c455fa00-8c11-458b-a90f-4434101a8a41", "sighting_of_ref": "indicator--d8122182-f091-4fbf-a6a6-7843e845427d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633a36cb-ff6a-4826-be5d-b47214903db6", "sighting_of_ref": "indicator--c1d1fad1-61ca-40e2-9122-092393a9208c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895a85fc-4845-4a21-9f8d-bff433d37b5d", "sighting_of_ref": "indicator--c1d1fad1-61ca-40e2-9122-092393a9208c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f51207f-1526-4b9e-b1b4-6efac8a9eccb", "sighting_of_ref": "indicator--78b4307a-9bc9-47db-9752-f4857cee1443", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa164df-5748-4fd5-9e1a-946ac8bc1992", "sighting_of_ref": "indicator--66104fd4-bd0c-4ddc-a8d6-491adda3fc46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81abc0c7-d555-4900-9f38-b0a2eaabecfa", "sighting_of_ref": "indicator--66104fd4-bd0c-4ddc-a8d6-491adda3fc46", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be11e385-4559-4c8a-a3b5-906f5d728c25", "sighting_of_ref": "indicator--fbe351f5-f4ea-47f5-9086-c45124ae59eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ecffdc-e51c-49ad-bab3-28b60a8ac698", "sighting_of_ref": "indicator--fbe351f5-f4ea-47f5-9086-c45124ae59eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210ce318-8cd0-4b6c-99f9-c98425d27958", "sighting_of_ref": "indicator--6c53e9fb-95f6-4f78-92d7-4d2588f88cde", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8cbc9d-5eff-4097-add5-85bf858ec8f4", "sighting_of_ref": "indicator--6c53e9fb-95f6-4f78-92d7-4d2588f88cde", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb04f66a-dd6d-4467-99d4-95ff04c6a868", "sighting_of_ref": "indicator--bc0bc240-1af8-4442-a169-022b0aa96772", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2de3ac6-6122-4568-96c4-7e8290ab9682", "sighting_of_ref": "indicator--b0582e62-a226-4a17-8ff4-137f8baee005", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e64a14c9-12c3-46f7-9eb7-c60b827778eb", "sighting_of_ref": "indicator--b9bb8c29-0f0e-4862-a6e2-0f2e78ebe04c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfd838d-2706-48ec-b02b-96ec60f132f0", "sighting_of_ref": "indicator--b9bb8c29-0f0e-4862-a6e2-0f2e78ebe04c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa2a2c5-beeb-4589-9796-6b262c47156e", "sighting_of_ref": "indicator--5bbdec8d-15cf-4e39-b91c-601017b1fe7b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1580af6f-f225-4436-8367-da1a4c72fe11", "sighting_of_ref": "indicator--79c4f396-e665-4586-9a3f-0f2a3196b196", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c402799a-c21e-4375-b27e-39303d198f50", "sighting_of_ref": "indicator--08890881-d191-4d59-ba0d-fa8bf1b8527c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be500ce-6e4a-4353-abad-9a7d550d3800", "sighting_of_ref": "indicator--08890881-d191-4d59-ba0d-fa8bf1b8527c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7deb72-a885-4095-a2ba-b219d2742433", "sighting_of_ref": "indicator--18e0a1bc-4022-40bb-bbde-ac2bbd26797d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b65fa16-435c-4ae6-99aa-f6c7dfc17ad1", "sighting_of_ref": "indicator--18e0a1bc-4022-40bb-bbde-ac2bbd26797d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae00db18-eb06-4be0-88c7-161b365fe5e7", "sighting_of_ref": "indicator--65d55c3e-9725-461e-ac75-ae09f5d88a40", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4329da9e-6ff3-465c-8500-f25979d472dc", "sighting_of_ref": "indicator--b8190932-de43-46b9-abbe-b814a30a39df", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7ddaff4-26ea-4cc9-a00d-ccf822fe8114", "sighting_of_ref": "indicator--ac8b7caa-b458-46b5-8abe-26d66a5198c1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304397be-237c-4804-8efa-5ee0dbcb52a2", "sighting_of_ref": "indicator--644d74fa-1ab4-43d0-aa48-9bec86f26e8e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3987e0d-aa05-4f66-9752-1cc59fe02d21", "sighting_of_ref": "indicator--1a1542da-e9f9-4c78-a7a1-92edd59e89f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b5ee15-2b70-4a26-bbca-ca28efa291e7", "sighting_of_ref": "indicator--1a1542da-e9f9-4c78-a7a1-92edd59e89f9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cd81a6-2288-4193-a431-ab7c0e353996", "sighting_of_ref": "indicator--f825f586-9e6f-4fd5-a4d6-07c0c7501c37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36519aa3-c637-4220-a5a4-402ce32138df", "sighting_of_ref": "indicator--8962b0e3-cf85-4486-9266-b9e1de1db557", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5680a7e1-145a-4207-b98d-93701545a75f", "sighting_of_ref": "indicator--ae7072e7-6d3a-457e-a126-41f953223a6a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--376e0a18-8319-4e17-9f07-aa2ac47ccfda", "sighting_of_ref": "indicator--f7afc2e7-af28-4cab-9fee-0695655c82dc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2858dad-072c-428e-ac6f-d37d42452a3d", "sighting_of_ref": "indicator--c73c1526-5ee5-470c-9396-8ea2d9a7797f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab589ad-4938-48b1-ae85-f4a7eeca5164", "sighting_of_ref": "indicator--a392ea0d-097d-4620-9e0f-e46c70ffba79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49b2a8fd-2719-4301-aa93-16c80f890be1", "sighting_of_ref": "indicator--a392ea0d-097d-4620-9e0f-e46c70ffba79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e638c8e-2122-440c-8558-936103087bb7", "sighting_of_ref": "indicator--cbbf161f-40b3-4dd3-b678-9b88964009ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4809b9e6-5741-4582-b4d2-b0648ead2256", "sighting_of_ref": "indicator--cbbf161f-40b3-4dd3-b678-9b88964009ac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba159a9e-7d0a-4d82-9295-78fb140ec32b", "sighting_of_ref": "indicator--1cf5919b-e9e7-4044-92be-8fa993909165", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9901cd6a-76ac-4c53-83e8-ebd0b23d5ed0", "sighting_of_ref": "indicator--aae4866e-6b81-4540-b5a2-9d0f366d4bce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59aff32-3d08-4be0-b1dc-e28b5c5c1f05", "sighting_of_ref": "indicator--80ff7e2d-a80b-442e-bc91-c0e32b0e6e59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8745cb-c61e-4fc9-b1a9-69fb257cca48", "sighting_of_ref": "indicator--ffca9c78-dcd9-4e21-863e-ccb1aba68cb2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2feb5687-2b76-4cc8-831c-4f0c9e985247", "sighting_of_ref": "indicator--a72164b2-e753-4391-95c9-0754c6eb5095", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee180b0b-862d-40ca-85f2-bfd358e07541", "sighting_of_ref": "indicator--f057c4e7-045b-4e58-9012-36d5766ff51e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08259ea-631f-471f-a35d-e628b3652994", "sighting_of_ref": "indicator--61c18954-1f8b-474a-9c31-68e30967d0d9", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08e20df-c804-46e3-a04c-fdd841f1f477", "sighting_of_ref": "indicator--61c18954-1f8b-474a-9c31-68e30967d0d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa818eb-8f65-4497-bd07-24057ef471f9", "sighting_of_ref": "indicator--68dafd91-08af-4bd1-96e4-ca495a43055e", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f36fb19-09cc-474d-afbb-134f1753dbde", "sighting_of_ref": "indicator--3ad848cd-2425-468f-b06c-c2a0fb4b7235", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78bd878-8acd-4e08-a7ac-09d6cf5cfb05", "sighting_of_ref": "indicator--3ad848cd-2425-468f-b06c-c2a0fb4b7235", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f651c2-5667-424f-b8c4-2d52aa9a6d61", "sighting_of_ref": "indicator--0428ff90-3885-4267-9de8-dba78ecff061", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9d14ea-5f89-4ca6-a351-0158f393b04e", "sighting_of_ref": "indicator--0428ff90-3885-4267-9de8-dba78ecff061", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c044256b-d971-4c5c-bd67-f9916dc28902", "sighting_of_ref": "indicator--90229a06-aaf4-424c-bdc2-7e5c77fa340e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f627bce3-5fd2-4c94-be00-6d30d5d1388f", "sighting_of_ref": "indicator--bff21837-278f-4f4e-a04e-8a318e3459eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a67a8581-9f2b-4519-ad63-f45b68051bcf", "sighting_of_ref": "indicator--fdad6528-00ff-4cf1-9ba6-2813f79b3568", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc351103-3752-492c-8618-838daa229ef9", "sighting_of_ref": "indicator--934d530c-348d-4d97-8ca7-a6178167cf6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dfd75a-7965-49dc-a394-5d5a76bb3647", "sighting_of_ref": "indicator--b9163c00-c71c-4850-9e21-6191b946c765", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59d13a2-34f0-4c41-90be-f6c339ed3b4b", "sighting_of_ref": "indicator--877826e5-c502-405e-aa15-df22cfb59222", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6117cbb7-2226-4fee-9a92-b34105ebef93", "sighting_of_ref": "indicator--b09143ce-1537-4d9b-b491-4c308d51935a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e58bf05-919e-4ebe-abb2-6b5551834170", "sighting_of_ref": "indicator--3e03e8e4-9bcb-4429-9b84-443b7dd3bbce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbb752d-a062-4bde-aa32-104fd28c9353", "sighting_of_ref": "indicator--1745c4f8-2b4c-48d3-8ac1-eb721700c18a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684245e2-d5c7-4cb3-babb-2173e2ac5a63", "sighting_of_ref": "indicator--db74dea8-6b55-4872-9448-5ea5347c960d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f00f2e-ecb8-474f-b389-b3e9946484b7", "sighting_of_ref": "indicator--ee1d5903-a16c-4d6f-8727-a0065eb532fb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9e21c6-bda5-4081-bebf-570ecba69f09", "sighting_of_ref": "indicator--9f32c24d-0a63-4a0b-8b04-37aca1625769", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a31fffe-6961-4817-980b-11f8dbc687d9", "sighting_of_ref": "indicator--5c29dec8-fdda-43dc-8cd3-f4fc9f607c07", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b5eb15-afd4-40b6-ad9e-29d603677ae6", "sighting_of_ref": "indicator--44c1003e-b925-426c-87be-6b38a7b1fbe7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57a87629-a300-4ebd-b564-f62ac68a80f3", "sighting_of_ref": "indicator--91e956c9-0a6b-421b-9b6b-342259d1fde3", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ffc1b5-b0bd-4ea0-bce4-61c48cb6484d", "sighting_of_ref": "indicator--37d876de-f253-4bbc-a838-26a941709293", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bed10a6-4ce6-4f17-9f71-df80ce212e04", "sighting_of_ref": "indicator--c31b7569-664e-4056-9f36-798237ddf057", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ac6350-87e3-45dc-ab80-95c35d25cab8", "sighting_of_ref": "indicator--388aef47-dfec-4434-ac01-4b377ec1cb82", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184f2331-d4e4-48b7-98ad-ec7894063b95", "sighting_of_ref": "indicator--1c9608f4-b197-42a5-affd-a4a0f774ee89", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a8d5c6-c673-4542-91c9-2543dc8b04a1", "sighting_of_ref": "indicator--1c9608f4-b197-42a5-affd-a4a0f774ee89", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05764260-778c-48ce-a50d-133d3a17a6ff", "sighting_of_ref": "indicator--3e79ea0a-d2ed-4938-a6ee-7e2788eebefd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487e62f9-d60d-4bec-acd5-9c47c7941a75", "sighting_of_ref": "indicator--3e79ea0a-d2ed-4938-a6ee-7e2788eebefd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54515984-5cdc-476b-a11e-67fb0928f4e2", "sighting_of_ref": "indicator--39240690-b956-4760-ab03-32b69af3b615", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962b68f9-b667-43fd-8135-5d5446dd7fa4", "sighting_of_ref": "indicator--893fa333-bf2e-49de-951a-4006af448e5d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f14f20-f53c-494b-8fc2-215c5eb74a91", "sighting_of_ref": "indicator--cee078af-a6cd-4fa5-88e9-7e0409cb1eba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90ab8a14-1630-453f-9288-8dcbc588dd47", "sighting_of_ref": "indicator--cee078af-a6cd-4fa5-88e9-7e0409cb1eba", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c14c50-7b1d-4341-88b3-485cca264559", "sighting_of_ref": "indicator--3d37ffe7-63ec-43ce-9666-8443fe7109e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9af5a94-51e3-43c3-a639-8d6cfce6b126", "sighting_of_ref": "indicator--979d0606-da5b-42b3-921f-dbc340bc182f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4025db-c8a8-49bb-aac4-8cd7ecedffd4", "sighting_of_ref": "indicator--8801fd72-663a-4c57-8e6a-0f6d048ceb22", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeddefd-b165-4c02-8474-01399be5ad8f", "sighting_of_ref": "indicator--9ca0d30e-3740-4d0a-8be3-6e3194467bb6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--004ba417-586a-4cb8-ad21-8eb8dd1eb34d", "sighting_of_ref": "indicator--8527406c-2b6e-44c5-9159-e9bf76616874", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9375c960-ccc6-4709-8a92-f4a0075b5378", "sighting_of_ref": "indicator--0a00c178-d2d7-495c-b56b-a5e18311f6a9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a99ccb-fdbe-4198-95c6-88f96f9caab9", "sighting_of_ref": "indicator--fc294d5f-3b7a-42a5-8ec1-194cab51f29a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c97b4cb-63f5-47a5-8f8b-b2cf1a1e7a37", "sighting_of_ref": "indicator--d64ecbca-a4c5-467b-a586-c39a3e7f27de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dcb6b0-9585-4f6f-bfd7-5a12586523c0", "sighting_of_ref": "indicator--0042a6ff-66cf-4270-b393-0a4605740498", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a76825-27d1-41c7-846b-295a678db42d", "sighting_of_ref": "indicator--73dd3317-2bfe-4a30-929c-85e2dbfb5cb6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f65e31-b41f-410f-bc07-da261b78ddd2", "sighting_of_ref": "indicator--73dd3317-2bfe-4a30-929c-85e2dbfb5cb6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdcc7eae-496f-479c-ae0c-232da85a29ac", "sighting_of_ref": "indicator--bcfa2d0e-a50c-43d2-8f61-41e8b562e356", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca393790-627b-44b9-be3c-4db164d6118b", "sighting_of_ref": "indicator--bcfa2d0e-a50c-43d2-8f61-41e8b562e356", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc6c772-f8ff-41e3-97fe-1e6d07d1a956", "sighting_of_ref": "indicator--23242dc5-42ae-4a23-9ee6-062471b14844", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57097fe4-d946-4c4b-9f21-82d09cc36b8e", "sighting_of_ref": "indicator--357ea70f-115e-4bb6-b43c-a8c700bb88cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081220e3-12ee-44c6-b9c7-dc284cb287eb", "sighting_of_ref": "indicator--357ea70f-115e-4bb6-b43c-a8c700bb88cc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc15dbe-9907-4cf9-9462-c6bf64b7cd5b", "sighting_of_ref": "indicator--f9dd1984-c319-46bc-8224-c261fa028792", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03c8cd3-678b-4229-b1b9-2564bfe69517", "sighting_of_ref": "indicator--bdbe27bd-4d77-4085-9cc4-f066ce53cf77", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d351112-a7a3-4014-bc2f-cae960a47f1e", "sighting_of_ref": "indicator--14376b84-4281-473a-b4dd-ac1977ba4c00", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd1db6a-1718-4717-b9bb-b53903bf06ce", "sighting_of_ref": "indicator--8d4dab33-c49b-4bbb-af1b-ef368b59540a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91ea64b-4965-4385-994d-99b480220421", "sighting_of_ref": "indicator--de544e37-8416-447d-a81e-f8330e629266", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5f2e2e-ae00-445c-af40-4aceda40d894", "sighting_of_ref": "indicator--6adf869f-24eb-43be-887b-18350cff55be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112f654a-3928-4908-a3ef-53552b177ad0", "sighting_of_ref": "indicator--19b0a5e5-44fe-458c-8e98-a7c30e4a777d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a523c6eb-aab6-4a12-a105-64cbbefda638", "sighting_of_ref": "indicator--a8a7fc29-9d60-40ca-94f5-2d04042ba2aa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2850fe1-b5d4-4952-a673-1fd7575ee617", "sighting_of_ref": "indicator--c29088a8-3023-4bef-83a7-3e79e5a7e924", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48260617-525f-4b9b-aca5-b2eb9aa952e3", "sighting_of_ref": "indicator--a2922d97-db7b-447d-9210-5dbbca21457a", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c13bfe3-194c-4797-a561-aab12b91a81e", "sighting_of_ref": "indicator--10b17e6d-6069-45ea-9a71-e4cc21c9c839", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e248194-0471-426a-a72e-82877b7f3b54", "sighting_of_ref": "indicator--c3544b46-85a4-4f81-b261-6be80aa7f9d0", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83695447-d695-429f-92f8-9c6016894235", "sighting_of_ref": "indicator--0a5faf49-89a6-4123-a1f0-972fe0e0b41b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1f69aa-89e7-40bf-8dec-0138caf5e4c2", "sighting_of_ref": "indicator--e1859683-fd1c-400b-9597-78564e829fb1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c40d10-2adb-476b-a86a-fbc102366061", "sighting_of_ref": "indicator--bb64d5b5-7f63-4cee-b210-4a7882a426d4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d34053-d15d-40df-8bfa-1277ad649638", "sighting_of_ref": "indicator--866bbe3a-4b06-4a8e-9303-2ccc08443edc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247a8dd3-b240-428f-aabe-5cfcef450678", "sighting_of_ref": "indicator--866bbe3a-4b06-4a8e-9303-2ccc08443edc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c28a512-f7db-4d6f-8779-4b978069e375", "sighting_of_ref": "indicator--6f9bbb1f-37e6-42b9-94fc-3e003b0ccff3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8305b763-d836-4817-b730-7b148333a7ef", "sighting_of_ref": "indicator--ed590c69-0a4a-49b1-af05-fdf7a0054a53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d01372-c190-40e9-9e86-464ee7d8bcc3", "sighting_of_ref": "indicator--65ef095c-dbc8-4896-985f-78062e60db14", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7443e7da-6630-4599-80e7-e8115e3f149b", "sighting_of_ref": "indicator--65ef095c-dbc8-4896-985f-78062e60db14", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7d38ea-a691-40a9-b7c0-0037a5d10de1", "sighting_of_ref": "indicator--5aa98fca-9f27-4001-8fc7-4c98f177ddfe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca684acf-2f39-4fff-996b-3d96bc6d6920", "sighting_of_ref": "indicator--7d2c561c-5709-42a3-a839-b9b5ae3222d7", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cb7c04d-6a7f-4d45-8f2c-34aab5750bcf", "sighting_of_ref": "indicator--7d2c561c-5709-42a3-a839-b9b5ae3222d7", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52fc04a7-1b92-4fee-a026-6ca1c26b9569", "sighting_of_ref": "indicator--3dae66d6-9493-426e-bde1-f70bcde629d6", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe2a902-3978-47c5-b522-37ead576a356", "sighting_of_ref": "indicator--59b1383a-351b-45e1-a672-bd29b3d4289c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafee6d6-a728-45e2-94b5-05ec139b2823", "sighting_of_ref": "indicator--2ad01b25-9c73-4ae6-bed1-030b356c78b4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdeaef2-a6dc-4caf-9073-994620be7001", "sighting_of_ref": "indicator--8f312871-b50a-4df5-94ce-c9f8183dc8fd", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fd8c4a-5286-46d5-97d3-40151acb077f", "sighting_of_ref": "indicator--0d6ec973-6a87-4a1d-8c3b-c753685160bb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cd964e-36d0-44e4-a778-44003006590b", "sighting_of_ref": "indicator--ce4ddb32-8ae0-4fe1-a45b-bc753862521a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f62cee6-1eca-4911-894d-91fc20b58a1c", "sighting_of_ref": "indicator--e1801150-72cf-41b9-9d12-a77a199a3675", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390a4a05-9f79-484d-a7fc-6e094594091c", "sighting_of_ref": "indicator--72abe7cc-90ba-42a6-8334-38c7890d22c2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d15b3c-58a3-4ede-9913-08dbde3ebd46", "sighting_of_ref": "indicator--89b30917-c91f-4f9f-ac64-dc29b3bf8c34", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d784f7-e5dd-4653-b212-28792e82712f", "sighting_of_ref": "indicator--8ef07203-1c45-49b1-9218-6aa45ab48c1f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08f874e-f4ce-4203-ae9d-220a5eed7543", "sighting_of_ref": "indicator--0807d2f7-58cf-4e09-8120-a0c68981989c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--660e6f91-c501-4af3-a6aa-d212416c2939", "sighting_of_ref": "indicator--50b783d9-8064-40b9-9e1a-aaa3c530f04a", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef89e99-3836-4b4c-9e1c-a5262ae6432b", "sighting_of_ref": "indicator--cf2baac6-e0f6-43b7-b5ed-c41ae706e448", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48b1332-f182-4aa6-b2d0-75beee447824", "sighting_of_ref": "indicator--1570a86b-9489-46df-914e-934a2f08c180", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf5c49f9-4f46-4862-9985-eea8cd4d4053", "sighting_of_ref": "indicator--2bda958d-cf5c-4966-a989-c0c703b3b7ca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4f98cd-9914-43f9-816e-2a2ea64bb5ec", "sighting_of_ref": "indicator--a6c27d68-26b6-4ac9-a710-b97cd8106f7c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7620bd16-d281-4dc9-aad0-16e5311054aa", "sighting_of_ref": "indicator--5535baad-77f9-48d6-828b-ee5281578046", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3dc9dc-432b-4607-b430-ade29caf33d4", "sighting_of_ref": "indicator--24ae2995-d6bb-46a4-81a0-050087e7369d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e78dea18-ca85-4d9f-bc88-53dc8a1de848", "sighting_of_ref": "indicator--45d04666-64b6-4c20-bdb5-8de09f5769f5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511f6077-6d08-4033-b577-832e94239edd", "sighting_of_ref": "indicator--dd260c82-6b2b-46ce-9dce-bdb999ad95d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd065254-8f78-477e-88d4-722cce37e358", "sighting_of_ref": "indicator--961391f4-4631-4230-9846-6d968d6a2dd8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8155c978-8efc-4c92-8de7-e47b52a945ca", "sighting_of_ref": "indicator--9302b06d-b306-46aa-b56c-648262b19532", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7adc3841-8a1d-41d5-9b5c-80e7f490d3fe", "sighting_of_ref": "indicator--8642d7c8-3c73-408e-836f-bb4782a82918", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe1d46ca-4ea4-4e91-80fa-2a862c105c22", "sighting_of_ref": "indicator--de7b9f81-1f0f-4694-9f37-6d73f0917ed7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1877f105-86f4-4570-b1d5-114d7ed3d57d", "sighting_of_ref": "indicator--0665bd3b-1d59-4a8e-92d6-fccde37cc0aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899aa78b-2e4f-4bdd-9aba-ab4643f06059", "sighting_of_ref": "indicator--8e0c2708-e926-4c7d-9cb6-15ffa53c3590", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5722108-3080-42c8-9911-a986ca8fbbec", "sighting_of_ref": "indicator--c2e583b4-6e91-4d52-ab4c-77cfcb0544c0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d3536c-4d22-4bda-9155-0cb368d2b758", "sighting_of_ref": "indicator--7af182ef-b501-4181-a72e-817f67d0d6ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4bb5c1-f987-4311-b762-8c3540a0f743", "sighting_of_ref": "indicator--c6d5f3f9-8399-47dc-9cce-37792b4a13b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095c9a1c-b2d9-4aaf-ae80-84ec5bde5a98", "sighting_of_ref": "indicator--46e0582a-2445-4010-bf27-9e9a758fcc7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c1b432-531e-4f46-83ac-0ca63ea3fef5", "sighting_of_ref": "indicator--de500e9a-682d-466c-b20b-b6f1515b07a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65d001d-6068-42be-8af2-f0cb5dcbb85a", "sighting_of_ref": "indicator--3a34aea4-d9a3-4e69-91e9-4b59fe356fd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640f2cc7-eecb-4296-94c7-6109ea082b28", "sighting_of_ref": "indicator--d68b4603-1325-47e7-8041-935b308cde4d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--650d37c4-2ead-498b-87a2-0a1e54df481a", "sighting_of_ref": "indicator--e82ca354-4052-48b8-95d0-c7f82cb57416", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18764c26-b81e-43e4-b9e0-beb035749bb2", "sighting_of_ref": "indicator--08b535ab-71d7-4935-8e7d-2381d9ee6125", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44023282-5d32-403a-9957-463a34ad3c4e", "sighting_of_ref": "indicator--1d85ab1a-935d-495b-af92-700b78a0884c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174bd161-d7a3-4736-b66b-4007fc936204", "sighting_of_ref": "indicator--9cd8b95b-fa00-4580-ba87-4af7e19806e1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481c22fc-acfb-47e0-8e7e-4530fc7c6de4", "sighting_of_ref": "indicator--a1d46177-d3ae-47f9-8266-2b159bef111a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1d6392-6aa3-4741-9f47-15366cdfae71", "sighting_of_ref": "indicator--f50e1eba-9408-43ac-81ab-3b41479017c7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ecede9-b7ae-49f6-8d8c-dc494cc5601b", "sighting_of_ref": "indicator--b97c6e46-8470-4fb6-8896-2726d08c247e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b32d0d5-fff1-41fd-bbea-d3a3a8afa610", "sighting_of_ref": "indicator--fee34afe-ef01-4809-ad7d-3e2f6ab493ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360ce5c3-783e-451b-9e43-560e95f0cf49", "sighting_of_ref": "indicator--2fc1ec41-8a4a-4816-822e-2a6a34397baa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45282c1-d5e0-40c5-a4f4-acdb36239280", "sighting_of_ref": "indicator--425ba2b3-a13c-4fc5-b3ef-a58df2bfe168", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39529c6d-db4a-47e5-a60d-3db7e5de6eee", "sighting_of_ref": "indicator--ff8f9304-f45a-421f-8dc6-c7ee124e322c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7bc579-ad92-4002-b422-f2288ac226ec", "sighting_of_ref": "indicator--d2222517-b5ed-4a3f-8854-a96f8f5363f1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d708e6df-370c-4ba3-a483-18a775d3b1f0", "sighting_of_ref": "indicator--69ec865e-c995-43f4-bfc9-408bb14010f4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84cb36e-7eab-4701-aa2a-170a07bbe3ac", "sighting_of_ref": "indicator--74081409-51c2-44c1-9b52-aa4d43aa436f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2438524-88d4-4e51-8fec-f9b3221ff203", "sighting_of_ref": "indicator--18517b68-f95f-433d-b57b-74c538b67c49", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dd70df-8290-4a7b-8457-ed49df580039", "sighting_of_ref": "indicator--73267cb2-3a8a-44e4-aa0c-572459b7f3da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e3bcad-3710-4c36-be9f-74ee7095f17d", "sighting_of_ref": "indicator--b8407e56-4e3f-49b8-a266-53e70a975044", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b0e001-8727-4d00-bb25-bcc6ec94e524", "sighting_of_ref": "indicator--15445ec9-086a-49c4-89b1-344a2025fc1f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657bb8da-63e4-458a-bd32-54deec834d20", "sighting_of_ref": "indicator--a1790da8-c94b-444d-8274-dc3bc08f18be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0f7381-46a3-4516-906a-15a5bd6830e2", "sighting_of_ref": "indicator--80817c01-8723-4f71-8dae-ee1c691274ca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6dd2c7f-4b5c-4e7a-8b55-ba4b90f0a5b1", "sighting_of_ref": "indicator--4eb304b8-11bb-44fb-8b19-5ad6ffa9dad2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f8378f-3f69-473c-89d1-2964e21f5df9", "sighting_of_ref": "indicator--75e84a71-7fe1-4143-bee4-1384642bfc1a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d94fb7d0-2e43-4a16-b9a4-ed40af8f6320", "sighting_of_ref": "indicator--d9adb793-56c6-4fa0-9b38-b11ff56eafee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29dd4df-9f85-47e4-8d3a-a5ce861cd08f", "sighting_of_ref": "indicator--76ae6ae1-dd91-4bd6-866c-bc8ae7696655", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d904c16f-fda3-4db8-93b8-a894a0518aa3", "sighting_of_ref": "indicator--b0515686-dfcb-4daf-a32b-ba05b9351d06", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a0db35-f923-4acc-9bc0-a099ae46be4e", "sighting_of_ref": "indicator--aac1d750-be31-49a4-ac56-4f9c870c8192", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ac4429-7fad-4607-ac09-9ab00b639881", "sighting_of_ref": "indicator--10c8e4c4-b21b-4293-b792-fe35adff6079", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e69ce7-efb8-4b27-994c-efce2cea381d", "sighting_of_ref": "indicator--80e9378a-d378-4d99-b91a-0aae056d727c", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33b88d7-28c8-4170-874f-65176a9ba6e0", "sighting_of_ref": "indicator--0599941b-acc7-4a0a-a538-4202715dfb5c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b5ebf0-0647-4b43-8eea-cca4fdb9fe10", "sighting_of_ref": "indicator--07adee54-db96-4e43-a097-aa55f4ed8d10", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b252844d-9aa8-4027-8f30-9ec64ec10761", "sighting_of_ref": "indicator--77da08b7-f54a-410f-8edf-aafee44d4a99", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5199e7-0938-4065-ae2d-0d66e4fe52ee", "sighting_of_ref": "indicator--b01b19c8-8be5-45d3-b83d-f7263dbd0f33", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0062021d-b442-4b81-82b3-3187d9aa671b", "sighting_of_ref": "indicator--f8ddcf81-aaeb-4ade-9aaa-5efb8019521c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5094bdc5-007f-47ae-9c60-7654a0db1aa8", "sighting_of_ref": "indicator--90f98406-1620-4dd3-bcd5-dd40365fe97d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0e87d1f-23aa-40dc-9301-b9870b4712fb", "sighting_of_ref": "indicator--a078d48c-f5be-43ae-8b03-ba7aa0b6c28c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ef183c-3242-44ae-a642-cb491637a38e", "sighting_of_ref": "indicator--f8b8e715-3de7-4416-b1b6-a2d8071d0189", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76feb812-fadf-4805-8d0f-4cc4666815ee", "sighting_of_ref": "indicator--f59b6860-f59e-4df1-b359-779e35c4182c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7636d5a0-d46d-46e7-ba98-a934b8fed8da", "sighting_of_ref": "indicator--eb4d4d4f-0e19-4729-98b5-af586036684a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cfb66e-0f72-496f-aa97-582bc093f1b1", "sighting_of_ref": "indicator--7f9c014b-3de8-48aa-8b12-0538faf588d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e3d2e5-ead6-42a9-9474-7854accf9ee8", "sighting_of_ref": "indicator--ab1fce02-f527-4d2c-b7ff-bdf8e3db6891", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb683911-51c5-4406-8b19-f5bad8bcf024", "sighting_of_ref": "indicator--d31b4190-afe1-4a62-9cb4-9c97a99c0f0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a30e6d3-1455-448f-8238-7971c367d4f8", "sighting_of_ref": "indicator--23944d10-6965-4d6f-b6f8-40d8306f85ea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e4775d-bab5-45b0-8109-3f0b3830c80b", "sighting_of_ref": "indicator--d1a1e2bf-d7c5-4dd7-8c1b-ad86fcba6af4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65aa0ee8-04f1-46d0-a9f0-783dca20a252", "sighting_of_ref": "indicator--d49a2455-2471-4c97-b941-9f9b035ec9c2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb63893-cb79-48bd-9772-38b1a70d5e6f", "sighting_of_ref": "indicator--e3b3da1e-6d1e-4e92-9a6c-9475713d7a6e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7951f123-d583-4363-9385-40eaac36d748", "sighting_of_ref": "indicator--f38bfd24-608b-41f5-8676-bbe1b9e10716", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7241e90-1def-46f1-98ee-64f80e3577f7", "sighting_of_ref": "indicator--f38bfd24-608b-41f5-8676-bbe1b9e10716", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e29717d-6dcf-420d-bb75-2a7ea6a90159", "sighting_of_ref": "indicator--061f73e5-c5b6-4f13-b486-bc5066482d39", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7198ef23-ea60-4a9a-805e-8592b39302bd", "sighting_of_ref": "indicator--061f73e5-c5b6-4f13-b486-bc5066482d39", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9084035-76e4-458e-81ed-cfedaf02b5ee", "sighting_of_ref": "indicator--8ed88399-4810-49ef-921a-8651ff9f1f9c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5667eea5-7d1a-4ceb-bbb3-6a69ce219c96", "sighting_of_ref": "indicator--8ed88399-4810-49ef-921a-8651ff9f1f9c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e806f0e8-f387-4563-bbb2-7427aa169e3c", "sighting_of_ref": "indicator--090f9b12-cb7d-4406-8977-8f827d746395", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303e9dd5-b300-47b0-afe9-00dda636bad6", "sighting_of_ref": "indicator--5205863a-b25a-4526-b4b8-288e79e89a94", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1fb3d5-e08e-471b-8ed1-77fe3a93b3cc", "sighting_of_ref": "indicator--fe91ad74-a7df-455f-b46b-d0b125fc1b0d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf878c6-ab29-43d4-a236-fb4d29945c28", "sighting_of_ref": "indicator--e738a425-b065-4f2b-bafa-6353e453f81a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463696ac-25f8-4636-8c87-b7bebe2b5fab", "sighting_of_ref": "indicator--e738a425-b065-4f2b-bafa-6353e453f81a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98826739-04a7-48d1-8ba4-99ed053ad769", "sighting_of_ref": "indicator--7dc8bddd-fa8d-4b16-bbef-091073ee8288", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfea53a5-b289-48cf-ab30-9c1dd2af2fbc", "sighting_of_ref": "indicator--15bba814-3ca8-4944-89d6-cb0145e0dd63", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0a61f2-2987-4a2d-8103-6b3da68b1c2c", "sighting_of_ref": "indicator--5f65f259-e28d-48ed-baa2-e55e2510abaf", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af3638b-adb7-4c0f-b630-00c5cfbd6097", "sighting_of_ref": "indicator--4d0a262b-76ed-4c31-90d4-f92e8a5f3c3f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--506a842d-1b20-48d0-8baa-ff781a70e568", "sighting_of_ref": "indicator--291f52a0-3113-487d-a00a-4c156da25e49", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99065aa7-edc8-4bc4-b863-78730db07365", "sighting_of_ref": "indicator--e50bc25a-9b0b-4bd3-acc3-7d01c6c4bf51", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b0ff49-c4d6-4f89-aaff-d50f6b67147c", "sighting_of_ref": "indicator--fce53d88-12f5-41f2-8116-af3bea82b31f", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a15eb1-5c2b-4a38-81c6-5384eba05b97", "sighting_of_ref": "indicator--4a106e55-51d1-43b5-8ee5-709c0d1d4141", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28814abb-585a-42c0-9181-ba69b0718b4d", "sighting_of_ref": "indicator--1ee54374-72d6-4eab-8742-f93163bf5cb4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--053f3269-e3f3-4642-a0ca-0e8fe3fc1371", "sighting_of_ref": "indicator--61f0fe70-bec8-4f89-a9a7-9feeb8213adc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79cdfad0-2d1d-43a7-bc86-28f8f0351261", "sighting_of_ref": "indicator--8fd2f17c-e811-4413-bcab-891588ebd735", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df29666-2272-4487-913b-348a4b2ce375", "sighting_of_ref": "indicator--6f266947-99ea-4610-91ad-ec8ab6056671", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ada6594-8f06-4cc7-be4e-3fb74ba94d59", "sighting_of_ref": "indicator--6f266947-99ea-4610-91ad-ec8ab6056671", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3485e0c9-2d38-45cc-a192-dcf882ee4ae3", "sighting_of_ref": "indicator--d9f10655-7ad1-442d-9a91-2c6ee84388d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34da30af-324a-4d30-9d9e-7d460c7d5a86", "sighting_of_ref": "indicator--aa68e803-ffb1-45fd-b985-a11a953b3ccb", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1959dbf-9ff0-4b07-98e4-9ef98c7f53e5", "sighting_of_ref": "indicator--9de21825-1db4-4c34-a055-c5ab85dc91a0", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8375ca-7f11-478b-9176-af2ac3ad748a", "sighting_of_ref": "indicator--c4b4ba4b-1ccf-4fa2-b871-3edb2dd650e6", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc874d3-1039-4f6e-bc70-638de9ace5c2", "sighting_of_ref": "indicator--a438a886-ee66-41cd-b936-3731983aca24", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf95fd27-911c-40ec-9a3b-67bd6f37c3b3", "sighting_of_ref": "indicator--56181f80-29f2-40a6-b703-62204e767c60", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599797e5-c9b1-4418-b8a8-914a4996cb3b", "sighting_of_ref": "indicator--d90bc747-9f9d-4257-8ba5-8d1df60c6320", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64f81bdf-a744-49ca-a460-0296748adfa4", "sighting_of_ref": "indicator--212f55f1-463d-4a0b-93d3-fe9f5ae7e86e", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab78e8d-6d60-4d63-837a-1ba394d9a636", "sighting_of_ref": "indicator--07aa61e7-fc72-4cb6-b1e5-79c8ec3b0fc3", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9872f4b8-0a0b-4eba-acc5-0dff862160f8", "sighting_of_ref": "indicator--b29f55d4-6da2-4b4e-bc0f-0b689138e994", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0402162-3a91-4610-afb4-433308afa213", "sighting_of_ref": "indicator--eaf790b6-8be5-457a-9267-232c31ffecf8", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7befc8-53f3-454a-b658-e59f6e2db241", "sighting_of_ref": "indicator--b795d7f2-8869-46c4-bf30-144524b703af", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa8eff1-4fe4-4e57-b243-65d4a29696df", "sighting_of_ref": "indicator--bbec53b3-8ddb-4746-9f4c-7b0acb2158d8", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b973507-d199-4b20-bcb6-52180c75d622", "sighting_of_ref": "indicator--bbec53b3-8ddb-4746-9f4c-7b0acb2158d8", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c91e12a-c89e-4c24-90f6-2076877f4157", "sighting_of_ref": "indicator--d1ad630a-21c0-4de8-8db3-338a927b37f5", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ccbda6-623d-4dc1-bcbc-cc606b1cb643", "sighting_of_ref": "indicator--fc45f27c-23a3-4c9d-a4fd-7c95fe8a6e2e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544d645c-841d-4bad-8e26-5b080e551c28", "sighting_of_ref": "indicator--3ea42ae7-eed2-4719-87c4-46b42f9ac2e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c602e2d7-1351-481b-ab6e-7130ceaffa7d", "sighting_of_ref": "indicator--e986978a-2150-4d7b-aae0-ef96ec60d4e2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0284c7-4b93-484d-b73c-d2afa68e46fe", "sighting_of_ref": "indicator--2558d359-9a62-48bb-bef3-493c376cf741", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998582d7-058d-4fd5-ba41-da5fa3e35743", "sighting_of_ref": "indicator--b922893c-395e-40bd-a57c-ac463b8c86a9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fc08a8-9d9c-424b-8dc1-812fb746fd15", "sighting_of_ref": "indicator--6335451d-45c6-40db-b590-3dc5883c5f8c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4649bc0-3164-4ed5-bd5f-b51813d34987", "sighting_of_ref": "indicator--6335451d-45c6-40db-b590-3dc5883c5f8c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6559f0c8-80a6-41ff-9f16-d5ca1d761bb6", "sighting_of_ref": "indicator--95e28e3b-69aa-469d-9ea9-75788593217f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2312b02e-4145-4292-bbd1-75501a07c731", "sighting_of_ref": "indicator--b4c73157-f570-44ac-a1f0-37698b9db74a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e748ae-4c56-45e4-ae72-acbd65d6bd9f", "sighting_of_ref": "indicator--cd101d3e-1df3-424a-beae-698e406d4c60", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5a830e0-127c-4020-97ac-9489659bc532", "sighting_of_ref": "indicator--66b6f2c4-8d32-49d4-9f43-87ff198223a1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3813216e-bff5-4d04-8891-158b5dd67571", "sighting_of_ref": "indicator--7fd1a1bd-8806-4ac2-9469-3ad6a8fcdee6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b401f26b-86a2-4b25-a3e7-6b037c5daa31", "sighting_of_ref": "indicator--0e6f6c67-6ddb-4912-aac2-806451ef27ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97fd0ba-f206-458a-9ac0-61e4227ec18e", "sighting_of_ref": "indicator--f6ac6e77-cc49-4a43-8eaa-c39c169f0c91", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8da146-1c9f-4c37-b158-00782713b087", "sighting_of_ref": "indicator--77f2030b-5283-41c4-8d2f-6bab6692f18f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0d2867f-944d-4093-8fcc-73a3899b2802", "sighting_of_ref": "indicator--e832b3db-36f8-4990-aaff-3883885a8562", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2808351-2c21-4e0d-a8c7-9253e71eb853", "sighting_of_ref": "indicator--6ca4ca9c-0b6e-41b1-996a-19604ecd9b80", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1bb724-21d6-4f1c-9b95-0a5849aa28a2", "sighting_of_ref": "indicator--b11227df-158a-4239-b742-c9bc1ba5d250", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed32d500-229f-47af-a824-cfdef69f0beb", "sighting_of_ref": "indicator--859fc799-eac0-4601-8a17-656467c54702", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf3b188-4e81-4526-bc2b-1b4924aa1bb8", "sighting_of_ref": "indicator--5b77b31f-9f75-4639-934f-196a31b55024", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1b078e-6e6b-4447-9cc7-7870c8c6271f", "sighting_of_ref": "indicator--5b77b31f-9f75-4639-934f-196a31b55024", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02c04fd-7227-42e7-9e6b-f844fab0a400", "sighting_of_ref": "indicator--26a6d7e8-001c-4a03-8045-edbbf63e0492", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b566c19-a5d9-41ce-85e7-8193c7b08df3", "sighting_of_ref": "indicator--716d4abd-0aaa-45e4-b1f7-8aebe3b41eda", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef720de3-140e-47dc-a599-a57c67332a2d", "sighting_of_ref": "indicator--f9feb40e-82bc-438f-af65-cee5495bbb7a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f117e1-dc36-462b-9e2e-28e4ae09c3ff", "sighting_of_ref": "indicator--cb2fc915-d45c-4ab0-827b-44ae9c64e313", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802d5780-7100-4d10-b353-daf0c12921ce", "sighting_of_ref": "indicator--fa1b3b27-d5e6-4fc9-a2e4-afb753ff24c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d04d5f-3fbd-47cc-b4ef-f1b6b2ecb449", "sighting_of_ref": "indicator--9d26f765-7209-4f48-b4f2-ef52e0cb3314", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375b60d3-7053-4f2f-a69e-a07e7e49d8e3", "sighting_of_ref": "indicator--e5356068-4eb5-49d6-8ce4-4e3fea5009c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fcf77e-232f-486f-b405-3699a7f4d242", "sighting_of_ref": "indicator--b2482ae5-e1d0-4406-98d3-3ae15a06fd40", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa7c51f-35ff-4e09-8b18-70cd04e72351", "sighting_of_ref": "indicator--b2482ae5-e1d0-4406-98d3-3ae15a06fd40", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ba9982-768a-461c-ad19-6f5ab3e52282", "sighting_of_ref": "indicator--2319a1b3-2c4f-4431-b3f8-7c8db0e6cab2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584dc543-34f3-470a-858b-3956c8a7436a", "sighting_of_ref": "indicator--2319a1b3-2c4f-4431-b3f8-7c8db0e6cab2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51e1a7e-9251-4f2a-9e93-e093a240524d", "sighting_of_ref": "indicator--c231d174-7c46-4834-bac3-b7862206b99a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8feeee2a-a86e-4dc9-bdeb-c05fd8f58ebd", "sighting_of_ref": "indicator--7013af0e-cb68-4482-9ee5-6aac14b91d0e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9858c459-d0b0-4cd0-b128-0c4241fee71e", "sighting_of_ref": "indicator--b51ad54e-183d-4ae2-9ac8-a9c5f366df4a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a35b18-4c8e-451f-99cd-a3e28e4e4fc1", "sighting_of_ref": "indicator--298b337a-024c-4862-a8e1-4de44af444eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4f4805-68f7-41de-918d-1ac1f675e76e", "sighting_of_ref": "indicator--d79599d5-d47c-4bc9-8586-fc5a1205b4a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bfdb26-bc89-4653-8211-96331266c947", "sighting_of_ref": "indicator--75ff4ca3-0cb6-4e61-a0b3-11ccc3d9fc06", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee178c3b-3cb3-41bc-9002-b463868276a6", "sighting_of_ref": "indicator--507f12ae-6f88-4e6b-8564-ce12054330c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6ed724-a51d-46b8-a7d1-ff98faa3b1d0", "sighting_of_ref": "indicator--99cf8b61-6db4-4e87-8957-70a2ea390847", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dbdd86-a26b-4496-abef-95661a1c23a2", "sighting_of_ref": "indicator--a1b1332a-3209-447c-8064-f273b60de17f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5ed4bc-464b-4326-8ba7-95b55d270fc2", "sighting_of_ref": "indicator--1ea86704-efa5-45a0-9551-2d2927280a3e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f0567b-6cd0-42f1-9f8a-f82ba7492126", "sighting_of_ref": "indicator--b0c801c7-bb05-407b-8cac-5448f66a7901", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68f6dd6-5849-44b0-b019-70b1e44926a4", "sighting_of_ref": "indicator--9b4e9d8a-f6b8-4c98-bac1-9964fe665ec9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331db96c-6f39-4484-94d8-8760684a98be", "sighting_of_ref": "indicator--9b4e9d8a-f6b8-4c98-bac1-9964fe665ec9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142204c8-9068-418d-b704-e368f075272d", "sighting_of_ref": "indicator--0536346f-8b6c-4ab8-ba71-0dda788fe1e9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a188ded0-aebf-4456-b482-df237729d0f4", "sighting_of_ref": "indicator--efb0f346-2a0f-4379-9b36-dc072a9c922c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7887e2a2-68b1-4e10-b4cd-daac4cd25625", "sighting_of_ref": "indicator--d1fcd781-3ff3-4e20-9b22-1ec8cec726fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db88fce-aa2e-4ffd-ace9-0f85ca5a8658", "sighting_of_ref": "indicator--e3e20c65-f13a-49b6-bdde-8582f288a721", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d660d282-b3d8-4cf1-bd5b-837b72d5e868", "sighting_of_ref": "indicator--19fbe216-70c7-4aea-ac18-36b62b49f570", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3a7762-cc68-4a09-a0d9-81bf61c5457a", "sighting_of_ref": "indicator--6490ad19-6b13-46a6-9186-379ed0c504ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52f58b5-0126-4aec-a389-c824c89585a9", "sighting_of_ref": "indicator--99140def-4f0b-49eb-86e4-a4aee8d5cc53", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ff35d2b-cb13-4456-9315-ef0f681bcbf6", "sighting_of_ref": "indicator--696efa5b-d462-42ba-8a5e-9ea76454c4fa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9062508b-af8e-4dac-8ccd-8dad89be9308", "sighting_of_ref": "indicator--6aaad87b-cb56-4380-93fc-b01d1fef7b26", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e02fca-d6fd-4a8e-b53a-1e3f8e0d3a60", "sighting_of_ref": "indicator--7de82b1b-0f5f-4ae9-8b0d-a42797325859", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1fa6efd-8a51-4237-aaa1-53edc3084c70", "sighting_of_ref": "indicator--1469fa18-2c3b-4169-86af-97054c4318b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8a8413-4dc2-4f29-b03b-c1fac2a61be9", "sighting_of_ref": "indicator--1469fa18-2c3b-4169-86af-97054c4318b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71876208-edb0-4c6c-a422-4504eeaaf21b", "sighting_of_ref": "indicator--cecb8e53-0fcb-451e-bcf6-4d540b919432", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b8adc9-be6c-4610-8c18-ccae032355eb", "sighting_of_ref": "indicator--cecb8e53-0fcb-451e-bcf6-4d540b919432", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14310ba3-e4e6-4519-ada1-a232066bd64d", "sighting_of_ref": "indicator--ff5546a2-5c1b-441a-9fee-9cb4ead25dd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f779cb-69f1-47b4-bf7d-575bbf9bec4b", "sighting_of_ref": "indicator--ff5546a2-5c1b-441a-9fee-9cb4ead25dd7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cdcc08-e935-4e4e-b3f3-0bcbcc70f678", "sighting_of_ref": "indicator--17dec446-c848-4912-936d-c7b1469241e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9dfff85-2753-4568-9846-33012e0d083c", "sighting_of_ref": "indicator--8d4b5fcd-a944-487e-a736-2296b53d7382", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2f6214-f7bc-48be-a4ab-16c0ade6b63b", "sighting_of_ref": "indicator--8d4b5fcd-a944-487e-a736-2296b53d7382", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed69bd7-0c20-458c-80e2-7fd7759ffdb3", "sighting_of_ref": "indicator--e71eeb8d-8954-4260-bbdb-31098d94d663", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09e3de1-7019-40f5-a428-5e0fac7201ec", "sighting_of_ref": "indicator--37882545-4df0-4e48-8fff-a42f14215a8a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46c26b0f-1e15-4187-9d74-fc55446f37aa", "sighting_of_ref": "indicator--1f95633f-454b-4ed0-a830-59c700ab15d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a8ff01-ad55-4505-a083-163f906f6a24", "sighting_of_ref": "indicator--6089da9d-a629-405e-a190-78f68a50bf76", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc1cc293-5c1f-43eb-b97e-06ed6ba0cb45", "sighting_of_ref": "indicator--69fd33b9-fc4c-4b47-81af-bfc739324b43", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ac0db5-b4a1-48f2-bb27-896bedc084cb", "sighting_of_ref": "indicator--0156dbcc-df46-44bc-9a6c-0322502dcab6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedad93c-214b-4093-b8e1-34e35ed0d6ae", "sighting_of_ref": "indicator--6e88aa4e-aafe-492e-a37f-05f7a26f0ab6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0952499-99f6-4cd6-a921-0416e5e74bb8", "sighting_of_ref": "indicator--c9308aa9-df47-41b7-838b-f2521112a4f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878a7d1a-d5b2-4ba9-bd92-68b5f56926e6", "sighting_of_ref": "indicator--d0bb629c-293e-4a02-bec2-8231f1f96bb6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83e818a-6497-4bd3-bfbe-2b2588c43849", "sighting_of_ref": "indicator--dfefab70-eaad-4cb3-b8a8-b4ea155be838", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c19d477-a22f-4e0b-9405-95f336382669", "sighting_of_ref": "indicator--78b78b72-7b7e-40bb-a600-db899413de1c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56554c0f-0141-4336-b956-636315c3a01c", "sighting_of_ref": "indicator--91fd6618-36ce-436c-ac85-fef2f2cabaf2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9284e5-8749-43d9-ad93-d6f318a9d7ac", "sighting_of_ref": "indicator--0de64213-d8d3-4eda-b789-e52268dbb132", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bb0bf36-0b53-4ad1-b867-13bc9b4f0e09", "sighting_of_ref": "indicator--78d9fedb-a85f-4938-bb44-e1b7a9ceb45d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099891cb-9dfa-497f-af1b-aba94b292a38", "sighting_of_ref": "indicator--f79933a6-6e5f-420f-85ee-097096e5b33f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7936ae14-0a03-4508-90cf-f8a3f7afda3c", "sighting_of_ref": "indicator--d410b8b6-80d7-45ae-bc49-bed15bb71de6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2448b6-931e-4b9b-b2fc-435e782b56ec", "sighting_of_ref": "indicator--1fbee8be-7db0-4139-a8db-ba4680dcb815", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1fc516-701a-4f18-aeeb-c2fe42466328", "sighting_of_ref": "indicator--4c2c200d-080c-4253-bcda-6cea25584735", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f62b95-b0e6-486b-9853-2ff87325d2da", "sighting_of_ref": "indicator--5f266fbe-12d0-46b0-adef-74be64bc0c66", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7e2c1e-7583-4e73-9ab9-f2b0ca1ccc9f", "sighting_of_ref": "indicator--e8f9d2a0-d11a-4b57-9ab8-68b77b840a79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32a65c6f-a670-4b67-b13a-fea1023db11f", "sighting_of_ref": "indicator--5915a58f-8f4c-482d-98ae-05a74bd92673", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50e032e-5675-4470-932a-edfa33de7edb", "sighting_of_ref": "indicator--5915a58f-8f4c-482d-98ae-05a74bd92673", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6870abb0-f3bd-4a7e-bdfb-f66bbd355d37", "sighting_of_ref": "indicator--fd9f708e-5d7a-441b-9dd4-311db090ffa0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24036570-ddf8-49e7-856b-7e3db7a223b8", "sighting_of_ref": "indicator--fd9f708e-5d7a-441b-9dd4-311db090ffa0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125f814c-91e7-42d0-a4de-15c3e93e948c", "sighting_of_ref": "indicator--34a248e8-5cac-4f5e-b1b2-e8afcc4182cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf49ce4-4c6b-4a6a-8628-71bced0dc480", "sighting_of_ref": "indicator--11cc011b-ecac-4a61-b5b2-fdb048af6f29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a17874a-0d51-410c-b6f5-480278f88825", "sighting_of_ref": "indicator--11cc011b-ecac-4a61-b5b2-fdb048af6f29", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19722d2d-b1f8-4741-b845-e8b6126dabd7", "sighting_of_ref": "indicator--54a89d7f-1dff-470d-8db7-b054baa7b869", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f586becb-eac9-4667-840c-444caf4df954", "sighting_of_ref": "indicator--dc71a3ce-d567-4440-ae1d-fcab847cb5a3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2586b978-9ecb-479d-8edc-2717d5eff052", "sighting_of_ref": "indicator--dc71a3ce-d567-4440-ae1d-fcab847cb5a3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbcda73e-8051-48f2-8ecb-202e0b5fd9a5", "sighting_of_ref": "indicator--43408e8c-120e-4c58-8bfe-533dfea295fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a6528a-92d1-4961-8f98-43fbdcd24f39", "sighting_of_ref": "indicator--4c0fb7bd-47e8-4eb9-9499-fff84e5bd6b0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9089b42e-a890-4e45-a029-f9e644a7555d", "sighting_of_ref": "indicator--c015772e-1437-4232-9e7d-3cb3b955b420", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cd438f-4f46-4dfb-96c0-a4d59bf87b29", "sighting_of_ref": "indicator--c015772e-1437-4232-9e7d-3cb3b955b420", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9728503d-a6bc-4a56-9463-970e830259a5", "sighting_of_ref": "indicator--c5801733-860d-45f4-a9bf-be56049557ce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1557f231-0c81-4f5a-a5f1-0a32190b56d4", "sighting_of_ref": "indicator--851f1dbc-4f6f-4a20-b09c-cea5244336af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa217da-45ca-4d06-86e2-6971d140c303", "sighting_of_ref": "indicator--d2c42588-a4b2-4527-b071-e62f58550e27", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea7c3087-27b4-48ed-b46a-56af3cb77d5a", "sighting_of_ref": "indicator--916263d2-624f-4617-86a9-63bd35d4d589", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95d1dd6d-f6dd-4997-b80f-c141aff1d9d3", "sighting_of_ref": "indicator--c03f4424-6530-4646-a00c-121f4b655d03", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9d504c-8853-411b-aa60-c70c688d1eed", "sighting_of_ref": "indicator--39f7c144-a9de-4a93-a8a2-d4b533e3e31e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944f392b-c050-4c4a-a553-b2a93c07de2c", "sighting_of_ref": "indicator--93429f14-fc5b-468e-9cb5-ee35c15f171c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9df79c-7a63-4307-91fa-2217e5c40d00", "sighting_of_ref": "indicator--78ddd162-778e-4ee2-8830-a48804264c71", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9b3c01-cb6f-4269-b0ad-d66f9f44d73c", "sighting_of_ref": "indicator--6b3993af-2b76-43fd-a723-7fa13ec3e3a1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c235aa-85e1-4c35-a202-4f5e6a836232", "sighting_of_ref": "indicator--08bddb47-eca0-4528-918c-3dbb0c378b0e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19038a0f-457e-4a36-9345-079436516691", "sighting_of_ref": "indicator--063555e6-6a81-4e65-b631-ee273b8c19ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec555e68-d0a6-4476-89e8-07c861c06cac", "sighting_of_ref": "indicator--063555e6-6a81-4e65-b631-ee273b8c19ec", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf951bdc-985b-418d-9fc2-a7f8d49b9a52", "sighting_of_ref": "indicator--f7eb0037-bc53-4f0d-bbb7-82bd5adb9019", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b2e6651-585f-4624-b416-91eba40e7b5b", "sighting_of_ref": "indicator--7de49f54-b984-408d-a108-c9ce8c3192c9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d37bff3-4f0e-450b-81d6-4f5192158a18", "sighting_of_ref": "indicator--95237565-f0dc-414d-8d9b-0ce9cdabd0b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287c28c1-a0f9-4d78-8e05-0f0394e38806", "sighting_of_ref": "indicator--95237565-f0dc-414d-8d9b-0ce9cdabd0b5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ea2390-b2d3-40af-8e69-e0c928dac764", "sighting_of_ref": "indicator--baf304bb-73ff-4357-9981-0be44d6b9485", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f5e76a-e7c7-49f2-9e23-216d6f9ef7cb", "sighting_of_ref": "indicator--14a01b3d-c39e-421c-af5d-ddd0d2054b9f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d681cef-ed1f-4f23-a111-f99c5bbcdf06", "sighting_of_ref": "indicator--a4023739-8cdc-46eb-ace5-3483230ede90", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95198802-202b-4450-a5c0-c138f0c14e63", "sighting_of_ref": "indicator--4e6d216f-9a58-4748-8e18-db429e2f642e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0ac994-c54d-49c4-a0e3-fc88bf8493dd", "sighting_of_ref": "indicator--5a67344f-3644-47fb-885c-4238a0474220", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--959db54b-f356-4d30-927f-1f02ba158182", "sighting_of_ref": "indicator--1b709850-8d8f-483f-806d-800317969c18", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22516a11-e52a-4684-b0c7-ac0b8b5acb43", "sighting_of_ref": "indicator--0a47fa40-a1a1-4bbc-8a5b-81b29dcc3b10", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadc24b6-af23-4657-bd4c-aeb993d66872", "sighting_of_ref": "indicator--e91236c5-87cc-48f9-8bee-fba63c23cfff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954344af-cb6f-432f-80bf-78e8a58e470c", "sighting_of_ref": "indicator--cbd347cf-8ac2-4776-b783-585dd366ff25", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80aa4753-0f3a-4bee-af1d-e054c8fff0a5", "sighting_of_ref": "indicator--6da3d1fd-6d8a-4584-a6d9-58c7a556a120", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15353ae7-1adc-4c05-94d1-e0283ca31252", "sighting_of_ref": "indicator--87ca702b-c595-43f9-bc5a-375a09330e6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fe8bef-95b0-4a96-9786-973762875898", "sighting_of_ref": "indicator--2604cd12-4b1d-4945-8157-1ef6c35470b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4ab930-ed0a-45c2-ab8a-3e81bf9e510d", "sighting_of_ref": "indicator--f5793e6c-85b3-4251-b710-80db7d951214", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e96bf5-b94f-4757-aadd-686fff4c5c5a", "sighting_of_ref": "indicator--f5793e6c-85b3-4251-b710-80db7d951214", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330b051a-47ce-44af-ac9d-7dc19dcfc760", "sighting_of_ref": "indicator--14b67a7b-a0e3-4f51-ae1e-f0b0d434e724", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92430484-c316-4002-8113-d2c97e346734", "sighting_of_ref": "indicator--8d58492b-9bae-4c5b-affc-de17a1132dc8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d129e1eb-c2c5-419b-bb26-3567c1d2c1dd", "sighting_of_ref": "indicator--8d58492b-9bae-4c5b-affc-de17a1132dc8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d154ee-c20d-4977-892c-a483b20337bb", "sighting_of_ref": "indicator--01509345-8fd1-4cdd-aab2-7abf34b3ff13", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586b9e0d-5209-4ff7-a87f-79bb3562f96e", "sighting_of_ref": "indicator--fa046610-9e8e-4ed7-992a-95e6699548a5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48b82a4-94cf-40ed-9acb-1144f37eacbf", "sighting_of_ref": "indicator--2dde4b0f-f7d6-4403-bfd7-eab9263e1972", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65daf7a6-997e-4a29-badb-3510cf688327", "sighting_of_ref": "indicator--11575c4a-68af-463a-8c04-7478741acee0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63dc79b-9189-42e1-bac1-7ba117e5c0db", "sighting_of_ref": "indicator--c35afc9b-0d31-46a6-9b85-e00676e16f32", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f239b1d-5dd3-43e9-ac3b-f191266994e0", "sighting_of_ref": "indicator--65f968ad-1b32-4256-9dec-a9ed803ecd35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e081e1da-8ee7-44c0-aaac-83bea40c489c", "sighting_of_ref": "indicator--65f968ad-1b32-4256-9dec-a9ed803ecd35", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0210e5-e2b7-4a83-8de8-33a898733dc2", "sighting_of_ref": "indicator--be4f24c7-8236-4658-ab76-607c5e490c72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d65e54c-f51c-49bf-9253-c84c2a9baa50", "sighting_of_ref": "indicator--cf98027a-831c-406b-8dba-a310225e0347", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041bb7c8-232c-43c1-83aa-f44244308e69", "sighting_of_ref": "indicator--0a9fb71c-d36c-489d-8713-f15ae31b7791", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3d8dc8-b904-4a8c-97fb-52932cee6d8a", "sighting_of_ref": "indicator--0a9fb71c-d36c-489d-8713-f15ae31b7791", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c9007d-c8b1-4b95-9ffe-b2e55a6f84c5", "sighting_of_ref": "indicator--f726e602-476b-4b12-8174-00b6c6c0b918", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2125f9ec-4ebb-4397-886e-e8755c91dc7a", "sighting_of_ref": "indicator--3c249d00-1a89-4ec4-8edd-61c2676f2058", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6296f8-9a4b-4d42-bb4e-698b742aa200", "sighting_of_ref": "indicator--e5516f7c-f26f-4241-9c8c-53fd98264f17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037263a4-7dc4-414b-a7c4-9df0a14f8569", "sighting_of_ref": "indicator--12aa27fe-7c9e-4522-ba0b-8795dd7e3917", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6cfcd5f-40d9-495e-be86-c66eb9f361d5", "sighting_of_ref": "indicator--b4ec5e24-76a7-4e76-8872-4f4401b88e50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73671c8e-d644-4ce3-891d-88f6f98bf1cb", "sighting_of_ref": "indicator--21a9e692-1b02-4fd3-9a2c-6028f8c8a8d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210e1ff2-6c6b-4e5a-b108-7f0002aa2c3b", "sighting_of_ref": "indicator--759fc563-523b-4d64-852c-b4c2452bbfed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--435380ce-cb90-42d7-99f9-f5eebbc2bddd", "sighting_of_ref": "indicator--a84ea4ee-a842-4b11-8b79-dc8872b6ab9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a44b1a4-decc-4284-8262-0abb952693e0", "sighting_of_ref": "indicator--6b7f1191-21ea-40c7-9778-c1415034973a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d118b6fb-8ea0-4a8d-9e65-bc244dcd3470", "sighting_of_ref": "indicator--f5f6f42a-fccb-40a4-b932-21d62bb79d42", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7134e0d-5feb-4c61-a957-065d041705dd", "sighting_of_ref": "indicator--955122a4-ec0f-4839-a52d-2a030020de79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629b0fbd-ce24-42e9-9729-6047185a898e", "sighting_of_ref": "indicator--7c2558ce-4769-4a83-b767-9cebe524b2ba", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f74f5b0-df6a-49b7-a593-e4d205efca24", "sighting_of_ref": "indicator--4b51db53-9b3c-432a-820e-20443fa5a39a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ec0857-def1-4187-a473-cb4337a7bf4e", "sighting_of_ref": "indicator--c7ac94e6-485a-4900-a601-9ad197774d05", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdebf6b-a634-4b34-87ea-72b72d87ca8a", "sighting_of_ref": "indicator--bb3a0ee6-51a8-476c-b0b2-80671b6e8305", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021d6d0c-cd17-4a32-b99d-10794c37ab3d", "sighting_of_ref": "indicator--9bdfe9eb-a7f1-41a9-9b09-1c9a261ff420", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7631fcdc-1a04-495b-8206-89bd37f3ea69", "sighting_of_ref": "indicator--0f9e514f-4824-4a34-8955-3f321609777f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c29099a-0507-4af5-ad5e-6f1f54070a1b", "sighting_of_ref": "indicator--4804867c-ab84-44b9-9586-fa1447c4192f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672e8fa0-4a1d-43c7-9ffe-5b97c83040c8", "sighting_of_ref": "indicator--1f818558-c70c-4c0a-8667-50125a6f2b66", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9230f8-8c7a-436e-9cd7-00309beb8160", "sighting_of_ref": "indicator--5ec14f6c-ce54-4fa1-9765-f46747eecd59", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b460b0f-6c66-4242-a9a0-d05a144014c9", "sighting_of_ref": "indicator--84bed087-768e-4a1a-99d4-bc2eeb7773e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64c01d7-bf80-47e9-8d38-e68a0d325670", "sighting_of_ref": "indicator--1a3eac77-6360-4528-ad9a-e8eb5125aad3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095a2ee7-67ed-465f-a403-4c0e3d071668", "sighting_of_ref": "indicator--e0374e98-b17b-4539-9bf8-0c2ab6e9b15a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2383fe12-c5a9-414f-a6f3-59801724ca63", "sighting_of_ref": "indicator--825240f8-66e8-4f01-a090-b0289756eade", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb8a0f1-bff0-498b-ab63-45f9bf590207", "sighting_of_ref": "indicator--15be54d6-88fa-4ada-b8a9-c9d9d24e99d3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ab683d-df50-4909-a57d-e1e1634c58ee", "sighting_of_ref": "indicator--0cfa8c31-3f0f-4c4b-bc55-f3a777cfd867", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d01a9c-20ae-4dac-be1f-b29ce4dee5c7", "sighting_of_ref": "indicator--310c8e40-9cb0-4405-be5f-46e688773984", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff85007f-353f-4ba9-8a07-28d3ba2264b4", "sighting_of_ref": "indicator--a45e4764-cdfd-456d-8e47-80303c5b22c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--851aecd0-96f5-4d84-bfb9-23d1e34f90ec", "sighting_of_ref": "indicator--04dfdc7d-4cb8-48c2-bb2c-39decdb4928b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--894bdb41-92f4-4538-a031-b99a1272c232", "sighting_of_ref": "indicator--74165a36-feff-4189-8b48-03f4c30640a1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12b5c18-a02f-4fa3-b86c-0f55f2857b06", "sighting_of_ref": "indicator--0ad34e8b-f1fa-4411-bea7-ad48337aaaac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0ffbe9-ae0c-403a-82a3-4bcb216275b7", "sighting_of_ref": "indicator--07e27b2b-c9d0-4954-9f93-00a22a512ca1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68031559-fc59-4daf-99f2-50b3da56593a", "sighting_of_ref": "indicator--1109f306-e1c2-4e76-bac6-7c8cf1dbf0d3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac3ad03-7e38-484a-a6eb-4b3844d58b17", "sighting_of_ref": "indicator--0a062373-98f1-459c-ab9d-bca9145b518c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25295629-7fcf-4011-b940-36c941aaa495", "sighting_of_ref": "indicator--a5669328-2a77-4779-ad9a-d539b18363d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0733c882-4511-4825-9838-6396e61208f1", "sighting_of_ref": "indicator--9460c7e7-086a-4170-8140-e28ee9617681", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9be9087-4a63-4b35-bc0c-f7bcdb9ef947", "sighting_of_ref": "indicator--3848a5b5-5d6a-463a-93c6-a55fcc3993ce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aae551a-bdcd-4ed8-aef5-c83681b78253", "sighting_of_ref": "indicator--3848a5b5-5d6a-463a-93c6-a55fcc3993ce", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9074f083-97ff-46bc-b7c3-20ca56a1c055", "sighting_of_ref": "indicator--72a7b17c-4348-4663-baad-f272e6ac7737", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f97aca-f339-4c2d-96a0-d0b206a62030", "sighting_of_ref": "indicator--dd4aecbc-9d34-4a94-8ab6-ad24eb999cdd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5328e97-81f4-4368-9bac-e55e72885ef5", "sighting_of_ref": "indicator--1fa32889-94a1-46fe-a11b-7765e2cd59f3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25450304-26e6-451b-9f5f-ed10530ff1b6", "sighting_of_ref": "indicator--b1cdc754-42d6-4998-ba17-62d38b5e7c72", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68255ee-67f0-4d5e-bfc9-6f6a7521c5b1", "sighting_of_ref": "indicator--ca0299ee-9b2e-4ec0-a51e-f04c3ca5ee75", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da32265a-13ac-4cbc-bd4d-3fe78d23ed6a", "sighting_of_ref": "indicator--3011def6-e2ca-4d74-af6a-2174e514dd2e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3856a0c4-70b2-4547-ad01-edb4129f5b6d", "sighting_of_ref": "indicator--40bc9100-2716-4720-b158-02b69725e007", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d83c1d-8c2a-4a4f-9ac8-d994f2d10a61", "sighting_of_ref": "indicator--40bc9100-2716-4720-b158-02b69725e007", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab18d910-7dad-4e93-9042-4444f956ce5d", "sighting_of_ref": "indicator--bd766f37-322e-4a80-bff6-8bc9d29bf05b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf87209-b33f-41d3-a382-8f29a0430327", "sighting_of_ref": "indicator--bea5faf0-a43a-434c-9fec-6216921fb7a6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1afeeaed-6d7c-4a55-a56c-a123937d6dd7", "sighting_of_ref": "indicator--0bfb096f-0e08-4bcd-9e28-54c30bad3389", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56155f03-acf1-44cd-a3e6-89e8db55926c", "sighting_of_ref": "indicator--89406379-3f7e-46fb-9d2b-854ad61fabc4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7979e7-6fe5-43c3-92ba-e3f38977b975", "sighting_of_ref": "indicator--3ae7bc5f-aa1f-4533-8ce4-e1e8d497b325", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4c1311-a912-4eea-b68f-b38ef4547d6e", "sighting_of_ref": "indicator--99ad4908-8c73-49f7-983d-00a27fe291eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84181831-6b8f-41cc-b73a-19c57dc3d934", "sighting_of_ref": "indicator--44905439-2b72-46d3-8fce-ca4b69da1121", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f058dda-2e2a-4188-8b0d-f2cf263d0d10", "sighting_of_ref": "indicator--5e717508-003e-4df3-a446-029fc28a23ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db892360-b097-48f4-a6eb-0d0b2eede1e3", "sighting_of_ref": "indicator--443d4915-dfcb-4c08-993b-0178d1074d86", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9bba68-1235-446c-b313-d4cd328c7c00", "sighting_of_ref": "indicator--443d4915-dfcb-4c08-993b-0178d1074d86", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1491c9d-b0e0-4e46-bbeb-5c32e86d46e3", "sighting_of_ref": "indicator--d016b65c-0609-4ca3-a950-ca4939b778ae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea50e2c-0527-49c3-ac99-df90feadcdf3", "sighting_of_ref": "indicator--5e78965c-19c6-44c2-8c42-46c787d71042", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab7056b-fc9b-4e2d-8809-5c7daec4b8e5", "sighting_of_ref": "indicator--70993529-b951-41d3-adc3-dc39985e0c89", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d275958-9c40-4d8d-9079-4cff2c551c6d", "sighting_of_ref": "indicator--4fa5d839-0ed9-4ca8-ac7f-c6f9723fbbbc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee017ef-0372-490c-a874-a3f4bd903d50", "sighting_of_ref": "indicator--6e10124f-6149-4a91-a087-a191ac8e3772", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee31d0e-f03c-48d5-807d-36530072622e", "sighting_of_ref": "indicator--cee0164d-8503-4f40-9a83-2612d39b8c32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458d6962-c95f-4f21-935d-8396b0db0464", "sighting_of_ref": "indicator--cee0164d-8503-4f40-9a83-2612d39b8c32", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1496b315-a51c-4bea-85cb-2f89c9d398fd", "sighting_of_ref": "indicator--e3ec9bc9-1676-40b3-be57-5d5ebc6b47ad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc01e4a0-0262-4083-8021-572696f429cb", "sighting_of_ref": "indicator--c4a01b48-0162-4c7f-b78f-bf34ab2e9cea", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f0fdcd-7b80-47df-944c-bc7cd1c834f4", "sighting_of_ref": "indicator--60ea27bf-2be3-4670-971d-d6a0d566298f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a3ddbc-9d31-4e27-be81-725d289d1bf6", "sighting_of_ref": "indicator--199c2197-e448-4459-8f4e-e39f524e9bad", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885f4a48-05cf-45d3-9745-738b7a91c9a3", "sighting_of_ref": "indicator--7662e820-8f19-4e1c-b650-88216225f343", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9458e7d4-2171-4bfb-a53a-1bcf8c73e700", "sighting_of_ref": "indicator--a5030c24-efe5-46fe-a245-07c6400e01c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a9f482-5d9c-477e-b80f-5cdb00f70bc0", "sighting_of_ref": "indicator--c0ddfd51-4ee7-4936-83f1-ff60bc4576b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f321b0d-52b2-4000-880b-9ca1ed20ea0f", "sighting_of_ref": "indicator--4ebcd256-8187-4c91-9251-7910b0484ef2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85fa39a-e559-4faf-8f3a-f56c597939cd", "sighting_of_ref": "indicator--6166ed99-c7f6-46a0-8d4f-abc47f53ccea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e397277a-de49-4c8e-abf6-92fe1c539bad", "sighting_of_ref": "indicator--57fa243c-c1a7-46c4-a8a0-94abb0d803e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35077567-e559-4b78-b4d3-ecd756d8e70a", "sighting_of_ref": "indicator--ea996144-e0ea-4570-b720-99587edc4b21", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c4f4ec-8c81-47f4-be0a-45a1483a1d2a", "sighting_of_ref": "indicator--8357de59-ba40-42da-b897-10eafffc9aaf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1020d17-5398-4545-9d77-bd7ac5aedae6", "sighting_of_ref": "indicator--c012ffc1-69df-4240-a376-0d64b50bbd11", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d362a9a7-1cbb-484a-8df7-22cdd4d07a79", "sighting_of_ref": "indicator--cf2cadd0-f20c-46c5-9bd4-36441a0fef1e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05c34ef-4ee2-4b19-ba0d-03b0eeae0281", "sighting_of_ref": "indicator--7bbb1e56-041e-4b6f-9ef1-0d37762f781b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d66f36-1f9b-4079-b6d8-ab89bbef0f29", "sighting_of_ref": "indicator--89d03fb9-3cb2-41b3-8ba2-e3fdf92c200a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f44070-c2c9-4ae4-ae81-1ed1690634e0", "sighting_of_ref": "indicator--3a31b6d2-121e-44b3-8e9c-881ace4f9058", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ce5d1c-9879-45b5-b5fb-4d63705388ed", "sighting_of_ref": "indicator--146f546c-3eb3-4d79-b12a-24ba64b32a11", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c9c957-1360-4468-8e38-6585bfe24dea", "sighting_of_ref": "indicator--146f546c-3eb3-4d79-b12a-24ba64b32a11", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fecccb6b-4983-482f-9e47-d3e4c73c1d65", "sighting_of_ref": "indicator--e06857b4-8ee6-497b-9aad-37357a48da54", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb066e99-35fd-4d42-9758-9faf8fdd716d", "sighting_of_ref": "indicator--e06857b4-8ee6-497b-9aad-37357a48da54", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c243ab0b-74ca-4b01-8da0-d9566a594eed", "sighting_of_ref": "indicator--2354ab1d-e4c4-4e66-a918-4ebc27f027fa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0caf5e92-3f23-420c-b014-bc8d6ddb80d0", "sighting_of_ref": "indicator--03f6faf3-d97b-4f92-93ae-56c7768a7c7f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe38b28-06e4-4872-b1d6-21dc4a374224", "sighting_of_ref": "indicator--bf68e32d-d511-410f-80dd-9eac84ec1e04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12971f03-0e2c-4193-999c-e4b9b50592c4", "sighting_of_ref": "indicator--1102eb6f-6a6f-4ac5-befc-81f14b89126b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1ae81f-56e1-48f4-b5ea-621d8bb6d3a4", "sighting_of_ref": "indicator--66ffe985-b2fc-4a6b-b2e9-3bfec81cafd1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8faa9157-3605-4764-af68-c1f827630d6f", "sighting_of_ref": "indicator--66ffe985-b2fc-4a6b-b2e9-3bfec81cafd1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36193bba-c5a4-46f7-8855-6037e6c5c2b4", "sighting_of_ref": "indicator--396987f6-61d3-473f-affe-6a9533bccb29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd1f60f-9d6d-4661-aeaf-9c7f2e6e60eb", "sighting_of_ref": "indicator--aecb9df1-5be0-4454-a0f8-1e7b4fda5cf5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b47e5d3-96e0-4c80-a4e9-9e11de21e391", "sighting_of_ref": "indicator--f18eae88-8fe3-4500-9554-7b5d12d3844f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2fc19f3-924a-4afe-9045-7ba26d023037", "sighting_of_ref": "indicator--3973c1e1-dbf6-4757-b51a-9dd2bc0dc67f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6933c39a-9b7a-46dc-8843-5a926828400a", "sighting_of_ref": "indicator--3973c1e1-dbf6-4757-b51a-9dd2bc0dc67f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5ce8d6-7821-45c2-8bd4-e9d60cfe98bf", "sighting_of_ref": "indicator--8b06572e-6b9f-433c-9b3c-9a64ad748488", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30d18dd-b645-4c76-99a5-384a5115d22a", "sighting_of_ref": "indicator--8b06572e-6b9f-433c-9b3c-9a64ad748488", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e5ed86-54dc-4a5a-b675-abadd177289e", "sighting_of_ref": "indicator--0373f741-d1d2-4041-b710-0dd6a659b31c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1f50fb-780a-4a26-b1e1-4bb247807b2d", "sighting_of_ref": "indicator--59ffc597-cca1-4b35-b150-985d191cf1af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7e215e-7ac0-46d7-bd61-11fbb3aa4766", "sighting_of_ref": "indicator--a98b1f2c-0a7e-4142-9f9a-463400649e99", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c67013-e836-44fe-abe7-19c2936ed43b", "sighting_of_ref": "indicator--0468dfe9-ac36-4b9f-b34f-68f3178ebde4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ac5e8c-f11c-4fef-8544-086d3c061575", "sighting_of_ref": "indicator--85da1b21-0d31-49a2-8270-d4073c2f4a83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a4e8ea-889f-42e5-80e4-7683d8d8ce8f", "sighting_of_ref": "indicator--4e341b9a-c98a-44a0-b7b6-4dede739e157", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aed8538-4266-4aee-8194-84b26e57ca4c", "sighting_of_ref": "indicator--64b15cf3-10de-47da-ad97-e2a7def9165b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac7cdb7-883d-4792-8937-307906656848", "sighting_of_ref": "indicator--64b15cf3-10de-47da-ad97-e2a7def9165b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794fe1ca-840f-47ab-b8d5-00ad1cc33c3e", "sighting_of_ref": "indicator--e8a7880d-4fc5-447c-90d1-f4c2f6895c82", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012013d4-4fa7-46c9-8d07-936f93065329", "sighting_of_ref": "indicator--f00e9fda-aede-4766-a721-160d80343789", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b02a853-e5e1-4cf6-af78-978988bdc5a6", "sighting_of_ref": "indicator--4bbbb21d-7588-45b2-afd3-845904d1d09a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15dec546-666c-409d-af83-270aacd316c0", "sighting_of_ref": "indicator--dd3925be-691a-4095-8a52-abb978de2d24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acb1779-9d59-4ed8-a03f-bfd3161f2220", "sighting_of_ref": "indicator--190885b2-70bd-4238-aaf2-2c71a8543fa6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22c96d8e-a1b3-48dd-a691-48e73be1a20d", "sighting_of_ref": "indicator--15017cf7-9c73-437a-92d3-1779886c6ce7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0ca449-ad8d-4c61-a087-457b4fcdbf48", "sighting_of_ref": "indicator--6710187c-f15c-410b-ab41-97f2a0f37927", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b37712f2-e7d4-4fa3-831d-d66ea5fe3ed9", "sighting_of_ref": "indicator--068accfe-2091-4821-881a-1de7e6b7d398", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4c1aeb-c64b-4812-802c-98d46fd1160f", "sighting_of_ref": "indicator--87167f7a-893e-4f97-84bf-2790e68f39b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8243692a-f23b-4cad-8b82-8fad37e536ef", "sighting_of_ref": "indicator--87167f7a-893e-4f97-84bf-2790e68f39b2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8afa76b0-96a5-4808-b7f3-589f5dba8e45", "sighting_of_ref": "indicator--8babc062-d704-42c6-9be9-f97b26d5ed07", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b67b685-b92d-46c6-a035-481d9360ee0c", "sighting_of_ref": "indicator--4a41e300-dabb-4a1b-8544-7970579cd636", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17abebe1-eca1-4eff-bd22-e93bfcb2a0dd", "sighting_of_ref": "indicator--c6c73571-315a-4814-89b4-d83e9af92b6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024008a8-1813-41c0-b0df-b11597bb8ae9", "sighting_of_ref": "indicator--c6c73571-315a-4814-89b4-d83e9af92b6c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34cde48-7724-48c0-b3dc-274ef6dbb058", "sighting_of_ref": "indicator--f4a10bdf-bd06-4670-8887-1a35e5156b37", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa39662e-220d-408f-a355-41b1daf432cc", "sighting_of_ref": "indicator--5724410a-75d9-47d9-84b8-21cf41b2c119", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82b86ae-97f3-449b-8613-b138b7d7c7d1", "sighting_of_ref": "indicator--f3dd7f56-fc20-4c3b-bf5c-655a9fa25bbf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6687c7d3-57b5-4cef-9d10-e35bff68274a", "sighting_of_ref": "indicator--5d5a03b3-d0d3-4790-80d7-4ec3a16173bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d947a45-857f-4b26-9666-0894314ab35a", "sighting_of_ref": "indicator--da21c62a-b77e-4c91-af7f-218740372d32", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3258d612-352c-452f-8c73-98b6bd3eb400", "sighting_of_ref": "indicator--df39e01f-ecd5-43a4-90de-d3600bb9853f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685a9cfa-7c57-470c-bc81-8837a24138be", "sighting_of_ref": "indicator--d8bd9ad0-907f-4c27-8a0e-07e3987ec043", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7c1398-c2f5-4c50-af16-2a1c2eb668c0", "sighting_of_ref": "indicator--d8bd9ad0-907f-4c27-8a0e-07e3987ec043", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d97b48c-68e5-40e2-ab64-d6d0e859a74d", "sighting_of_ref": "indicator--dc1074af-682b-478f-8689-accd595e508b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dc9ab6-afdd-4187-a20d-fadaae6cb2d2", "sighting_of_ref": "indicator--c9462dfa-0581-4740-8cc2-a94f27be2fda", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afc3d4c-ecd8-4b27-a78a-68455cd49f40", "sighting_of_ref": "indicator--45326e22-0e81-40bf-a3f6-6ba60057ecce", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e98f4a-1f23-4616-827a-0f7445917f7a", "sighting_of_ref": "indicator--768c6a7c-3bc4-4cb7-a0dc-30b2e42f41e9", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35319cc6-f9c8-487a-8ef8-53ae02d30a64", "sighting_of_ref": "indicator--c1426dff-ee04-4714-85b4-24d37f0ab257", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e561d16e-0836-4e9e-8f1c-4a24f90d8060", "sighting_of_ref": "indicator--982734fb-cd63-4a0f-a450-59d595e9cd4d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3619a7-8509-4338-874c-5cf7a3f98996", "sighting_of_ref": "indicator--86bb2925-3a24-4916-b036-1702de7d684d", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c308a77-f144-42b2-9a94-c675227e4708", "sighting_of_ref": "indicator--86bb2925-3a24-4916-b036-1702de7d684d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f1e240-0e61-4e49-88f9-f6c28d339d09", "sighting_of_ref": "indicator--43967ec3-4542-43f3-8402-8129510841ef", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa05cd9b-9c96-4458-ae6e-8c1a0862d327", "sighting_of_ref": "indicator--92426609-bb03-43ac-90c6-4ddfd8b6c962", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7449063a-83dd-4d6b-bc0e-6cfd4a09e68f", "sighting_of_ref": "indicator--f12be2cf-feac-4567-8f5b-83be92588a39", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3f729a-679f-4b09-a0d9-6e88e59f714e", "sighting_of_ref": "indicator--dbcfb08b-88ca-4f30-8aa3-6a3252af4771", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c430618-07d2-4ee5-a259-6ab7168a0eeb", "sighting_of_ref": "indicator--dbcfb08b-88ca-4f30-8aa3-6a3252af4771", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--494dc39d-da8c-4d5d-8939-ac7b1123c09b", "sighting_of_ref": "indicator--1f090061-aef3-4b0a-8e7b-1a20e050e337", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17a66d6-a620-48ac-95a8-f8660e951865", "sighting_of_ref": "indicator--afa30efe-7006-4ebf-bbac-88a3884014dd", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f245f06f-0763-4d85-aedb-208aff6cc22e", "sighting_of_ref": "indicator--ccf16480-9f54-44d8-84d6-f48fd23fd8f3", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a54dfe9-bd9c-4c53-b689-be4632b80235", "sighting_of_ref": "indicator--ccf16480-9f54-44d8-84d6-f48fd23fd8f3", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324e2f4b-ff7c-467b-8199-572d52a36a44", "sighting_of_ref": "indicator--4fb1a586-8373-4178-9cfe-4e6dbdf6a1f8", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aeb5f33-cd2e-4bde-8c15-a0f460d44ef9", "sighting_of_ref": "indicator--4fb1a586-8373-4178-9cfe-4e6dbdf6a1f8", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7fbd65b-6f6a-4ed8-a79c-60bb91c9e81b", "sighting_of_ref": "indicator--79b7038e-dbdb-4b63-b7df-b28f70d5ab42", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43459246-cd05-4d3c-9538-f411adebb23f", "sighting_of_ref": "indicator--445c249d-6dbd-4394-b105-2102ac4dde88", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bd0dd24-bcd3-4ac5-bbad-df02e7383d1c", "sighting_of_ref": "indicator--f659aa5f-3a23-45b5-b027-7248f9f17510", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c468a942-08c6-4754-8f7e-b61e30c5ef1c", "sighting_of_ref": "indicator--093177ce-9a7e-4613-9e24-c0fcb20752e7", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643ec486-0e12-4b84-8e45-140e97717db6", "sighting_of_ref": "indicator--b8754b25-59cb-4fad-8e39-c3beb4e85d88", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d8e17b8-1c07-47be-abe9-31f9b85dc9fe", "sighting_of_ref": "indicator--d136b6a0-fe4b-4887-afb0-cf5d9adc7418", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4e45e76-f8b3-4c57-8b2b-cd37d2c845f3", "sighting_of_ref": "indicator--9f7fe06d-4e98-4931-88a1-2d3f7cae6d70", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee098dde-d344-44ab-acdc-94a76da0847f", "sighting_of_ref": "indicator--9f7fe06d-4e98-4931-88a1-2d3f7cae6d70", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02109662-19ce-44d6-bc12-53b9fa328aa8", "sighting_of_ref": "indicator--c37fbb08-ee7c-4cdd-b7ac-9cddbbe874f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e2ad3c-fd6e-41f2-b242-586912284d92", "sighting_of_ref": "indicator--ebb772c6-1654-43d0-9d63-0d23531f1cf3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97102008-bb3d-4b50-aa7a-0251dcf7ea8c", "sighting_of_ref": "indicator--d1622399-5a8f-4e76-b892-93a30753e87e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734ae2c5-e922-4757-8349-638e97d5305d", "sighting_of_ref": "indicator--cbb8fd12-0a48-4abc-847b-c7bbd298f8af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf08e746-ff3b-477a-87f4-06df89a720d3", "sighting_of_ref": "indicator--51bc5543-6c36-4c4d-ac92-3732318783d2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e9e912-ab32-4e53-aa1b-24b416e3f812", "sighting_of_ref": "indicator--844e36e6-2729-472c-a946-f18bc2d5f3df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44c901c-f69b-4dbc-87a3-2bd4e9558140", "sighting_of_ref": "indicator--7d3e7867-e7c3-4e86-b3b4-0316525274f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40bb450-8098-439b-b614-e555bf649b84", "sighting_of_ref": "indicator--d42da3b5-7c53-4e3f-884a-27c79a64368e", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbf3722-63ba-43dd-a31f-999791b3fa65", "sighting_of_ref": "indicator--d048ee8e-9de5-49e1-b817-083f6730f728", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f19458d-9706-4b45-a5c6-056138d30c2e", "sighting_of_ref": "indicator--a96084ac-1a8f-4bf7-9abe-9efec5cf344b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5eedd8-35f8-4a83-9b53-751ad37647bf", "sighting_of_ref": "indicator--a96084ac-1a8f-4bf7-9abe-9efec5cf344b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575d2dea-dba4-472c-8a2c-58a81cb26a95", "sighting_of_ref": "indicator--373d357e-2524-46b5-b73d-83a280dd2c1a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55f7bf6-4f62-4dca-a46b-aac4b3047ed8", "sighting_of_ref": "indicator--0617f017-062f-4b7f-aba0-83be67381dfa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--815314fb-7d5b-4181-ba9b-8f57b3a3f335", "sighting_of_ref": "indicator--2aaaf55a-7217-4db7-a4db-b389ddc81726", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cfa6fa1-0898-4546-8cc7-145efec78789", "sighting_of_ref": "indicator--8b6185d2-cb80-42ee-97f1-98c4a5c3c795", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa119303-aa63-4e80-ac4a-9b6283c840c5", "sighting_of_ref": "indicator--4c1de60b-3636-485d-ad17-43742b898611", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f8957f-d1e6-43bb-8939-b28f32574e47", "sighting_of_ref": "indicator--80a238d4-45c4-44cf-95ba-456d370b64fe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3bc14d-2d35-42ab-9634-55df089c5501", "sighting_of_ref": "indicator--4c0153f2-9fec-473f-9b8e-a7309681e519", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807c0e70-6bfa-41c3-850d-e9ec85d3ae14", "sighting_of_ref": "indicator--9f46799e-5152-42fa-84a9-f1fb7abd7ddf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a290c39-6103-4d05-ae1e-76165dfe4004", "sighting_of_ref": "indicator--40136c3b-da38-43cb-87a5-e4a62498d723", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4201f7-0282-47d8-8658-7d3ab957421e", "sighting_of_ref": "indicator--0aa02d0e-7874-4bbd-9596-9a0ae48bc009", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e769edc6-b048-4b0a-a505-66259258f923", "sighting_of_ref": "indicator--f001a3bc-ec1f-4e1e-a33e-f784674111c5", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2f470a-09bb-4d7a-a7a8-3fdae9646f13", "sighting_of_ref": "indicator--7c7f2dd6-e376-4c45-af7f-3747df9fe7bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa77a00e-10d5-46f6-9f13-dabd377ec61e", "sighting_of_ref": "indicator--47bc8864-24c0-4a94-9a4d-cd1130707fdb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7713b14-ab72-4402-984d-cf8ce174a9e3", "sighting_of_ref": "indicator--47bc8864-24c0-4a94-9a4d-cd1130707fdb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c97d97d0-5600-4b21-83ab-5557c2a5b1e4", "sighting_of_ref": "indicator--434a434d-4531-46a5-9d41-ef13d32c6af9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecce5687-5716-4fe0-931e-ecd758d48c76", "sighting_of_ref": "indicator--1e173ef0-2af2-4b7a-816e-a6a6178679e6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201d60f7-23a2-497f-a7fd-8dc4312d8bcb", "sighting_of_ref": "indicator--55b65b87-daba-45e4-9168-88bb48a866da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca679331-147d-4b73-acd1-e34b4f43630c", "sighting_of_ref": "indicator--55b65b87-daba-45e4-9168-88bb48a866da", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7d18fb-6de9-456d-84dc-5d5b37e9c26f", "sighting_of_ref": "indicator--131bb784-7832-42df-8ea6-55f74cbf4926", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e234d173-dd6c-4b2e-858b-2fd2614ac46c", "sighting_of_ref": "indicator--131bb784-7832-42df-8ea6-55f74cbf4926", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3ff83b-7189-43b2-ba8c-18b8c557f620", "sighting_of_ref": "indicator--776681dc-d29a-4b06-9b3e-c6e174c867a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72d8859-46d9-4f35-b662-07d0ecb4ccb4", "sighting_of_ref": "indicator--089e60ee-e242-4807-b6ce-a029b2f09d4d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71990a22-0b26-42ee-84e8-382aac3a6beb", "sighting_of_ref": "indicator--eb887deb-009f-4579-bfe0-70f4391dfe52", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db3fe86-bd00-4f18-9d26-234edeef442b", "sighting_of_ref": "indicator--76dff190-1f4e-4c82-aa59-94dc9a8e9ebb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c057c3-c24c-4525-95f3-a1b3387368f0", "sighting_of_ref": "indicator--9d61dda2-b47b-444f-9c77-a8c9034474ad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca7d98b-485a-472a-8ffe-ed37caf3e5c8", "sighting_of_ref": "indicator--9992dced-52db-4c77-8a0d-aad27e19afcd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0262dcac-a74b-4d80-927d-55551b26ae07", "sighting_of_ref": "indicator--52902b48-e4d0-4c8c-a787-12f7189ce7bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33fe9e4-dfc6-4551-bf84-242c2e2d2b6b", "sighting_of_ref": "indicator--b52b40a7-8f31-4e55-84b5-840f932690f6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f668ffc-f14e-497b-a5cb-bd80889eb5b3", "sighting_of_ref": "indicator--0be36a42-f63c-4a3d-aa55-542c697cac3d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaca53b-6767-4ab4-bfce-6caea8c7faeb", "sighting_of_ref": "indicator--26dc93db-b227-405f-9e26-5fe558c6eeeb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7e1cc8-c287-4ab4-9415-1be2886a3949", "sighting_of_ref": "indicator--b0483e6e-cdfc-4d80-bc2a-40e8d4fdfa3b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071cc36d-139d-44be-8835-f187ff0ca669", "sighting_of_ref": "indicator--e6ff9d89-e1ad-4e7e-979e-e53628a47a45", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e10695-981b-48b2-8110-02f8814a8575", "sighting_of_ref": "indicator--e2ff3d2e-1d21-4b06-b0d3-024182cb8fee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17deb289-c830-48b7-aa70-3d79b52656e8", "sighting_of_ref": "indicator--e2ff3d2e-1d21-4b06-b0d3-024182cb8fee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad8b5e7-5a1f-422b-9102-5bd8bd3351c6", "sighting_of_ref": "indicator--961ae2e8-5dd6-4a2e-8396-0f446c4cde2b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35569bb-a4bd-4c1f-ab3f-98db0532442a", "sighting_of_ref": "indicator--b3d603f5-f991-4314-9739-97acfe64a3b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9435e39d-620a-4b4a-a81a-f3a187f4a65f", "sighting_of_ref": "indicator--db3a7035-79d5-46c8-bcec-8113dc23a9b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431a79c0-23ac-499b-86cb-c13556dc1606", "sighting_of_ref": "indicator--ccbf2381-a60f-403e-8769-b89271e144bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b8930a-5117-4643-8ef2-788d32c1bc45", "sighting_of_ref": "indicator--c6e9094c-0582-4d58-8c2a-299a67dd10e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614676a6-4fe0-42c5-b26d-494f70971389", "sighting_of_ref": "indicator--c6e9094c-0582-4d58-8c2a-299a67dd10e5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348eb65d-af85-4ee8-ab38-b3fe8e3af74c", "sighting_of_ref": "indicator--a1f7cc14-7f36-4117-8e54-dd8be4b0fd7c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a32b5cf-02e7-4bcc-8673-eecda3ba173e", "sighting_of_ref": "indicator--a1f7cc14-7f36-4117-8e54-dd8be4b0fd7c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d8ef37-4d79-4d21-bb97-4e535bd8227c", "sighting_of_ref": "indicator--54c73387-a0ea-4838-8ec6-f988ce99a22d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a702468-f247-4cde-bf95-bc6fb1206dfa", "sighting_of_ref": "indicator--54c73387-a0ea-4838-8ec6-f988ce99a22d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577a90bc-dbb4-4c1c-ab7b-abb0b27419fd", "sighting_of_ref": "indicator--bccaabe0-bfd0-42f7-b30e-a1260fb899d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec6a814b-2f32-458b-b310-fc2c462c8807", "sighting_of_ref": "indicator--0c5f7d8e-8cd3-4d5d-bd09-4441777c2a3e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7f9fb82-e4e4-4fc2-abe9-5fc847783555", "sighting_of_ref": "indicator--81261593-9ee1-4b5b-95f9-e43ef9e48579", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4ae1c7-a58e-451a-ac46-d30771ce367f", "sighting_of_ref": "indicator--81261593-9ee1-4b5b-95f9-e43ef9e48579", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52eb04a-ba68-4e13-aa56-0d826429778c", "sighting_of_ref": "indicator--3456ec38-d910-4f5b-81ab-2d9073ddb8da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e45a13-ab83-4820-8b63-9cd2197468ea", "sighting_of_ref": "indicator--9da7c4a8-ca33-4fdc-859a-4c5fbfbe232d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc813a6-8dfa-461a-8e79-091ddefe91d7", "sighting_of_ref": "indicator--63a1bf1d-ed07-4d2a-9f82-9b3d94a7694f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4099eec4-d43c-4288-af91-970237fe3846", "sighting_of_ref": "indicator--17601083-dfe0-45dd-aa2d-ba88ab5eec35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8278fd-4504-4fd9-9152-df5393122618", "sighting_of_ref": "indicator--17601083-dfe0-45dd-aa2d-ba88ab5eec35", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bee5a866-42a3-4a4a-9abe-01ad27fe9c16", "sighting_of_ref": "indicator--f9673b0c-2888-4caf-b26a-371ef36c2be2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ceb2037-e24c-4b5e-bff8-08f21a3db4fa", "sighting_of_ref": "indicator--ef0c6032-efbe-47f4-9365-c0d32d910e11", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0052ac55-b485-43e6-b58e-b472e25328d7", "sighting_of_ref": "indicator--ef0c6032-efbe-47f4-9365-c0d32d910e11", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91a4860-35a4-4d52-94fa-83a95c154a17", "sighting_of_ref": "indicator--6a4a4994-07d6-489f-b260-b2d48d3e6fef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ba886e-3ad9-4f1c-8ae3-d723fb7f46d7", "sighting_of_ref": "indicator--d437afb9-f353-4705-9368-a97c93551a2b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e63fe4d-8ffb-45a1-bec1-34847311f336", "sighting_of_ref": "indicator--91cb9d91-81c9-40e6-89fd-53d29ac13099", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69af9c3-d63d-454c-a359-ed60101cd8de", "sighting_of_ref": "indicator--91cb9d91-81c9-40e6-89fd-53d29ac13099", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962ed23a-15b3-492d-88f1-6a6ef3a6f7e0", "sighting_of_ref": "indicator--12595fc5-923d-49b7-bd11-553429b4dd02", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed211183-ca70-4f77-8231-b93cb0aa0135", "sighting_of_ref": "indicator--12595fc5-923d-49b7-bd11-553429b4dd02", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55121118-7966-472b-bf1f-f36434a2a5dc", "sighting_of_ref": "indicator--7ca0b1e0-6b75-4833-8c04-3f9d86f1c15f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85064b00-ffea-453b-b5fd-a89c41ef29df", "sighting_of_ref": "indicator--463681bb-279e-4be2-9e08-aea6b7515dbd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07bb5509-2599-410b-8c6a-63eac2c646a2", "sighting_of_ref": "indicator--3c3f27dc-3240-46da-a6fb-6170b00ab5b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c54341d-0ea3-449e-864a-a9c0592c179a", "sighting_of_ref": "indicator--3c3f27dc-3240-46da-a6fb-6170b00ab5b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85583480-1784-474a-a4ea-b21462ff9493", "sighting_of_ref": "indicator--29335463-07a7-4fa8-9cbb-c9051066d87e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f493e1a4-9dd1-4473-8cce-20b3fec24ba2", "sighting_of_ref": "indicator--92479af3-d58f-4e31-a664-5df6f207831c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4572eb19-f83a-4c60-b24b-a9e7358cbadb", "sighting_of_ref": "indicator--79a64893-5c4f-4ce4-8670-6414a518ff2e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7777e5-6352-4db2-ac15-cca7e5fc2fba", "sighting_of_ref": "indicator--08af1498-14db-4eaf-b844-f18d61464c64", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b868e6-0cbf-42da-b0a5-c0a10eab6ba4", "sighting_of_ref": "indicator--8bcdd34e-6be4-4df4-b120-201017199af0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669e2c8e-776b-4f07-9fff-d5e626db5bb7", "sighting_of_ref": "indicator--dacfe907-3859-4b5c-9955-832676f6f101", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1756e39c-554a-4cf7-93ff-466d9e53ac81", "sighting_of_ref": "indicator--dacfe907-3859-4b5c-9955-832676f6f101", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e76f8062-ff49-44f7-8522-5aab719fed14", "sighting_of_ref": "indicator--24c7623f-d8fc-421d-9f63-1b902a61346f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37529c18-553e-4e9d-ae90-a4af78bf64a7", "sighting_of_ref": "indicator--6cfe583f-e0f5-4c27-88cf-84ae0f2838d0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45de8e32-8be8-415d-8282-25d59497100b", "sighting_of_ref": "indicator--7b4d32e5-bb26-43b7-af12-c8e2f72a4d4d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abab2717-b785-4b2e-aa03-131f7c2720b2", "sighting_of_ref": "indicator--7b4d32e5-bb26-43b7-af12-c8e2f72a4d4d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947b0fcc-9f14-4a8b-a7d5-88e1298487ef", "sighting_of_ref": "indicator--1d7de590-8fd3-42d8-ab85-9d0e1ef6a262", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cce827-711d-49f0-be95-e7a6e3e2ab57", "sighting_of_ref": "indicator--c30e0575-48b9-43ac-97b5-62e6824cdd3f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dd03f1-2568-460a-b45a-840d530d215b", "sighting_of_ref": "indicator--c30e0575-48b9-43ac-97b5-62e6824cdd3f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b8fc2f-83a7-4ba8-8178-556cc87d1946", "sighting_of_ref": "indicator--44f6333e-81e0-4342-9566-15ea5089dc74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3654da09-7c14-4e2a-9c32-cae053a2d54a", "sighting_of_ref": "indicator--b46229b8-efa4-4110-b334-07eae03e81f7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63917860-a9c3-422f-a1bb-58d776089087", "sighting_of_ref": "indicator--32d0cb2e-4984-44e8-ac19-bb0fb66f8b43", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b270ff19-932e-4da3-84a2-25b6219a15f6", "sighting_of_ref": "indicator--896133fc-85d2-4d16-b8cc-cbeaa0d9533e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2700a6fe-96d7-4890-bed7-5b6fb397c0fc", "sighting_of_ref": "indicator--a6533b8b-2453-43d2-ba30-18107303e91d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f6d720-9b5c-42ab-a949-f5ed47a8b3b8", "sighting_of_ref": "indicator--a6533b8b-2453-43d2-ba30-18107303e91d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60f03e0-2732-4b2e-a9e7-662c18bf47ce", "sighting_of_ref": "indicator--413f3848-f752-4dee-927f-69f32642ea73", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdc329b-80fc-4f3e-81eb-a3694c169a81", "sighting_of_ref": "indicator--03c706a0-0309-4f18-b8d1-60f101ecc94a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d82584-ce1a-47b1-b432-29176ad00804", "sighting_of_ref": "indicator--ff16a388-829f-4021-9407-e8b1a87f8612", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2697be3b-0d88-4c1e-b8ea-786b64dcced0", "sighting_of_ref": "indicator--fa1e4f29-e3d9-467c-8529-89e77301c326", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c3789a-f7ce-4d3e-aeb0-4182f9694484", "sighting_of_ref": "indicator--0b230b7c-ec05-451d-b799-6b21db080be6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb3c927-a186-46f9-81e2-f6e799d33936", "sighting_of_ref": "indicator--b52329c9-2e29-4dec-b8ce-4c90d6c9fa42", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ebe3027-7dc7-47fc-874e-099a73cae070", "sighting_of_ref": "indicator--b52329c9-2e29-4dec-b8ce-4c90d6c9fa42", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93bfec94-0deb-4cdb-9fb9-c7c91603af4f", "sighting_of_ref": "indicator--1aa7f140-1a4e-4204-883c-a6c9049bc264", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b3ac4b-aac0-4cbf-942f-d2545248c72c", "sighting_of_ref": "indicator--17dedcf7-6bb9-40a9-971d-ed2f85dfe9f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da9e767-45e3-426e-b161-1bbaf6c6142a", "sighting_of_ref": "indicator--ff0c5ecf-c81e-4175-8b46-cf31bd9a550d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d459f56-cbf4-4760-8801-1f1902a386fa", "sighting_of_ref": "indicator--36c1ad8c-7791-433b-b581-37f9591ab1ea", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15718ea5-5ad6-47d6-b6a2-b5819cbb4a1b", "sighting_of_ref": "indicator--cc751885-f74d-480d-ae9e-b3ff8d825ed8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e282e15-9c54-4d3b-9ee7-78b4c1f60a93", "sighting_of_ref": "indicator--b3c1eb2b-a3e0-4a05-bac7-c8847a47f043", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fd50dd-c19c-4ca7-a8f6-03db0de8cf35", "sighting_of_ref": "indicator--167d48e7-e396-430d-bb6f-9092c65068e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62fcdec-848d-438d-8926-ce1bd62775a0", "sighting_of_ref": "indicator--770ecbff-dfab-4b3c-8e96-6d8f7806fa22", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fede13d1-4f2e-4aa8-81f5-590685ee87c9", "sighting_of_ref": "indicator--7e22ab88-f519-4f3d-a844-738b8e4736d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f388bf12-659a-40fc-b0c5-355141bd7476", "sighting_of_ref": "indicator--0509bb47-5078-4aee-826b-95f4c2ed8e5a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab462f35-4a05-404c-bdd7-80f75bedde23", "sighting_of_ref": "indicator--ad228fe9-456d-4f92-b463-f9c02c6a7358", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bc85be-937d-461f-b9ab-aa50ca125628", "sighting_of_ref": "indicator--7d54e43d-2970-4456-9094-e8ec5fa3b54f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8398d88-28e3-47bb-b1f4-c652dc346259", "sighting_of_ref": "indicator--7d54e43d-2970-4456-9094-e8ec5fa3b54f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1828f91a-f672-4fc3-a1eb-a054695b379d", "sighting_of_ref": "indicator--53a80a84-94a9-454c-8408-7fc8a061f776", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f2f577-ea28-494c-b8e8-93c838d30964", "sighting_of_ref": "indicator--94b3a38e-37b1-417d-a844-2a9963e3686f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b7c9cc-4a23-447d-974d-a77c4c333ce5", "sighting_of_ref": "indicator--5e8f1edb-9bd3-4856-ab31-13352d4c8442", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e7e46d-4948-4620-aa95-d696d7d091a0", "sighting_of_ref": "indicator--76d18a70-3205-41ad-9d75-d661c3b10b3e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aedab08-0303-4e0b-b568-ad0b4a920256", "sighting_of_ref": "indicator--30085ac1-da5b-42a5-bf9c-84817a7e623a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3865a1a2-3ade-42fd-83e9-ac00364f1977", "sighting_of_ref": "indicator--45bd02d5-9e64-4b4a-b75e-50ed4aaf6a54", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d987d52-3b00-4921-af8f-4193607d90fe", "sighting_of_ref": "indicator--f3e10a08-ccbd-49ba-8592-2c4fb62e239b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75629088-6cb7-409a-aab9-60d24931a601", "sighting_of_ref": "indicator--e37d504b-80c4-4c65-b433-880cc03a93ba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a536026-123a-4a20-b696-37f949012519", "sighting_of_ref": "indicator--93629682-934d-4c26-8e16-244cf3df7614", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac7d577-835e-451d-89be-d3bcaf57f3a6", "sighting_of_ref": "indicator--c9940364-e721-4ec3-a2a2-9ae3a9a5645b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e443c1dd-9e6d-4cf3-ae19-3be1493e3f5b", "sighting_of_ref": "indicator--19286844-e83f-4df8-91ad-c2af8d1cd8a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000c9bab-a535-4ac2-8fea-d35bd2a5198d", "sighting_of_ref": "indicator--19286844-e83f-4df8-91ad-c2af8d1cd8a6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2938e030-7690-4e1e-9054-de0e191f1d72", "sighting_of_ref": "indicator--2e6cffe4-b0cd-4192-90bd-d8914e2685ff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6234f9-61c0-4505-aa67-d9c2b4cd9579", "sighting_of_ref": "indicator--5a11d1a7-9157-414a-9986-d8b6c3d7dd24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11986160-2898-4775-9c0c-2f1c29e5c254", "sighting_of_ref": "indicator--5a11d1a7-9157-414a-9986-d8b6c3d7dd24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da63b32f-0576-42af-8ed6-bb3615198440", "sighting_of_ref": "indicator--0cff098c-24f9-4ef2-b327-a345b6f35f51", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--654dfa07-fecc-4fc2-8357-df5bbfe1cfe2", "sighting_of_ref": "indicator--a092bac0-4e49-47fb-ac7d-a71fa08c6e45", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad7443b4-fcf1-4872-bc2c-8a0b955cfeeb", "sighting_of_ref": "indicator--d0432ff9-fa23-4c75-9fb5-9c582dadb652", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf786db-0421-4001-91fc-6b3e5e9e72b0", "sighting_of_ref": "indicator--bcc9ce55-37a1-40b4-9213-73ad6e03f12e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c768c0cf-5ce5-472b-8da6-54ada3f782b1", "sighting_of_ref": "indicator--3256c845-f5d9-45e5-9281-2f0710bd2259", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5741e3fb-137e-4704-b838-57f63f92a3d4", "sighting_of_ref": "indicator--81df19d8-bf71-4a4a-ad8d-f18dda8bc0bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df8510e-add2-4c9b-bbaa-706fa897fd4c", "sighting_of_ref": "indicator--e0188c07-3ad2-4406-b0c0-f8e4248968be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a62111ad-55d8-4a71-86d0-2ca5e8570523", "sighting_of_ref": "indicator--dbaee9b2-422c-4b1e-86a9-1a3eb4f8dd89", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a85bcd-dd20-4a97-a645-9077d56f2c73", "sighting_of_ref": "indicator--1c672152-333d-4ec5-8698-8aaa2f1a3cd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4419572-7cbc-423d-8bfb-27fd7d3e3263", "sighting_of_ref": "indicator--222f0917-acb3-426a-a3d6-316456c8bbed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d2b3cc-4efe-49d1-95b0-8bf85f3a59eb", "sighting_of_ref": "indicator--4b39f8f4-1b64-4226-acf7-3b8711a2539f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1528ac0c-11dc-4e0a-a097-d187d8d67241", "sighting_of_ref": "indicator--4b39f8f4-1b64-4226-acf7-3b8711a2539f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68de7a6c-c12c-4a5a-967a-9631fdc201d0", "sighting_of_ref": "indicator--b1835e6b-550c-40fc-aa01-5c35d4eed51d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2730042c-e542-4364-aa8d-4e1f6f5fb7f9", "sighting_of_ref": "indicator--b1835e6b-550c-40fc-aa01-5c35d4eed51d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f858b9-0d0f-40a3-adc0-ecd17603dac8", "sighting_of_ref": "indicator--77f1e4ce-a5ee-4b10-a639-3f3b038d2e38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad76fa5c-c6bf-4239-b368-42f4ce569eb1", "sighting_of_ref": "indicator--4fec117c-3796-45d3-9c90-462db1ba079f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafb4f85-329b-44ae-8986-c01f5f69eca5", "sighting_of_ref": "indicator--4fec117c-3796-45d3-9c90-462db1ba079f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d9ff90-d776-4e77-8580-24fdf146840d", "sighting_of_ref": "indicator--f2dc5a6d-2ea7-4e0d-9e0a-14353545317b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f804bf-7e6a-4f21-82fe-9f09aa8f80ea", "sighting_of_ref": "indicator--f2dc5a6d-2ea7-4e0d-9e0a-14353545317b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29093471-3dd7-48cf-af12-71681215906b", "sighting_of_ref": "indicator--87eaeb19-a868-4dde-ba88-e844e61acd95", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f97b52-5ce0-4d2f-81d1-7ef246f036d5", "sighting_of_ref": "indicator--87eaeb19-a868-4dde-ba88-e844e61acd95", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e84361d-838d-4d85-91bd-9973af0697e0", "sighting_of_ref": "indicator--976adf9c-5a5e-4333-bef4-54a1f7463280", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b522bd-a0c7-4245-ab68-76c3b338e258", "sighting_of_ref": "indicator--177d503e-13d6-443e-a472-36605597d56f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bca604-3502-479b-9f03-517f8b3a5eac", "sighting_of_ref": "indicator--9ace01ac-eb40-4120-b879-735a50b31f68", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33cb949-d939-41ca-bc42-24e88fd28d9a", "sighting_of_ref": "indicator--3c407af8-e189-4ce3-97b1-71d1f7d10450", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286263e8-205c-4c40-9768-b04273de5820", "sighting_of_ref": "indicator--32cbbd69-f3e7-4b5b-877c-1926c5077495", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24136622-4771-40ad-bb14-711714261cfe", "sighting_of_ref": "indicator--6eda1f04-b6cc-480c-b1a8-9f0f5ac973b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a272dbb6-44b2-41b6-815e-6048d6100dbc", "sighting_of_ref": "indicator--6eda1f04-b6cc-480c-b1a8-9f0f5ac973b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4506f494-293f-4664-af86-607d25f6aeed", "sighting_of_ref": "indicator--01df0c37-a0ff-40d8-a88a-9216bd089b1a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc92b699-9177-4182-a469-40f1449bf977", "sighting_of_ref": "indicator--fd20292b-9481-471c-8b5c-75d194213b1e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecfe8e80-4107-47f2-8f45-8e27fae02838", "sighting_of_ref": "indicator--939b192a-002f-41ae-b727-fdfb8502762a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05931240-1704-482b-b951-e80cd034d790", "sighting_of_ref": "indicator--939b192a-002f-41ae-b727-fdfb8502762a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b401f3c-8093-492e-b705-bb69e18023fa", "sighting_of_ref": "indicator--9b624a82-438c-473d-bc49-03c512209370", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656d9fc0-baaa-45d4-a83b-d811f45d7d7c", "sighting_of_ref": "indicator--26b8d0a9-0280-444d-9549-730920cd469d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a08748-bacb-424d-af98-af53cdf23aea", "sighting_of_ref": "indicator--af132b59-ae1a-4ffa-a17b-7b56e071fb51", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891db2e0-6f1f-4d80-b6b6-7f0635defd91", "sighting_of_ref": "indicator--edbd0e35-2f91-4835-b124-b569a89ab0dd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d3e304-b58b-405f-8b7d-c1326bb487f4", "sighting_of_ref": "indicator--d263d866-1c91-4047-b76f-24069ec14234", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20c300c-4ad0-456a-a9c0-91f144593783", "sighting_of_ref": "indicator--f5f8657c-1902-404b-b21a-d2da19a77681", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35cd3745-4304-46c3-b9dc-6f2b1ba62c4b", "sighting_of_ref": "indicator--e2696915-e2a3-47f7-af15-01c0451b6c74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3015f81-d269-4869-9cb8-9acdd8a65e04", "sighting_of_ref": "indicator--ad789788-ad4f-4ced-9699-73fc567c5b89", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7cd72d-17c2-4f72-9c4a-658239dcb404", "sighting_of_ref": "indicator--632a168a-a7f4-4ba8-b566-661180353f6f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18deff58-cdf0-48d3-aa5a-51aae38e4fa9", "sighting_of_ref": "indicator--d27d062f-2c8b-45e4-b8cb-9d27b72e589a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a746813e-cfc4-432a-9f86-aecff3aafa38", "sighting_of_ref": "indicator--51491fa0-ecb0-4c54-a407-109bdddcb6b0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--006d137f-48b7-4bf1-9c6d-b801533e5385", "sighting_of_ref": "indicator--51491fa0-ecb0-4c54-a407-109bdddcb6b0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78586995-54fc-4d6a-b440-5d8a816a3d4c", "sighting_of_ref": "indicator--a98ac818-04c3-4dbd-a43e-8e2a1d588dd2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a0620f-eb14-4357-adab-9bab01253c57", "sighting_of_ref": "indicator--901e3daa-7a0e-4f55-874e-2a1ad690ea2d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c445d5d-b1dc-46e6-8986-c9c6ed04622c", "sighting_of_ref": "indicator--a0b81a77-1002-4b56-a9bb-c873cb19a244", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12cd775c-9883-4ddd-b674-a3577d3b90eb", "sighting_of_ref": "indicator--fa5739eb-5814-4250-abcc-626253214466", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da854d3-9dda-420e-b3fc-723c8edf2112", "sighting_of_ref": "indicator--3b6968bb-21f8-4256-a009-f604a2c389ba", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd8bb8a-9fba-4592-9ecb-a8858637a00b", "sighting_of_ref": "indicator--4dbe8c2f-6fb7-4279-8338-e00eeb83a739", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eca10e4-9e6d-4259-8801-fdc71ae78363", "sighting_of_ref": "indicator--27a71328-6beb-48ad-931d-d19bb0ecd405", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f73c8a-88e0-4cb4-9adc-a3888607e053", "sighting_of_ref": "indicator--c7960633-be4e-4fcf-b014-422e008be339", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dc904d-7241-4ac5-af45-1870132e7c84", "sighting_of_ref": "indicator--a4784d60-46f9-4e1e-b0e9-ba3d60336176", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c581609-e5cb-41c8-8a03-e750e040c530", "sighting_of_ref": "indicator--a4784d60-46f9-4e1e-b0e9-ba3d60336176", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8275b5a-b4fa-47db-af60-7e8736f32b6f", "sighting_of_ref": "indicator--0f5c9aa0-413d-48dc-8fdc-2696da1ef1ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2525c4-7306-41ac-8611-709daaa6fa71", "sighting_of_ref": "indicator--0f5c9aa0-413d-48dc-8fdc-2696da1ef1ff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b563523b-bb34-44b9-a88d-c3efacf13f21", "sighting_of_ref": "indicator--f4297d04-e1d9-4b65-aacb-6a2ac3e67d78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3ba1d8-6ac3-46b8-84b7-58f8fdef1f28", "sighting_of_ref": "indicator--f4297d04-e1d9-4b65-aacb-6a2ac3e67d78", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb176d4-bf12-4268-a801-02a080db588c", "sighting_of_ref": "indicator--e4d18fd0-f715-41fb-a9cf-af583dc993a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1d60c1-1d8b-4350-a9c9-dbaaca125d45", "sighting_of_ref": "indicator--47d6ca90-5757-4dd0-ab9e-3c6973194d9f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2efc5f0-18ef-49a9-aad2-762b8755aad5", "sighting_of_ref": "indicator--e7c5b955-422a-4d50-a469-0325af3aeea0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b71fd7b-94bb-46cb-ab22-3b9300636bde", "sighting_of_ref": "indicator--23937396-9a3e-4451-96c1-c1a0db7ef49d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc28c80-9fdf-4909-8455-9af41d73db38", "sighting_of_ref": "indicator--4eab7342-7bee-4d6f-9641-247cbdaff9ab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194f1176-d8aa-4f9f-824b-db16057368a8", "sighting_of_ref": "indicator--89bea275-f2e4-41ac-9390-1f3141f1b1c2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de419d78-1ca4-4d7e-90b4-d2b82ef34af5", "sighting_of_ref": "indicator--8bfb3ee5-35b9-40a5-a371-221c663970b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f4b180-6579-4234-a9f0-1eb2fbd6b63b", "sighting_of_ref": "indicator--8bfb3ee5-35b9-40a5-a371-221c663970b9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41b8c4a-440f-49bd-9d38-c1b79ef5052c", "sighting_of_ref": "indicator--97ccaa71-38b4-48ac-bf86-26765cfb4f37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bac945b-b60b-4849-bdc4-f8349b5a7508", "sighting_of_ref": "indicator--ddbd61af-31d5-4dea-975c-1848ff7f61f4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3dc952d-2d95-4e0b-951d-2a25962eef47", "sighting_of_ref": "indicator--e3ea9134-eb33-44de-81b8-4a2abe399d59", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0b8c55-66d3-4aaa-80fb-44214b7eafcb", "sighting_of_ref": "indicator--c9a99d2c-ac3b-4ed1-a0d4-03fde760a024", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d779af0-044b-47c7-86f8-e891877c5333", "sighting_of_ref": "indicator--d99d8298-aff6-4717-91d2-00f3f2460121", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf397af4-7308-4549-9af1-e9077e95b8b4", "sighting_of_ref": "indicator--7d0bf7dc-72b7-43fc-8aaa-326fdab404c2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dcce5d9-642e-4c26-ab33-44f15660110c", "sighting_of_ref": "indicator--efaf92ef-969b-451f-8578-fe48046ee627", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcafa3cf-30c9-44d0-9068-4933238e3306", "sighting_of_ref": "indicator--0bd516dd-3069-45d9-a1c3-68a7510112f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3f8ae7-4549-4622-8165-131c1569ae80", "sighting_of_ref": "indicator--2161911f-e2c5-4c8e-b30f-cbdfa2266866", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4535ea1-3b6a-4148-9623-780771418508", "sighting_of_ref": "indicator--d4339df2-b70f-4bdb-a80e-d0175ff177ce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a63d599-74aa-436f-9530-b389bf540601", "sighting_of_ref": "indicator--d4339df2-b70f-4bdb-a80e-d0175ff177ce", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb9c55a-e35a-44c1-bfab-6a68c41a8953", "sighting_of_ref": "indicator--79ffe64f-de5c-41e4-89ba-7811396caa51", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6988f3b-1dd7-4071-8c55-1b667f88c2ab", "sighting_of_ref": "indicator--252e3170-61ae-49b3-b021-4d874f5bf078", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4409a5a7-0b6e-4361-ac5b-ad15feef0120", "sighting_of_ref": "indicator--252e3170-61ae-49b3-b021-4d874f5bf078", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ccb164-031c-48ce-bd43-840bf82df1ba", "sighting_of_ref": "indicator--ca2c4d7c-12fd-4867-8d9f-9e0ef0d55e7f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1da9a74-4066-43ec-bac4-9a5f31518219", "sighting_of_ref": "indicator--ca2c4d7c-12fd-4867-8d9f-9e0ef0d55e7f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a8ef5b-c5af-4bab-8954-401611a69eb6", "sighting_of_ref": "indicator--f0678bf4-e8ae-4a08-81b7-eb0490b021a3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1792baf-a852-47c6-ba04-592514a08b76", "sighting_of_ref": "indicator--f0678bf4-e8ae-4a08-81b7-eb0490b021a3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439401aa-9827-4d2b-989f-fe26ce840256", "sighting_of_ref": "indicator--e44f2737-f262-4584-b54d-6b5ea9527f8d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4363be5b-f5cd-4532-bce5-a2069fab026e", "sighting_of_ref": "indicator--4735f046-a531-4bc1-8342-830139260fd6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e582bfc-ae1a-41e3-bd79-1239c57ec2fc", "sighting_of_ref": "indicator--88cac386-bc0d-44a5-ad76-c1befcb7f8cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439335c2-6e56-4c45-be8c-31073f522b8c", "sighting_of_ref": "indicator--1d759cdc-1416-47ab-9872-d2119a7e5764", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410525d7-47cc-4e2a-9df7-4e2c6c6381d4", "sighting_of_ref": "indicator--58f84ba3-4b58-4c48-87a9-671e44b6f7b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c0a688-c9db-45dc-b23b-364e7b724183", "sighting_of_ref": "indicator--10f795e2-7c49-41e4-a9d5-1390d88ec92b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8c5f42-d4fc-48aa-adcf-5bba7ee51b7e", "sighting_of_ref": "indicator--bcc0939c-f932-4f57-b04e-ba3c1f8d86b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc0e6af-503d-459f-97f7-5582b8e40959", "sighting_of_ref": "indicator--bcc0939c-f932-4f57-b04e-ba3c1f8d86b5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3200ae-ccc5-4155-8702-a51682925fae", "sighting_of_ref": "indicator--ac77a316-d388-4454-9a9b-885e6776de60", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19c3a53-03bd-445c-9a87-e428266e463a", "sighting_of_ref": "indicator--ac77a316-d388-4454-9a9b-885e6776de60", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423a321b-f0b1-4881-8e8a-941856cb0b75", "sighting_of_ref": "indicator--ba9b7294-a61b-4c68-98ad-27f1681a3c7c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a588d4b5-4e65-4a40-b671-385b5018c636", "sighting_of_ref": "indicator--3e0d1c95-9619-48d4-8cad-988a798e746f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906cf16b-b935-43db-8b60-81bcba0c422d", "sighting_of_ref": "indicator--3e0d1c95-9619-48d4-8cad-988a798e746f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e67508-f24f-48c5-805e-8dd3b7a2ac12", "sighting_of_ref": "indicator--72a8f84b-ecb4-403a-acde-4b20d51007d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7761b671-f4b7-4a1b-a701-481325c89aaa", "sighting_of_ref": "indicator--f7eba2ab-6c16-4029-82e3-246a1900efdd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1e6f93-2183-4f24-bc14-53f418a3abaa", "sighting_of_ref": "indicator--6ba7fc1d-fec4-41b3-a1b9-d2bc42539977", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36829a2a-b0b0-49ed-b619-0d60d18403d1", "sighting_of_ref": "indicator--07643479-28dd-47a4-9c87-bd77cd187188", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaa1f849-06e9-49dd-9f36-d34c1c21cb86", "sighting_of_ref": "indicator--ce6558cc-b3d9-4efa-83e3-e53189a0eb04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ca3573-4913-40c4-a41f-57ee61480612", "sighting_of_ref": "indicator--08edf383-974e-41fd-bf41-922cdb2b2727", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38918b56-4490-41fe-97d5-f892507bf3a4", "sighting_of_ref": "indicator--45b3ad58-d9d9-4f2f-b592-b8f62c109ee1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8527c5-317f-4a4c-9df4-af864ebd0826", "sighting_of_ref": "indicator--766ca5c3-bfdd-42d0-8442-5724e5dd9c81", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54106fb0-33ec-4896-a826-5514876863bc", "sighting_of_ref": "indicator--52af8387-5a58-4ce1-bcfd-e928459fd100", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e713f289-29d5-4b37-855e-e6563a903bb2", "sighting_of_ref": "indicator--5b999e69-a41b-4295-9f65-f7f808824034", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e100ee0-db96-4d38-845f-71eda31db349", "sighting_of_ref": "indicator--f1693167-10d2-4afb-968c-446fa28b6927", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbc8ce9-d381-44b0-af14-0c5540102a35", "sighting_of_ref": "indicator--8fbacf3b-cf55-4662-b8b9-1c47f6df7f21", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5761c5d9-27e9-4ffd-bc26-d3c3f3b8851d", "sighting_of_ref": "indicator--4af6b760-0cd0-4efb-9315-2392239e9ee0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466fdbe7-4155-47ed-bb16-b650064b8ab8", "sighting_of_ref": "indicator--f56a6e30-6c82-454d-b58b-337c967e5026", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18b1162-42f8-41e3-9be7-964e25bd48fb", "sighting_of_ref": "indicator--c8f3b189-ae66-4dbd-b87a-8d94e6494084", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e237fc81-309f-4dbd-ad04-ddcc717cdad9", "sighting_of_ref": "indicator--9fabfda6-4600-4e17-b360-0f25560231f9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a4d5cb-bf64-4800-8df6-e323661d7cc3", "sighting_of_ref": "indicator--fe3bf13e-f190-479b-acee-5e0f3f210c31", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73b6dd4-87ac-48de-b246-b4de0ffd4544", "sighting_of_ref": "indicator--b95ae67c-4491-42f0-8cab-5ebb322d00c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b7ebc9-c928-42ee-ac66-7ee3ae50b0b3", "sighting_of_ref": "indicator--6d7a9e90-7748-466e-9d32-0781a4adc073", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dd2649-f500-4949-8de0-7e2659b63bfb", "sighting_of_ref": "indicator--f911c4fc-0a0e-4ea0-9c15-3bed204846b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efb31b1-f0d9-458c-9181-dcd102765e1e", "sighting_of_ref": "indicator--fedcac72-e039-4511-be3c-a9accb073143", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6754d0f4-6453-48dd-b543-bd58aa49d0ec", "sighting_of_ref": "indicator--601fef37-82bb-4ea7-9ff4-bb8e1938f4de", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce00a3a-995c-4c04-a09b-0675d9f45998", "sighting_of_ref": "indicator--edb14d4e-c8c2-4c8f-8f0b-9bd40f1065ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef45dd4-286d-4840-a92c-1a837dc7affa", "sighting_of_ref": "indicator--3e759138-7ea0-47d5-81a3-58982828d14f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1921da4f-0194-408d-8342-c589bfb72ce2", "sighting_of_ref": "indicator--9f4414ec-81ca-46c3-ae14-d0b26f4ee4d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b184bec-115d-4022-85cb-f8056c6022a7", "sighting_of_ref": "indicator--9f4414ec-81ca-46c3-ae14-d0b26f4ee4d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf027622-b256-4b18-b252-707df9b8868d", "sighting_of_ref": "indicator--a54d5cc2-8883-42bc-bf7d-bfd789c76870", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e816de7-11fb-4ae9-964a-a94c2b1323dc", "sighting_of_ref": "indicator--ae689587-15b8-4222-8e38-9034f6ddb2b4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ace217-b1ca-4802-8965-047d8f4a6a87", "sighting_of_ref": "indicator--1f55f432-8c11-472b-960d-ed7d18dd3cb0", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dae796-e5ab-4351-96df-4036afd27acd", "sighting_of_ref": "indicator--1f55f432-8c11-472b-960d-ed7d18dd3cb0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e51dbf-0367-4c7d-9ddc-33ed597c86df", "sighting_of_ref": "indicator--817c2512-a975-44f0-a2fc-509a132056f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a63d44-cc23-4833-b2a2-9e09ea251a2e", "sighting_of_ref": "indicator--0bdd7b55-98bc-4771-977e-daf8e5a85cae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee32269-ff7f-46e7-baf7-950f7784f3ad", "sighting_of_ref": "indicator--dac27b9d-d1f4-41bb-9365-4a132d8183d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2001e4-59bf-42dd-a5b5-bfcce4f1fb3b", "sighting_of_ref": "indicator--e2234343-b980-4ac2-87ef-187e1c4e016b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1c65f7-8e27-4252-8d75-a2983a510d39", "sighting_of_ref": "indicator--0a191343-20fe-4b6a-8a8f-3ccf252433b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3304dea6-0f13-4cb8-b634-238eeb1ad7b7", "sighting_of_ref": "indicator--3f9e93d1-cf6d-4ed3-b741-8ed8cfaa7247", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47ae3f8-49aa-41a8-a8df-7a8abfb42131", "sighting_of_ref": "indicator--92fd05b9-6f6f-4526-a8b3-dc9888146257", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b531e8-7079-4849-95b6-e9432b00632f", "sighting_of_ref": "indicator--e1a8074d-9f7b-4b5c-abae-050bbd531a2f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ed7bab-07bf-4647-be9a-20b7595247aa", "sighting_of_ref": "indicator--ae61d0b9-a669-428b-9426-e46135b2d0f2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c636413-d66f-496c-ac6f-715e1dd64bdb", "sighting_of_ref": "indicator--a9f8a7da-75ae-4a3a-a232-3156f65c196f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d8fe88-48ae-47e5-9293-705e305d5816", "sighting_of_ref": "indicator--9384d6f8-923b-4303-905e-46df4d5e7695", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a28aec1-b9f6-4b7d-ae75-9730ed186b85", "sighting_of_ref": "indicator--5c1548b7-1b77-49cc-98b3-f8ea3f18360b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7219d4f6-3d98-4451-9ef0-624e76505fdd", "sighting_of_ref": "indicator--1894beed-bf8e-474c-95e3-ba8be31b3015", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31590f2-cb4c-4bdc-a8d8-fe80694ce78d", "sighting_of_ref": "indicator--4fb3f8c1-f07c-4306-8472-81da36242e15", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906f1d42-9f4c-439b-bbdb-ac785a1affff", "sighting_of_ref": "indicator--6ff630cf-121c-4c69-8f8e-b25ebefaa554", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b89638-ef08-49c3-bb85-0fad2c78fb68", "sighting_of_ref": "indicator--6ff630cf-121c-4c69-8f8e-b25ebefaa554", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87fe0c94-a184-49fb-9e6c-e7d88f039d29", "sighting_of_ref": "indicator--d6a2caa3-566f-4f83-a918-28749c27da3d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab1e2da-ac44-48a5-a03d-0af49e16140e", "sighting_of_ref": "indicator--5a708ed1-b9c6-407b-9ee9-860e4b38b0f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbd9f87-b0b5-47ac-b5e5-b226b95e7df6", "sighting_of_ref": "indicator--5a708ed1-b9c6-407b-9ee9-860e4b38b0f0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12886d50-c9b8-4ec7-88a6-8be94d943f0b", "sighting_of_ref": "indicator--9d669694-06b9-4413-8e33-dd65d0dfd08a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dbaf54-e841-4818-be4a-ae6acc4d9115", "sighting_of_ref": "indicator--9d669694-06b9-4413-8e33-dd65d0dfd08a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36dd6d8a-707c-4184-a541-272760adcf7f", "sighting_of_ref": "indicator--3d7b3ca5-562c-417d-984c-f474d5db0932", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca35819-5e0f-485a-b277-7fa39b4be3cc", "sighting_of_ref": "indicator--3d7b3ca5-562c-417d-984c-f474d5db0932", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33253c6-02d6-4ace-bc9a-907c6a6c6aef", "sighting_of_ref": "indicator--240d81ed-0f97-4b43-9cf8-1e6aeed15b09", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239683a1-bbd2-4583-8967-40b2d3e8d310", "sighting_of_ref": "indicator--c621502a-e949-4860-95e5-007ceac530c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c87b33-3c4e-4f8f-9038-33dc88679af4", "sighting_of_ref": "indicator--c621502a-e949-4860-95e5-007ceac530c1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b0ebfa-f151-490a-9c01-d9a4264c5a11", "sighting_of_ref": "indicator--88baadc6-b3dd-434f-8cd3-b898d507a6b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4c68c4-1713-4aa6-a1e7-1114c0322e08", "sighting_of_ref": "indicator--88baadc6-b3dd-434f-8cd3-b898d507a6b9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e95c58-4121-40b0-8e34-c82803d9b825", "sighting_of_ref": "indicator--a791b894-9b36-4294-b791-1d425e5f7a2e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44883f1a-16e7-48e7-ab49-c5ca4b988932", "sighting_of_ref": "indicator--a791b894-9b36-4294-b791-1d425e5f7a2e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553830bf-2dd7-42d1-88e6-d37c82835e4f", "sighting_of_ref": "indicator--240fa4eb-76ba-4e8e-a016-24efac81a99b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003ab979-8347-40d7-8616-557e6fc68059", "sighting_of_ref": "indicator--240fa4eb-76ba-4e8e-a016-24efac81a99b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d42654f-6c4c-4256-9365-1ad9e4a11528", "sighting_of_ref": "indicator--33663018-9121-4b63-8e63-a50317f6e58a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--858219ef-d01a-4350-b39b-5e8fe60d5ea9", "sighting_of_ref": "indicator--8bed1952-4a7b-4ff0-80ab-bc109ed3e843", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd2645d4-e64c-4069-9362-9463607cd527", "sighting_of_ref": "indicator--8bed1952-4a7b-4ff0-80ab-bc109ed3e843", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5b70e5c-fa8f-4b81-b079-9be7e05d99e4", "sighting_of_ref": "indicator--48d5dd45-b358-4531-b207-b35e82776b8a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f99804-823a-4ed1-a5a1-a314c0b900e0", "sighting_of_ref": "indicator--48d5dd45-b358-4531-b207-b35e82776b8a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b20584d-9cf3-4858-8f2f-eb95b18b75d8", "sighting_of_ref": "indicator--7eb0a52f-1f14-454a-a15c-62cb62c1be44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556f6a93-e542-4373-a6b2-e3ef5ddc6591", "sighting_of_ref": "indicator--9a880e3f-9909-4f29-be4e-19858632128b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5377f8c7-17b0-4b39-b8bd-66756a8bb70f", "sighting_of_ref": "indicator--9a880e3f-9909-4f29-be4e-19858632128b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9ad207-1343-4b4e-9455-41a53a853f19", "sighting_of_ref": "indicator--00cbd9a3-1e51-4560-a2db-3c7ea2f81b1d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ea99c8-0997-4e1e-8ead-52b4dfa1ef75", "sighting_of_ref": "indicator--00cbd9a3-1e51-4560-a2db-3c7ea2f81b1d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16c92afb-02d6-4be6-88a9-324e652a2c4d", "sighting_of_ref": "indicator--a53cac33-bee8-4aac-b495-a5d2c04e8889", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e05e8c0a-3024-4ee4-bf00-e5c8bbcd5e7c", "sighting_of_ref": "indicator--a53cac33-bee8-4aac-b495-a5d2c04e8889", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b419a756-2bb4-48b3-a5a2-d3ee649eaf92", "sighting_of_ref": "indicator--7f8394d9-06c3-4077-b101-4872a8ba26e9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4db33d-0fb7-4123-af29-7f08f8d5e8b5", "sighting_of_ref": "indicator--814616d4-69e0-402f-a7f6-03af8e08b008", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f65be0c3-3cf9-4dea-832f-a72a0d1e56b4", "sighting_of_ref": "indicator--25f38180-e7d3-4a2c-b715-05dcee38b150", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18d1aa3-90cd-4da9-93c6-97783aa4a1cd", "sighting_of_ref": "indicator--76d42978-beea-43b7-9ce2-162ccf9d0f39", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f4be43-415f-4842-8300-4549211e60de", "sighting_of_ref": "indicator--5e5924b8-e8ae-45c5-8f9e-24abedd8d55c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c4b72b-b8e2-49ea-be82-57fd443d4f87", "sighting_of_ref": "indicator--5f5e4269-dbc1-4db2-908c-a2132ee703b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0740bfaa-fc00-421d-8308-2403b1709e19", "sighting_of_ref": "indicator--12f8dc0a-1606-44a6-a8db-5a159ff373c1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec315370-38a6-4e59-9fd6-cef5c0ed8953", "sighting_of_ref": "indicator--3f411344-211a-41e2-9677-1f94a4828d6f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d1690fa-9fe1-4981-af52-9f5e7d00a509", "sighting_of_ref": "indicator--219fd293-e1e1-41af-bbcb-619c8b907b69", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a8c84a-7179-426b-8cce-bd21dec6d14d", "sighting_of_ref": "indicator--cb381115-2558-42da-86ed-833b92562747", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac506d5-7827-4ff9-99b9-2622cbb31ccf", "sighting_of_ref": "indicator--1efc88fd-a684-4554-8d7b-4b702d0c8b39", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a183f57c-7203-4f17-b082-7f84e00da2c7", "sighting_of_ref": "indicator--dcf2c8d2-76bb-4af7-8b3c-5b73c2fbedce", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc85da56-c979-4eaf-8d43-f967463c83f0", "sighting_of_ref": "indicator--e7bb2e41-245e-42c7-b915-687397847bd5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb602cf-46a8-4d50-8557-e16070385c6d", "sighting_of_ref": "indicator--b953ec2f-9e21-4c01-9a8a-68ab2b06e207", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6018cf-2522-4c63-8e24-577b78da24e7", "sighting_of_ref": "indicator--3c32a1f7-8f5d-4379-af3c-c3f7d5af4352", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07dbd3ca-3885-430e-9769-8e3e62ba1124", "sighting_of_ref": "indicator--e91df5b2-0f13-4821-bf8d-32fd1afaab7b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f265dc75-ab5d-4f49-8415-7e0f2def12fb", "sighting_of_ref": "indicator--c86fb3c0-fcd6-4d86-8b87-bb893192bc77", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e315e035-97b0-45e9-a105-272c28e632db", "sighting_of_ref": "indicator--4ad8e782-641f-444b-9a4f-32621ee7e1c4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acef73ef-3304-4f1a-8277-64db7ca93e16", "sighting_of_ref": "indicator--eac3684f-55b4-4517-907c-fb67f8d3dfd2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a4a412-0b93-4993-a2df-ea11f0e604ac", "sighting_of_ref": "indicator--bdf9ba03-06fd-4424-8c6e-2eceff49823f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34a97d76-0d50-442e-91b6-0f47e6d3546d", "sighting_of_ref": "indicator--33398428-c8d2-4817-848c-ec8de9e8b8aa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373a01dc-7e78-4b98-a30d-267b97c7ed37", "sighting_of_ref": "indicator--a8497ca9-32a8-4f56-ab95-8504dd927150", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc18e39a-7b60-4892-824f-f81b6987a4c5", "sighting_of_ref": "indicator--bbf7c8c3-220e-4824-b699-906a04b83d31", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9a8cfe-df07-4065-ba31-acdc989d6557", "sighting_of_ref": "indicator--97ff28ee-23cc-4180-8515-649128132088", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb9dcebf-d2d5-4a63-bfa3-64be2dea0da7", "sighting_of_ref": "indicator--92770c3c-113e-4d01-893e-b8fce3146f04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723d62ed-387d-4355-97e1-9a4c74b8244a", "sighting_of_ref": "indicator--92770c3c-113e-4d01-893e-b8fce3146f04", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6029d60b-991b-4453-86a0-b82f88090e6f", "sighting_of_ref": "indicator--e61e57bc-b332-4e19-85fb-b0bfdd1b5521", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda18346-f237-4d5f-b7ee-51c1ac42ee6b", "sighting_of_ref": "indicator--e61e57bc-b332-4e19-85fb-b0bfdd1b5521", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cd720f-5648-411c-ae71-c9b5d290530a", "sighting_of_ref": "indicator--24d66f0d-2420-40b6-9cfa-9cd96268c181", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad58a829-db32-463a-b847-c493a309e9c7", "sighting_of_ref": "indicator--704578a3-7301-470e-b67e-824e39a6e54a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3185cfb6-aac0-45e2-bbc5-67d67e081577", "sighting_of_ref": "indicator--704578a3-7301-470e-b67e-824e39a6e54a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b8f36f-9d05-4411-9dcf-6abea6a6f279", "sighting_of_ref": "indicator--bf111dcd-4cad-4d07-8563-8fe84fb3aef8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bbad8d-6ad8-4fe1-85db-4bd2a952ae8c", "sighting_of_ref": "indicator--d6171c4b-446a-46e3-a5b7-9feb9952dff9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa56701a-87cb-4ee1-81a6-777e8877b634", "sighting_of_ref": "indicator--33c05032-9dfa-49f2-b114-7824c60b042e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aa4008-2655-44f4-be44-e5006ec48e84", "sighting_of_ref": "indicator--989ff93d-a0d0-42e3-8668-f9337a700ec1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1164baf-ffd1-4da7-bcad-f9dfaa77cb84", "sighting_of_ref": "indicator--8541f784-04cf-402e-aa7a-bb39652d3175", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a9795e-fc5d-4f93-8e60-a6210708b49f", "sighting_of_ref": "indicator--ea95ffbe-8ad1-4ec7-b84a-c302e016fea4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964ef956-172c-46ac-b5b0-034506ff4732", "sighting_of_ref": "indicator--bce73b4c-7b7b-4286-925d-d4ebb406770a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e6fbe15-f511-46b5-8a28-d9417fcaf83b", "sighting_of_ref": "indicator--91472528-a3db-42a7-a5be-1c49eee2f8fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40288897-7c22-419c-aee1-1f0b55e246e4", "sighting_of_ref": "indicator--5c4af74a-e990-48d7-8ceb-d0dfcc5ef463", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b71c102-3b50-42f1-95c2-6b514c089a5d", "sighting_of_ref": "indicator--5e32603a-ac13-4e2a-b47f-c58119c05b4d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b286c6f6-b1d0-47f3-a78e-e041d75751c6", "sighting_of_ref": "indicator--a3cbc983-fc27-476f-a9a4-bf1361fbe2b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85e614a-f3ae-41e2-8097-cfd668baff34", "sighting_of_ref": "indicator--daec0dc0-e6ac-439b-b967-f4ab8536e50e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89555d21-ee72-4c89-aef4-c1e42973d99f", "sighting_of_ref": "indicator--20b73aab-5979-46a8-a193-fd92996b38d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0325d8b1-0299-4b74-b94f-ddc8be60eaaf", "sighting_of_ref": "indicator--29ec1a16-f324-49bb-b1eb-69b552554bd7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27e0d70-3b7d-4050-969c-bee7aa747b8d", "sighting_of_ref": "indicator--243ea81c-a3d7-413e-b453-fb40933cfd25", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26d19e1-8c70-4983-bd56-f96d2c824580", "sighting_of_ref": "indicator--fd548832-e7bc-4b24-ab75-7fadc4fcc45e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f95aaf-368e-4ae9-af2c-9646cab059fd", "sighting_of_ref": "indicator--fbf9a8bb-f5b1-46b0-985a-387ea9040be8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c8a6b2-e8e0-4801-ae92-6844b702ffe1", "sighting_of_ref": "indicator--fbf9a8bb-f5b1-46b0-985a-387ea9040be8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ae3838-ff18-4878-8672-5e175127acce", "sighting_of_ref": "indicator--e286edda-03c9-460a-91b8-74997fec7315", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1e984a-c0ef-452e-8e2a-2ddffaa1cd68", "sighting_of_ref": "indicator--2e7904c2-b9e8-46c6-bd8e-d87cb656d64c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6c8764-3af4-4cf0-9545-218176c5a304", "sighting_of_ref": "indicator--6428b456-6422-47fd-9c35-572eee66cb03", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f897833-1a2b-471c-9411-526e33567ff5", "sighting_of_ref": "indicator--3fffa3b7-060c-480e-9b28-ffa2d967aa25", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8da32e2-f0b3-4d75-92ab-aebfe92e0d03", "sighting_of_ref": "indicator--a47d51e1-c63d-4522-a959-befae2d31c78", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d580d91c-1c84-4cd4-9473-3c94e1013359", "sighting_of_ref": "indicator--96865419-5cb6-4469-8438-16a5ab0eb41c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8181a7-2a01-44c9-a421-d224cf9d1e83", "sighting_of_ref": "indicator--1865b3c2-c6bb-4a6d-ad49-fadd0e87cb44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba59ff9c-426b-4308-a19c-db9b861fd794", "sighting_of_ref": "indicator--9c4b9c8b-3a1f-43d5-9445-84efc77912d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ea4e70-66eb-4d75-8728-eb46ad1f5399", "sighting_of_ref": "indicator--de6da808-e57c-47c1-a509-5e01fa344b77", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b13bdbc-35d3-4241-99a5-08282143a6c6", "sighting_of_ref": "indicator--bcc5f698-75a6-445c-9314-fc42745b6788", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d039bf76-1f0e-483a-8508-7fa90d6ba859", "sighting_of_ref": "indicator--00f38cb6-29d2-4b79-8034-274ecc54bf28", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf95fc1-1f3e-4b91-80e4-508b4cca9012", "sighting_of_ref": "indicator--9b1a2ae2-24c9-4fa2-8ee2-c11a88f510ed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707b2310-322d-4058-8ba5-fa4a9643ed69", "sighting_of_ref": "indicator--ceb1d3ad-5134-4c15-a945-987841eb70d6", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9ad686-8f33-415c-9cc1-e2624e45234f", "sighting_of_ref": "indicator--c9bbb8ab-25ab-4cbf-acaf-09d60ac14bd3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b57a56f-a263-4030-9704-f27f8fbdf8fd", "sighting_of_ref": "indicator--f8274f97-bd70-412f-baf6-7647e37ee13d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40d2490-c966-4727-b2b0-bc1d3ed510b5", "sighting_of_ref": "indicator--f8274f97-bd70-412f-baf6-7647e37ee13d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671f348e-6c76-40f0-8893-606fef1256d6", "sighting_of_ref": "indicator--f8274f97-bd70-412f-baf6-7647e37ee13d", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fa750fb-7590-4ca1-a95f-ad37ffcb62ea", "sighting_of_ref": "indicator--c581d877-df78-484f-9382-ae80bbb33592", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cebdbb-e21e-42ec-9e53-0451281c30ba", "sighting_of_ref": "indicator--56581217-953a-4c25-9d8c-2d175de56f61", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af9310d8-cc55-4cb8-85e3-9f66233aa901", "sighting_of_ref": "indicator--f3a56605-6cfe-4e13-a149-08b5eb2c73f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a413cbe-d012-4d35-a94c-e021e6f94a91", "sighting_of_ref": "indicator--76a40584-b891-449c-a329-ecb14b821321", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1e3136-d636-46d1-a4c1-343b36421627", "sighting_of_ref": "indicator--4c0502ed-60e8-4d00-a9aa-3d8f8d1f4768", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0623573-3646-42bc-9859-6dd652677107", "sighting_of_ref": "indicator--4c0502ed-60e8-4d00-a9aa-3d8f8d1f4768", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e47e50-c16b-4df4-9c38-10b61d690e00", "sighting_of_ref": "indicator--521c5291-a7f8-47eb-b30e-e739cfcb97d0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05908479-ebe8-4c86-a02e-da5c630e0fa7", "sighting_of_ref": "indicator--521c5291-a7f8-47eb-b30e-e739cfcb97d0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd99a4c-f840-4f27-9234-f2766d3a9603", "sighting_of_ref": "indicator--ba09093e-fa68-4d23-842f-741caa62828d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d507dbcd-5857-4995-987a-4181bc7bc03e", "sighting_of_ref": "indicator--ba09093e-fa68-4d23-842f-741caa62828d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3fe892-a8a3-402b-a6b2-9395e8283b16", "sighting_of_ref": "indicator--a8cada33-3b81-44b4-a0fc-0ad90103560b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff8e9b24-1e6c-4f54-a3db-cd1feb89d486", "sighting_of_ref": "indicator--a8cada33-3b81-44b4-a0fc-0ad90103560b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c21f2d-99c3-4a58-af66-cd87f8ba1a8e", "sighting_of_ref": "indicator--4dfe25c1-8c1b-4553-89ac-72ccc96e9074", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79ffcb1-e800-4b90-b320-3555e95025d5", "sighting_of_ref": "indicator--4dfe25c1-8c1b-4553-89ac-72ccc96e9074", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3c15029-20ed-4d47-b722-39c7c0600e78", "sighting_of_ref": "indicator--3a46dccb-6854-496c-b908-b19e64dcbd32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcd4942-bb68-4faf-9df2-30cd8934ac5b", "sighting_of_ref": "indicator--3a46dccb-6854-496c-b908-b19e64dcbd32", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cb18e1-2d0b-4553-80e2-0cb517fa8177", "sighting_of_ref": "indicator--b5fdeec6-849b-48ea-8c86-206702b9f3bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e01f2538-9fa1-425c-b648-893904b30dce", "sighting_of_ref": "indicator--b5fdeec6-849b-48ea-8c86-206702b9f3bd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e097b571-56cb-4849-893e-059574d948e2", "sighting_of_ref": "indicator--46968999-5105-4f63-84bd-0cb888a214cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de914a5-2052-4373-b4e1-bb47173b3e88", "sighting_of_ref": "indicator--46968999-5105-4f63-84bd-0cb888a214cb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb610b36-5e4a-4276-af10-90c9f3b30d9b", "sighting_of_ref": "indicator--8da985ea-3f19-431b-91d7-6a1398077f62", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1949c7ae-98d8-4a63-9d3f-e887372f4903", "sighting_of_ref": "indicator--8da985ea-3f19-431b-91d7-6a1398077f62", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8866ff48-9746-4215-8e12-26d099af8573", "sighting_of_ref": "indicator--eb0f3aa2-ff98-4772-8b24-f4480115efb0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a1d68d0-d1ce-4110-89e4-8fc34f3f7a87", "sighting_of_ref": "indicator--01e070c2-905f-4d35-953d-ddf229fd32fa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932b79cb-3b76-4dfb-b85b-8219777f9dfc", "sighting_of_ref": "indicator--a234b55d-7afb-4b21-972d-6f939893842a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6765bba0-1f2b-4d69-9400-0ebf5da8ffeb", "sighting_of_ref": "indicator--a234b55d-7afb-4b21-972d-6f939893842a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b99f60-f468-4043-bd45-eecf36318bab", "sighting_of_ref": "indicator--2a3d59da-02c6-4489-a860-e438cb75927f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6760a933-efc2-4cc2-8f7e-703c616e5a72", "sighting_of_ref": "indicator--2a3d59da-02c6-4489-a860-e438cb75927f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a145f4-0010-4ee8-a6d8-c8ec90838f57", "sighting_of_ref": "indicator--3bffb9e3-364a-4e87-831a-f6104986b14f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9ad123-ea7f-4b09-9619-3c8e75b64539", "sighting_of_ref": "indicator--3bffb9e3-364a-4e87-831a-f6104986b14f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a757b469-3c05-43ef-9155-77f8cc4e9077", "sighting_of_ref": "indicator--8efec1c4-a270-49f7-bb2c-f0275c7d290f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094458a3-a3df-48b0-b77e-08bc5a940429", "sighting_of_ref": "indicator--323e6d96-7d29-46e1-ae0f-fe51c4360e1f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d327f65c-3486-42c6-b98c-1e7693f45eac", "sighting_of_ref": "indicator--323e6d96-7d29-46e1-ae0f-fe51c4360e1f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1147abd6-b371-4003-b670-f57a9e03d75b", "sighting_of_ref": "indicator--1fdcb2cf-3909-4fb9-b6b0-8cd8870006cd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba125007-6b4b-4adb-bf2f-6ce74200c88b", "sighting_of_ref": "indicator--db705e87-a5a6-4f99-956b-768d5fb3c896", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a1ada2-4f94-4df9-b44b-04882eb1e82c", "sighting_of_ref": "indicator--b3db5e78-ebcd-499e-8783-efa6f841749b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e42ffe1-5549-43dd-9629-d387eb6408b8", "sighting_of_ref": "indicator--dc4612b2-1427-4ac0-9a6d-5f33eda002c5", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5479b96-4ffc-4722-895c-8ed1cf0f74bf", "sighting_of_ref": "indicator--6e4335f5-1996-40a6-9370-2948f70cf40d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5bc6f9-0014-4ed4-a008-e64410bda3be", "sighting_of_ref": "indicator--27dec043-8818-44f9-9160-3c3dd99c350f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a389f519-6ccf-4364-b294-fd56ac6ad438", "sighting_of_ref": "indicator--cf0ef7d2-0d84-4f56-a709-59cbfc9d4a93", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52d6fd9-5c20-4609-b830-b48370ad94ec", "sighting_of_ref": "indicator--09706c75-4669-49b0-b8d6-7e8ba18c89fa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af542ee6-717a-4f0d-94f8-e611c9b108f0", "sighting_of_ref": "indicator--09706c75-4669-49b0-b8d6-7e8ba18c89fa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25fb7ee-bb99-479d-99f3-e0f316833de7", "sighting_of_ref": "indicator--cb4f67aa-0d37-4203-98b4-f72de5a4524a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf450baa-54bd-4ad6-b75a-b257fa20cecf", "sighting_of_ref": "indicator--dd3f8542-83d7-492d-b8e1-8184e0b9f92a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305d1fca-3f8d-42cc-8d97-eb234ab69875", "sighting_of_ref": "indicator--dd3f8542-83d7-492d-b8e1-8184e0b9f92a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5ec2f8-c6e3-4de8-a324-a93f8111c886", "sighting_of_ref": "indicator--07a232f3-5418-4a99-aaf9-751cf1264ec5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1895e6ed-fa70-46a1-ad55-99cf638b334d", "sighting_of_ref": "indicator--602aed5f-154e-447c-8ab1-1f5b48266e03", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc880ee-d567-403f-8a94-82c24a4b0eba", "sighting_of_ref": "indicator--5603350c-874f-443a-9c04-8955e2d88515", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50998c3d-90e0-4eec-bc6b-c19b69d34d0a", "sighting_of_ref": "indicator--fe2bbf84-8a04-497b-a94d-342c77809bc3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5514afc-70ac-4fe3-ab22-0d70b9bd7076", "sighting_of_ref": "indicator--fe2bbf84-8a04-497b-a94d-342c77809bc3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daae345b-8b6b-4388-98b0-ff6747efb5a6", "sighting_of_ref": "indicator--9e56fcd9-e94b-40f1-8993-d51dc5a0d6b3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9067e1b0-e3b5-4087-b475-b254f0b30d4e", "sighting_of_ref": "indicator--7b225879-4014-4ed7-83cf-fc5cefdba2af", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc4961d1-217f-4141-ad5e-b6ff33e7e2cc", "sighting_of_ref": "indicator--7b225879-4014-4ed7-83cf-fc5cefdba2af", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342a2ecf-d42a-4a19-894c-862fdd39fa79", "sighting_of_ref": "indicator--93e6b552-3e9d-4cee-8955-97176a1d5579", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36688ed5-c891-4f6d-b0da-1efc89db5501", "sighting_of_ref": "indicator--71ee41cb-b7f9-461a-ad81-2cffed3df105", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbaf4cb-ac90-44f9-a40d-7e5a54f4dcd5", "sighting_of_ref": "indicator--b637a409-e427-494c-a4c1-ff58220e3a8e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ff0c8d-ae59-4a25-b118-867ad799e3ff", "sighting_of_ref": "indicator--8c9d49bf-0316-4a9f-baa0-c12b82170cad", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1553dc80-b2eb-4429-916d-65d2d6117378", "sighting_of_ref": "indicator--85e037ce-92d0-495f-a645-05ae856deb28", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97aae49-be74-4648-aa3b-487f2990456c", "sighting_of_ref": "indicator--de1df49b-58c5-4e01-a6be-88d1b2acbd0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94f0509-56ba-4ce2-9c12-94af59efc5f7", "sighting_of_ref": "indicator--72503542-19be-47e7-8a11-7cc642c06c6b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33569cb0-e0f5-45e4-8d91-e5cfa32b66ce", "sighting_of_ref": "indicator--64bc52d1-1faf-481c-ba5a-370898e53fec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34484b81-2392-49ca-b6aa-a83c00719721", "sighting_of_ref": "indicator--ed42f9fd-4917-4bab-91db-a3dff9539b5f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610c79da-b6ed-410d-886a-a4d7d53693c6", "sighting_of_ref": "indicator--53dbf5e4-d32a-403e-8f57-9826c991ef25", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeff8ff4-41e9-471b-9ee5-bac85320075d", "sighting_of_ref": "indicator--655fb92c-9e44-40b6-b53f-7727f8d6e650", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ad1fd78-8f62-4274-9ca0-c9ea17cd5119", "sighting_of_ref": "indicator--2ef04515-c253-4617-8f06-5244c4e65265", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf9a8b52-2d3d-45f6-97eb-289c2c4234d3", "sighting_of_ref": "indicator--994373e7-b2b3-4550-9240-55f46f9862e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4261e1e-b85a-41e0-84c2-58d2fc742a0e", "sighting_of_ref": "indicator--834565ad-f959-451d-a6a9-7e6b0b3c8b54", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4318e4d-c754-4351-b5de-b8b7db344376", "sighting_of_ref": "indicator--676cab47-8bc8-4056-b91a-b07f40819d96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b37ff8-12ac-4d5f-93d4-f112387915f1", "sighting_of_ref": "indicator--93ebc455-df80-48b2-aba1-d5d53e077121", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--043c1dcf-52ce-41be-9d80-b63b746226fa", "sighting_of_ref": "indicator--d99b2375-d606-4b60-b790-5dd559032ed1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f70b427-aba4-49e6-a304-e2576bf8e3b5", "sighting_of_ref": "indicator--8bb2e9c7-69e4-4401-8426-99c8dcd1c6c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccbb6ed-adb3-40ed-b0cb-cc510906a718", "sighting_of_ref": "indicator--551ca2a4-0b45-4536-9a3f-d4600456da15", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a9b926d-d0ea-4d69-a7ce-8874c087fb81", "sighting_of_ref": "indicator--9d986441-50ad-4d4e-a04c-3ac027d3134a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ab6a47-10b9-4d3c-9ca9-166bd341e82b", "sighting_of_ref": "indicator--22e1c766-b4c5-446e-9100-b53b23d3b8b6", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2039c643-7e3f-486a-b058-a2bc4b412200", "sighting_of_ref": "indicator--49e55473-ec6f-4055-8807-d18334366fd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634d2ae8-f4af-447b-a658-b534c28c9b51", "sighting_of_ref": "indicator--d79e7485-ef6b-4c32-ae58-6a00f1ce0344", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e73cbd-6e25-4a6b-9974-735542242286", "sighting_of_ref": "indicator--69742ac0-42ad-41e0-bc96-7ec97f6bc860", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6206bc0-fee4-40c2-823a-e54cd4d21747", "sighting_of_ref": "indicator--69742ac0-42ad-41e0-bc96-7ec97f6bc860", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7f538d-1be4-48ac-87ad-0db941e5c5e0", "sighting_of_ref": "indicator--99406ba2-01db-4289-90e0-2b54ed089c01", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848691e8-c77e-4682-9bee-a3bf0ed422e7", "sighting_of_ref": "indicator--99406ba2-01db-4289-90e0-2b54ed089c01", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfd806b-6645-44c0-9d70-9251a1caec05", "sighting_of_ref": "indicator--6e77954b-c358-45c8-80f6-e75081024e18", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f379e592-74bb-4106-a2ef-53d5e3a59e1e", "sighting_of_ref": "indicator--6e77954b-c358-45c8-80f6-e75081024e18", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a05b0db-e48a-444b-a500-4d5ff3563753", "sighting_of_ref": "indicator--3d5615bb-79d7-42d0-82d8-7f7d5d35ca51", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c01b64f-9e4a-404f-b135-678e8e1cf11f", "sighting_of_ref": "indicator--3d5615bb-79d7-42d0-82d8-7f7d5d35ca51", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8280ccfd-6bb3-4636-9a9e-140779dffd6a", "sighting_of_ref": "indicator--6a6ff42d-e2d3-4d89-9628-9de23cf419cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aea03aa-8715-4ad9-ae11-edf60bc6374c", "sighting_of_ref": "indicator--6a6ff42d-e2d3-4d89-9628-9de23cf419cf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797fed9a-9311-46e8-b773-b012208a90e2", "sighting_of_ref": "indicator--e3758fc1-14a5-4889-876c-0b0f14769992", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91033cf3-ef92-407d-854a-b079bc8f448a", "sighting_of_ref": "indicator--e3758fc1-14a5-4889-876c-0b0f14769992", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff16484-c266-47b6-b803-b6e8c73ec78e", "sighting_of_ref": "indicator--1af68da5-3018-49ea-9469-d7d2fdfc5ec2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a45cb0-ff21-49c8-a209-ae3f5a6958b7", "sighting_of_ref": "indicator--1af68da5-3018-49ea-9469-d7d2fdfc5ec2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8884040-88bf-44b6-850d-317f470063f6", "sighting_of_ref": "indicator--6ac8809b-624b-4e20-b45c-9b176f6eff4d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fb0ba1-a42e-408a-af84-e052a93f7f5b", "sighting_of_ref": "indicator--6ac8809b-624b-4e20-b45c-9b176f6eff4d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4324be38-e6c8-45cb-b0ed-902173b7c86a", "sighting_of_ref": "indicator--49a13eb3-cc02-4822-98ea-4ef7bba6adf2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793b7690-99f3-47c6-975d-83f8880cc9f4", "sighting_of_ref": "indicator--49a13eb3-cc02-4822-98ea-4ef7bba6adf2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a3170b-e690-4ea4-a45a-619acfbb1f9e", "sighting_of_ref": "indicator--2734606a-f5c8-4121-8870-f200ade62551", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5732ce3-83df-48b0-8845-a4d7d211658f", "sighting_of_ref": "indicator--2734606a-f5c8-4121-8870-f200ade62551", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118fde17-f951-409b-b711-eb4f05c66309", "sighting_of_ref": "indicator--486c3f0f-0edc-49a3-a781-dd67ac04a3f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6947649-3415-4a71-a8cc-5eca5adf3970", "sighting_of_ref": "indicator--486c3f0f-0edc-49a3-a781-dd67ac04a3f3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e0bbb5-df95-489f-90f1-16a0c1d28d43", "sighting_of_ref": "indicator--0b7d51df-70a0-4811-b170-7c670f596ac3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f780f87-6364-487d-9826-afd5cd151970", "sighting_of_ref": "indicator--0b7d51df-70a0-4811-b170-7c670f596ac3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442ef4a0-1f4a-4b09-a4de-27b3ae59d030", "sighting_of_ref": "indicator--8b34b666-47a3-459b-bf96-9d3d39f4a955", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab90c1a8-5a86-4b5a-8bf4-98d72355bd74", "sighting_of_ref": "indicator--8b34b666-47a3-459b-bf96-9d3d39f4a955", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b90f10a4-bedd-46fe-acfd-9b6cf6aabfef", "sighting_of_ref": "indicator--c59d313e-42c4-41e1-8448-02f52efcdecf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74a0ff6-2b8a-493a-9547-972e90d053ac", "sighting_of_ref": "indicator--c59d313e-42c4-41e1-8448-02f52efcdecf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1364f4e7-9e65-4c2b-99e8-acf9f966a4ea", "sighting_of_ref": "indicator--315e3097-2871-48d8-a208-56a1ec9e17af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd9b900-a953-4f48-b070-c9929dc06401", "sighting_of_ref": "indicator--315e3097-2871-48d8-a208-56a1ec9e17af", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ff7896-b329-4ac1-a28a-c0bd41a897d7", "sighting_of_ref": "indicator--2065c5ec-89c2-4690-8ce6-b1fc17246bae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549e7d31-5079-41e7-8b67-77e1f4bb7379", "sighting_of_ref": "indicator--2065c5ec-89c2-4690-8ce6-b1fc17246bae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890fe5d7-9b6a-42a0-aa2e-93152a372295", "sighting_of_ref": "indicator--26d15a5e-b491-416a-a30e-230b0d2b960b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fc67b26-a0fe-46c6-b0e0-36439e266170", "sighting_of_ref": "indicator--26d15a5e-b491-416a-a30e-230b0d2b960b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf4bc63-26b5-4206-a96d-18e08902b1be", "sighting_of_ref": "indicator--714225b5-6041-4a78-8102-d1bd8e36481b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0b1190-ca02-4a68-8909-6e9bf7df0e9d", "sighting_of_ref": "indicator--714225b5-6041-4a78-8102-d1bd8e36481b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38de4f0-cbed-46c1-adfe-c5b15ec3e1c4", "sighting_of_ref": "indicator--db4fb1c0-4e35-49c0-a7b7-b7402e19d9eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15addbb-f63d-4079-85dd-7a0ec93df1ba", "sighting_of_ref": "indicator--db4fb1c0-4e35-49c0-a7b7-b7402e19d9eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18acc1e2-bf79-46b6-95e2-9d9ad95688bd", "sighting_of_ref": "indicator--501be301-55ff-45f0-bae7-e00d8dcf14da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--117ac9b8-7b71-41d0-af70-212971f55227", "sighting_of_ref": "indicator--501be301-55ff-45f0-bae7-e00d8dcf14da", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf8dac4-ded7-4cb4-9e40-61d36c290b29", "sighting_of_ref": "indicator--cf2940a8-6b05-463a-9bdf-d7507f3b509b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a458281-3353-41a4-8c58-1a62a76aee21", "sighting_of_ref": "indicator--cf2940a8-6b05-463a-9bdf-d7507f3b509b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a309f9-334a-4dc7-9fbe-696d21c56f32", "sighting_of_ref": "indicator--126c08a1-a72a-41d5-8d8d-5478e613cb50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0825cd0-6cfb-4e66-92e2-87438b2b1b1a", "sighting_of_ref": "indicator--126c08a1-a72a-41d5-8d8d-5478e613cb50", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7f4eef-b126-4e83-89a6-9a921bb79033", "sighting_of_ref": "indicator--3295eebf-e92d-4fc1-8612-106f904a2027", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ee32ea-30cc-4034-b301-e4f1b7ef8f4e", "sighting_of_ref": "indicator--3295eebf-e92d-4fc1-8612-106f904a2027", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6644a47-d1bc-471f-8652-c06ca7bc8b40", "sighting_of_ref": "indicator--c3b66e80-4b2f-4130-8cdc-8f5f23ca0caa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b103168f-4f50-41f5-9915-648824e2ff79", "sighting_of_ref": "indicator--6c0edbe7-81b7-41f2-ae59-36ccef433381", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d4b468-53d1-484e-8410-4768f5d0bc6b", "sighting_of_ref": "indicator--8d28f19d-6428-40f0-a379-29f8f7f8e126", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57008655-83a1-4847-8875-e8b6fa7a77bd", "sighting_of_ref": "indicator--8d28f19d-6428-40f0-a379-29f8f7f8e126", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cc2617-3e34-4f9c-b24f-393a5a064d53", "sighting_of_ref": "indicator--eba432ce-a4c8-4b42-8818-622cb5402284", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1e22e1-fa9b-4557-85b3-69da8cf9f04a", "sighting_of_ref": "indicator--eba432ce-a4c8-4b42-8818-622cb5402284", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa43dd7-a7be-4a3d-8c20-ebba9c1040f3", "sighting_of_ref": "indicator--06f81d1e-92fd-4e16-a6ff-64ea7b987e0d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e34801-e6b1-498d-81f3-af053c923fc1", "sighting_of_ref": "indicator--06f81d1e-92fd-4e16-a6ff-64ea7b987e0d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8747754-27bb-467d-b0f2-3e9f3866f9b0", "sighting_of_ref": "indicator--509cb107-886d-4945-846d-d629b4654aea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c085e7ba-6982-4f76-9c14-b945c4033fcd", "sighting_of_ref": "indicator--eab92c7e-afea-4f67-9d43-2c66d7ab0802", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ed5d165-007a-4e29-9027-417c29e7d405", "sighting_of_ref": "indicator--eab92c7e-afea-4f67-9d43-2c66d7ab0802", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907ba5a7-d28f-49bb-9e96-fe8e1c6d7340", "sighting_of_ref": "indicator--75f3ca7b-4f6c-4da6-b312-44f8149ed484", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625d759a-b39b-467c-a420-e587484ff8f1", "sighting_of_ref": "indicator--75f3ca7b-4f6c-4da6-b312-44f8149ed484", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bde380-9ea9-427b-83fe-b8b1e6fa3957", "sighting_of_ref": "indicator--6c86b734-613f-4673-9ab4-8398310c0da5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fd9560f-6cd5-41d6-a536-e3153fddce2c", "sighting_of_ref": "indicator--6c86b734-613f-4673-9ab4-8398310c0da5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c16bc8-60e1-4528-b828-a62fb5379391", "sighting_of_ref": "indicator--88ccdbc9-03af-4b6e-9c3e-f3e16d611f77", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4da856-8590-4e09-a230-91f964829f07", "sighting_of_ref": "indicator--88ccdbc9-03af-4b6e-9c3e-f3e16d611f77", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9222c2ad-599a-45ef-8fd9-72cd125289b3", "sighting_of_ref": "indicator--6ad24c64-f4bb-469d-8022-1172ac1cea13", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c973a345-f258-43de-9c2d-7d4d2cc5e4b4", "sighting_of_ref": "indicator--90f8140f-4166-4407-b4c3-01aa37519952", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff07cea1-02bb-41a4-8272-6c069504294f", "sighting_of_ref": "indicator--f7eb3c60-fd7a-4408-9d96-c75ee054b54a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f58383f-1b3e-4264-b7b9-6b4a08f3fa32", "sighting_of_ref": "indicator--456603cb-7ba5-4a11-abd0-3c83c5ed71ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafa2af2-10cd-4da1-9088-c4f90e27e856", "sighting_of_ref": "indicator--4a2cc8b2-6614-48d2-85b0-9af2de96298a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c633be-59be-4e7e-9b92-d4447e1de8eb", "sighting_of_ref": "indicator--4a2cc8b2-6614-48d2-85b0-9af2de96298a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13267b9e-b064-46c2-9838-c5ba7c8b093c", "sighting_of_ref": "indicator--0e0378bf-e4af-4067-85af-10f95bce7e44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408dec74-7b6f-45e0-932b-493466b63753", "sighting_of_ref": "indicator--0e0378bf-e4af-4067-85af-10f95bce7e44", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a120cc31-a2fb-4afb-9bf9-0fcf1914d4e8", "sighting_of_ref": "indicator--5935be93-d44f-4849-b1e6-830a77a48977", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f938262-c66d-442a-9e45-e985698fe597", "sighting_of_ref": "indicator--5935be93-d44f-4849-b1e6-830a77a48977", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39bbdca6-2ad9-4950-b836-d324aad8aaff", "sighting_of_ref": "indicator--ed21e5a5-a648-4389-8d07-f8cbf4398fac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25e98f86-f553-46b9-b458-b0fa8ae84fcc", "sighting_of_ref": "indicator--ed21e5a5-a648-4389-8d07-f8cbf4398fac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600fbd24-604a-4b98-ac44-db9cf441d1fc", "sighting_of_ref": "indicator--bc39da5e-9f55-460e-b1c2-af86a20da17f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--014fb3ed-44f3-4bc0-be28-049576f744ea", "sighting_of_ref": "indicator--bc39da5e-9f55-460e-b1c2-af86a20da17f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f701f1d6-1013-49c7-88f8-3abfaa8645f4", "sighting_of_ref": "indicator--d8b68b92-e728-4d23-9615-f96593d03719", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2a23c48-b6e0-4690-af60-4474d9a4ea34", "sighting_of_ref": "indicator--d8b68b92-e728-4d23-9615-f96593d03719", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f98855b-8a45-42a5-b8c3-b0011d18495b", "sighting_of_ref": "indicator--751760bd-a72a-4378-a762-b5fdfbb6fdde", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bc2656-320f-4be4-9a88-1fb360827743", "sighting_of_ref": "indicator--751760bd-a72a-4378-a762-b5fdfbb6fdde", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4741f085-d562-43c0-ab21-60678b0ef56f", "sighting_of_ref": "indicator--1dbaf69c-5595-44ab-b651-5cad70520d26", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87ea4f5e-6e8b-4c43-b109-5935edeb1c98", "sighting_of_ref": "indicator--1dbaf69c-5595-44ab-b651-5cad70520d26", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e334d5-821c-4014-8377-68bcc7943700", "sighting_of_ref": "indicator--0349371d-5815-4512-a787-01ade07ab642", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c37a15c-c56e-4d7e-9f68-4e1740befc8f", "sighting_of_ref": "indicator--8ece7174-d832-4c55-a71b-77a1de1666fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbe6ff1-7ab1-4f94-b246-f09adfe9226c", "sighting_of_ref": "indicator--8ece7174-d832-4c55-a71b-77a1de1666fd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9762f2c6-bfa0-4350-89b4-5fcfce1f6340", "sighting_of_ref": "indicator--9a1de96d-f64a-4126-8ae9-58d902a76777", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48419288-a282-48b5-bcd8-5661e8a62723", "sighting_of_ref": "indicator--9a1de96d-f64a-4126-8ae9-58d902a76777", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8879822-2feb-4326-8c9c-2dade6dc73e5", "sighting_of_ref": "indicator--4639322d-d2cd-4081-af12-c89acf3d8af5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdf39c7-abf0-409e-8b77-5767401380f9", "sighting_of_ref": "indicator--4639322d-d2cd-4081-af12-c89acf3d8af5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8dcc905-fac2-4594-afef-a29e71e9e7f2", "sighting_of_ref": "indicator--55ae711a-74fc-4166-98fa-f4fccb617957", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8813e889-d47d-4248-9f67-e4b73186bc89", "sighting_of_ref": "indicator--55ae711a-74fc-4166-98fa-f4fccb617957", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b31ba8-c3f9-4afc-a8ca-85156220dec6", "sighting_of_ref": "indicator--edcb7251-8b65-40ce-b001-5a5913353aba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2025e129-7a5f-40df-b862-5b2f3d2e0e2d", "sighting_of_ref": "indicator--edcb7251-8b65-40ce-b001-5a5913353aba", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe29c14e-d486-4199-aa63-1ae4f3264c60", "sighting_of_ref": "indicator--96ad3ac5-df17-443a-a98e-640b1c9ad3f4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88afdf8-1e9a-4a68-85bb-15720951e8d6", "sighting_of_ref": "indicator--5d7244b1-8c43-4332-a9e7-42de2a5f0fec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd3b398-4639-47e7-82f8-1d398ffaffaa", "sighting_of_ref": "indicator--5d7244b1-8c43-4332-a9e7-42de2a5f0fec", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfbf2430-dcf6-4b13-ac8e-76c150d68f8a", "sighting_of_ref": "indicator--911693b0-1c56-4942-ae73-63ce817d7dd4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebf9050-fdb5-4feb-ab17-566422bb49d8", "sighting_of_ref": "indicator--911693b0-1c56-4942-ae73-63ce817d7dd4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e32282-7866-4285-86a9-a638b2da8ad4", "sighting_of_ref": "indicator--26df927b-75ef-4b2b-b4a8-eb3660c7aae5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8559c69-253d-4d49-8d54-37b5bb567368", "sighting_of_ref": "indicator--26df927b-75ef-4b2b-b4a8-eb3660c7aae5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ad5a5f-f969-4de6-bd5c-0526db176c8d", "sighting_of_ref": "indicator--c75ff169-a904-4ba4-b7e6-a2cee7e238ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e116773-038f-4d1b-8020-939050af5192", "sighting_of_ref": "indicator--f0427d3c-ca83-4b03-9fb4-5e17c6db79d7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f76ca6-9a1c-499b-aebb-01163f61a3a9", "sighting_of_ref": "indicator--1faedd74-9ce3-4001-955e-a36cd9e0a3de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf047ec-a839-4323-acc0-a32bbc148276", "sighting_of_ref": "indicator--2385e99f-0995-4275-bd83-603e7f8ca372", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aaf0cdc-0561-46b4-9ac3-a5e869605650", "sighting_of_ref": "indicator--8c1646cc-f872-4075-bfa5-16ce5ec80d17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263fa7fe-3634-49a6-adf8-5fd8a6337e89", "sighting_of_ref": "indicator--df602cdd-5e18-4930-b17d-f42c1ad44e02", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173b4df0-3082-4b8d-b6cb-6bbab7e28b88", "sighting_of_ref": "indicator--eab46bcc-4245-49e9-8c2d-20d31d538cf2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e439660-00ba-4a60-bd47-29b5e28a8a66", "sighting_of_ref": "indicator--4d5106f0-8083-4365-bb56-bd6193b8f35c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b17727-e4f3-4816-b77f-e42a96ca91c5", "sighting_of_ref": "indicator--7de06f4b-9bce-4d26-9043-783c4a3f437f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b915ed6-fe9a-4324-9617-1f016824270d", "sighting_of_ref": "indicator--e9d584a6-cbdf-4093-8020-9ec94f60addc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b617ec67-6584-49a9-a3b5-5d6ceff49a9c", "sighting_of_ref": "indicator--2cf653e1-dfc7-4742-af3a-c5dadbfdf1dc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427f6e67-d745-476c-87bf-f58940d47b6a", "sighting_of_ref": "indicator--bd3db214-c02a-4bed-a1c2-47e0dd43bb29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8613e9-a8f4-412c-b5cf-89490ae60e17", "sighting_of_ref": "indicator--8d2153ef-d465-480c-ab2c-a4c7b51f9deb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202ec514-f57f-435b-887c-87d244544641", "sighting_of_ref": "indicator--87564a6b-c17c-4c49-81db-82fb4ad0b214", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893b10fc-ebd4-481d-8721-e21d485f46a3", "sighting_of_ref": "indicator--0e834f20-bf5b-458f-9c2a-55094d63ebae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1893fa7d-7d79-46bf-87a5-bebb18eb2e56", "sighting_of_ref": "indicator--d7b59a88-9003-4e94-ac9a-d7a5bb439554", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869a7033-88d4-44bb-8ec0-d18c2efa8a4e", "sighting_of_ref": "indicator--a8eab825-00b1-4c92-9cfb-c933e419b394", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f599c1-2a5b-437b-9aff-e0df748fe35c", "sighting_of_ref": "indicator--13623a0a-aa32-48e6-aeba-ee2f022bc806", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f1ae99-88d4-4c76-a2c5-74f543534b30", "sighting_of_ref": "indicator--e1eab41c-3b3a-45bc-9a95-ba6330980382", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb923855-7be0-4e1e-a58a-0f0a2493526a", "sighting_of_ref": "indicator--cee60567-63b8-43d2-9507-efbde8c4c143", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c939b9-c386-4370-907f-33a04075bed2", "sighting_of_ref": "indicator--cabb000f-71a7-4b11-98ea-59c8c50db413", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4442007f-c6bf-4f5d-866f-158b9e149292", "sighting_of_ref": "indicator--9f67d37e-00ac-46a3-933a-b03809a3ef21", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403fe293-d574-4b4a-b749-68a36a37877f", "sighting_of_ref": "indicator--c95b641b-e87f-4b0a-928f-1b922f48183e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1bfd67-4fac-43d4-81bf-093927645316", "sighting_of_ref": "indicator--c95b641b-e87f-4b0a-928f-1b922f48183e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fe9622-69d0-4b5f-a2fd-a1bd4c72b5a0", "sighting_of_ref": "indicator--b1062692-db0a-454b-8f9e-a72ed9db6f99", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db582c2-8788-4656-8dbd-1f011c485202", "sighting_of_ref": "indicator--b1062692-db0a-454b-8f9e-a72ed9db6f99", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b25c334-1457-412f-8c4e-11dbbd81cea6", "sighting_of_ref": "indicator--dc55288c-0873-46f2-9acf-88281130203c", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbaf50b-5acb-43cf-a730-e7957123acbd", "sighting_of_ref": "indicator--0c0c1f10-e3d9-4dc7-b0de-f409f1d9a7c1", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b147dc2-d3a1-4f31-b8e1-02c165d746d6", "sighting_of_ref": "indicator--ebb094db-77d9-46a3-8759-b47c274792ec", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d7fbea-e1e5-4606-b3e2-245e8a5ca7e8", "sighting_of_ref": "indicator--ebb094db-77d9-46a3-8759-b47c274792ec", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4d81c6-879a-4a8d-8305-b5ab9a33bc55", "sighting_of_ref": "indicator--3f694bb6-1a0d-48ab-94fe-26730b1c3733", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e14ade-3432-4db5-92a9-81ef364258b4", "sighting_of_ref": "indicator--3f694bb6-1a0d-48ab-94fe-26730b1c3733", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa626a5-c278-4c75-a115-24556c588c57", "sighting_of_ref": "indicator--f9840d54-f0c0-496a-a9b5-bb15d63a770d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b77b84b-da55-4336-a478-fa390ebbb5ca", "sighting_of_ref": "indicator--f9840d54-f0c0-496a-a9b5-bb15d63a770d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069bbaaa-2035-4fff-b9a0-e53ecf65aae1", "sighting_of_ref": "indicator--12af439a-6028-47b3-8a2f-997088e7ab12", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8403501c-5c72-4dcc-a21c-5bcce480768d", "sighting_of_ref": "indicator--12af439a-6028-47b3-8a2f-997088e7ab12", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0baab16d-b32c-4311-a043-f93a8624c0f8", "sighting_of_ref": "indicator--954859cb-ef01-467c-8a76-3d6099402bab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b97de8-85d9-4559-a0c9-29a41e94eb6d", "sighting_of_ref": "indicator--36aaf4b2-d49b-4390-ba18-886f6fb64bab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d6c167-87cf-456c-88cc-1ae8d202f93a", "sighting_of_ref": "indicator--5d12526f-ada7-419d-8a83-14302313fa70", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801175f2-0081-4862-abf6-dd9009870387", "sighting_of_ref": "indicator--5d12526f-ada7-419d-8a83-14302313fa70", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--910aaeda-0f34-437f-a2e5-0310f582a7fb", "sighting_of_ref": "indicator--cc7319b0-efd6-4530-a44d-d583448f4c14", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19754031-38a4-433e-988a-83c9d30543ed", "sighting_of_ref": "indicator--cc7319b0-efd6-4530-a44d-d583448f4c14", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cc0463b-9ea8-4bad-b61d-49ce92b10629", "sighting_of_ref": "indicator--63cd37e7-36c7-4be5-b946-56449d4ac46e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0fe66f-e775-40d4-9610-7cba2c1bd908", "sighting_of_ref": "indicator--aaa3736e-b9eb-4aa6-b39d-b1d1f86e73c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0ad8f0-fe57-4252-b8cb-30d820a71684", "sighting_of_ref": "indicator--aaa3736e-b9eb-4aa6-b39d-b1d1f86e73c8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8684d844-38dd-41ae-83bf-72103103378b", "sighting_of_ref": "indicator--6ba2314b-6180-48ad-acbb-5fd2ba4155cd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39a47b2-5d16-4311-a855-14b4a8a7a2df", "sighting_of_ref": "indicator--6ba2314b-6180-48ad-acbb-5fd2ba4155cd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426413f3-e1ca-4222-aba1-316f93e1a84e", "sighting_of_ref": "indicator--a57c169b-1afd-48d9-a6b9-ad9c0d231b28", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e11f119-b6f5-4cac-82ef-f6169e74eb72", "sighting_of_ref": "indicator--a57c169b-1afd-48d9-a6b9-ad9c0d231b28", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca657f02-eb88-401d-b4f2-c889def2813a", "sighting_of_ref": "indicator--3f7a4440-dd85-4d9e-8452-4d452be8e6bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a74a8f-ce18-4c93-992b-e96c5f7216bc", "sighting_of_ref": "indicator--3f7a4440-dd85-4d9e-8452-4d452be8e6bf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecaeaebd-d21c-4e96-8104-67c7a9a50bb5", "sighting_of_ref": "indicator--8df79b29-d66c-4143-b98f-0e6ac2203f53", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04714e02-7ed4-4aaf-8edc-f38fbd6c16fe", "sighting_of_ref": "indicator--8df79b29-d66c-4143-b98f-0e6ac2203f53", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1fd3c0a-fcbc-43f4-a443-1d6aec9f90dc", "sighting_of_ref": "indicator--f9cca84f-6801-44ca-913d-3e4cb343ce98", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3da8c2-d1ba-4d1c-a291-3538045ae9a3", "sighting_of_ref": "indicator--d677281a-fd0d-437d-b639-a17fd1218531", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad5abcc-4156-4805-9799-6e86a2eb9d59", "sighting_of_ref": "indicator--bd3e3b8d-2687-4a9b-9131-bedaf3c0f428", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d2210b-aa1f-4d54-9d34-44705d22dc5b", "sighting_of_ref": "indicator--bd3e3b8d-2687-4a9b-9131-bedaf3c0f428", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de74077-3fd0-459a-a624-ff1e7d82f25b", "sighting_of_ref": "indicator--e605a0af-c19e-424d-a958-05b98a159ee0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065eb1d7-1ae7-4c67-9374-7254d2c76b69", "sighting_of_ref": "indicator--3b3c0444-932b-47fd-9dde-26e23ec9375b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697ac1ba-6620-4fb9-ba22-74312d704c0c", "sighting_of_ref": "indicator--e36c86d1-4a6d-48f8-b67c-69233c79a9a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689df020-6d66-4754-adf2-de47a1459cf7", "sighting_of_ref": "indicator--fe4857e1-2979-48b6-be6b-a2f00c3d4768", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d995dd58-8c9c-4386-ac10-dbd6ec66948f", "sighting_of_ref": "indicator--558e43c7-2cb9-4a93-ad66-6f82e31ca209", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377d3e2e-3a38-4fb2-b003-57976c54373b", "sighting_of_ref": "indicator--d708d334-cf78-4831-b280-b34238704ca1", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b7e7ed-7ab3-4714-a5a0-0e9f1169ef8d", "sighting_of_ref": "indicator--d708d334-cf78-4831-b280-b34238704ca1", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ce68ca-ecca-4d12-b1ae-c6b4e5c7909b", "sighting_of_ref": "indicator--fb0e5a49-8463-4785-9ad3-118d5dd8d722", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cefc43-008f-42e6-a971-65da34d2683f", "sighting_of_ref": "indicator--bcb3fe85-3a93-4d20-b6f7-1282df0891f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec581ad-bbb3-451a-88a0-46959e7a2766", "sighting_of_ref": "indicator--461370d6-977b-4fd1-9bfa-9fd544dc02a1", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a6c2a5-6528-4c13-882e-ed93372632d4", "sighting_of_ref": "indicator--095c0e23-1dab-48e8-8203-3b17815cadbf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3f7f69-ce6e-4753-b0c4-6e48bd5c7dff", "sighting_of_ref": "indicator--6b55be8e-1afc-41df-9f94-24024beb8b6f", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a436a505-024e-48b4-bfeb-c4f9fa6a496b", "sighting_of_ref": "indicator--858742aa-eead-4ad1-b8a1-82fd6b21ede4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4599b50-bc4c-40f9-9d93-cba639ceb23a", "sighting_of_ref": "indicator--fc5819f4-f2e3-4391-9a7a-907f6bc2db59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7d8506-8044-4757-b10d-3829a9ec53af", "sighting_of_ref": "indicator--c65becce-a20b-4a21-8c6b-57e984eb7bcf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99f8820-59ed-4035-9a39-b2fd376cfaac", "sighting_of_ref": "indicator--f7c311ef-2402-46dc-aca1-011a663f3f2b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf9566f-f67b-4b53-8c2e-eb24e219f967", "sighting_of_ref": "indicator--2adfcb63-1d4e-48b4-8b0c-cb732c7d638b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f517bc4-3f14-4be2-9493-d48b78827f31", "sighting_of_ref": "indicator--e4eff06a-8a58-4ae1-8414-5f1d2f7ab72f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b3aa1b4-fbe6-4266-af62-c81c8b53fda6", "sighting_of_ref": "indicator--80c52945-cae0-4f76-b0a7-13ee24ca7264", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505278aa-9291-4d0f-936c-dd222f428e37", "sighting_of_ref": "indicator--80c52945-cae0-4f76-b0a7-13ee24ca7264", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b6007b-047c-4314-a175-0da0a3400b48", "sighting_of_ref": "indicator--c401ae72-1396-405b-9bf8-86820d3cde38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1d8ed8-1634-4959-b258-402428f28166", "sighting_of_ref": "indicator--67523906-aa23-430b-824a-94f55f1cf575", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e3a471-27db-4810-b282-14689c1b225a", "sighting_of_ref": "indicator--a6552243-2ea3-47be-8e0f-27446c24ac03", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc5f2a8-e4fc-4a72-925f-7a34dd7aefdb", "sighting_of_ref": "indicator--ca0d2c2c-3892-4108-abde-79548547a945", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53f73cc-2d9c-452d-affa-b5880fffb3e9", "sighting_of_ref": "indicator--164e8d97-0fc3-4937-8bfa-39689d3f1196", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44057ac-7d24-4bdc-987a-8906808a7788", "sighting_of_ref": "indicator--9b32cf78-4152-4ade-96e0-3c53e78801d2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2af91ae-c7d0-4320-bc52-532b60cfda46", "sighting_of_ref": "indicator--9502a13f-cd91-4ca2-b17a-fd39591e73c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d326862f-a644-4782-8cf7-94a7583891bc", "sighting_of_ref": "indicator--4966a4f2-d097-4d0e-96d4-59e49718bcb4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772fa69b-0804-4335-9146-6a5a00b7a05f", "sighting_of_ref": "indicator--3967022c-0b84-4750-a940-7cc5841dbdee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d2819e-0df0-47a6-9f5e-40387b0466b5", "sighting_of_ref": "indicator--3967022c-0b84-4750-a940-7cc5841dbdee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fa1d6bc-78f5-425a-bbea-f66708a96146", "sighting_of_ref": "indicator--cc677994-9d4d-4895-875c-c404082e0540", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c301f88-eec5-436a-8238-1f92a5df0d45", "sighting_of_ref": "indicator--12d03ef4-9e0e-4b37-a621-7140ae4ff771", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7b6ce5-9520-4404-8af4-65cc50031665", "sighting_of_ref": "indicator--cc18f939-d6d9-4a5e-92bb-2c493ada8bdb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdbe438-4539-4fc8-957d-e850d749caf2", "sighting_of_ref": "indicator--cc18f939-d6d9-4a5e-92bb-2c493ada8bdb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a8ca25-bbfa-4a51-8d25-8aa2cae8ace6", "sighting_of_ref": "indicator--147c09cd-67b3-46a6-87bc-c27b9ace0f98", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f4f107-674d-497f-85df-fe5eba3d8c7c", "sighting_of_ref": "indicator--b9396c88-84f6-4f14-919b-dbb5b2d323e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6a5fc7-4ce0-4cee-9284-e48ea4f60616", "sighting_of_ref": "indicator--b9396c88-84f6-4f14-919b-dbb5b2d323e1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636f9c9c-0227-4c67-89db-7ab581dcfe31", "sighting_of_ref": "indicator--24280a1a-2b3f-4cfd-b5d2-94322650952b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcb9c7a-acdc-4a7a-9097-a76fdcbc13b7", "sighting_of_ref": "indicator--24280a1a-2b3f-4cfd-b5d2-94322650952b", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66411f8c-3829-4d5a-add2-ad70b261a55d", "sighting_of_ref": "indicator--24280a1a-2b3f-4cfd-b5d2-94322650952b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e29a79-34eb-4ee5-9871-c8edd20c6370", "sighting_of_ref": "indicator--24280a1a-2b3f-4cfd-b5d2-94322650952b", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb52217-4644-4463-aed9-a0400b999b57", "sighting_of_ref": "indicator--5690da16-50dd-4409-9803-deed49e5f167", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f9e5958-7325-4591-af9e-d94cce0b638c", "sighting_of_ref": "indicator--5690da16-50dd-4409-9803-deed49e5f167", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796a192a-ae0f-4dbf-92ac-15dbf01da509", "sighting_of_ref": "indicator--746bd605-912e-4937-9c6d-bea1c4e68165", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d05670-34ef-486e-a0c2-87d5102aa1ae", "sighting_of_ref": "indicator--746bd605-912e-4937-9c6d-bea1c4e68165", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177fb042-6aa6-4ebb-a835-cf102edc3e8c", "sighting_of_ref": "indicator--6f9bdd35-6037-4296-b1ac-379802785372", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ea1adf-1c73-4620-b56c-ae77b86ea58d", "sighting_of_ref": "indicator--76a6dc32-948e-4449-a877-1975a65a8ae6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c283ad-7d0a-4b75-90dc-7f04b49b6f16", "sighting_of_ref": "indicator--76a6dc32-948e-4449-a877-1975a65a8ae6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1482e99c-51b9-4759-af12-0da64b142598", "sighting_of_ref": "indicator--8bd62878-61b4-4503-bc91-bdec4299e1c2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead40b5a-67f8-4a01-a5d1-caf2b7c56aa2", "sighting_of_ref": "indicator--22fda544-adc9-47e2-9529-2630ae4a4be5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0d8805-9912-4e5d-a7f8-141d75840abb", "sighting_of_ref": "indicator--46abafd7-4961-4048-97d3-cf5af8f786ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6860648a-accd-43e7-9a46-7220c011063f", "sighting_of_ref": "indicator--f57d185a-47c2-4e3e-a417-97e8b5c32181", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb71573-4be0-45b9-9ab7-880ab49bc504", "sighting_of_ref": "indicator--f57d185a-47c2-4e3e-a417-97e8b5c32181", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2caf3e0-21cc-4b1d-aa13-cf3cb72ac5ec", "sighting_of_ref": "indicator--522188b3-569b-42ca-907d-4e8f2ecf9af5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bea54aa-37dc-4a48-ba3f-419fb91cd2d5", "sighting_of_ref": "indicator--522188b3-569b-42ca-907d-4e8f2ecf9af5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bce5718-e4de-457a-8e71-f9b02237be8e", "sighting_of_ref": "indicator--6e7ff164-1f9d-43b6-9683-52064faf7d3e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa0ce3c-5812-4243-9fe3-9f11875d45b3", "sighting_of_ref": "indicator--6e7ff164-1f9d-43b6-9683-52064faf7d3e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67db3bae-2345-4268-b1c0-3522fcc374ca", "sighting_of_ref": "indicator--988023e7-a9cf-45fd-b0ec-9055880146db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f9c186-138c-42bc-884c-6c7d477d3b41", "sighting_of_ref": "indicator--988023e7-a9cf-45fd-b0ec-9055880146db", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37ec24be-501a-4db2-af15-d4ade62c9b4e", "sighting_of_ref": "indicator--fc9cd0c2-4e41-4fa0-a5d0-d6b68dbc7d71", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb6bbd71-8747-4f0b-8a00-47d8a8c140ed", "sighting_of_ref": "indicator--fc9cd0c2-4e41-4fa0-a5d0-d6b68dbc7d71", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2fedb5-889c-4bbd-95c3-18f8107cb928", "sighting_of_ref": "indicator--09622e42-eadf-4392-9534-516c3b1ab26b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5639a314-2e05-4534-b10f-6d3ce8bc02f0", "sighting_of_ref": "indicator--9fc227ba-f10f-44fa-b239-3fe5c170565a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be470d4-b4ff-4383-b172-d070033d7f75", "sighting_of_ref": "indicator--02acba1a-bf25-4cb1-b064-1cdd5f54564a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7189cf0-ee78-49ff-9ecb-f35759b15edc", "sighting_of_ref": "indicator--02acba1a-bf25-4cb1-b064-1cdd5f54564a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bab0224-5de5-49ea-adbd-00e5de4107ff", "sighting_of_ref": "indicator--2f6a9971-408a-4341-acc1-553c6c16b7f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68df104-b168-40c8-a140-9121715cc91f", "sighting_of_ref": "indicator--2f6a9971-408a-4341-acc1-553c6c16b7f8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7378f0aa-d379-4b79-b778-9b064bf22ce9", "sighting_of_ref": "indicator--7b262161-97a2-40d7-a783-10936941bcda", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ecb040-3975-47aa-97b1-f905b2ef1204", "sighting_of_ref": "indicator--7b262161-97a2-40d7-a783-10936941bcda", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--144825e4-247e-40c8-95fe-dc5e889f582b", "sighting_of_ref": "indicator--57b634a6-82c4-4593-bbf0-e70c543be1e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862f71d2-b1a3-4d0d-af15-5d48028b7202", "sighting_of_ref": "indicator--a5d1b6b4-8bc2-49b2-89bb-17b9a70adf55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b06fe131-a6ba-4438-a005-7f632c576888", "sighting_of_ref": "indicator--4a5149ab-629d-4a0e-9c24-9b58def1f8c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5144278c-df6f-4139-9e34-4cef4442650c", "sighting_of_ref": "indicator--4a5149ab-629d-4a0e-9c24-9b58def1f8c6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f987a557-683c-4f8c-ba9e-0499df5d1811", "sighting_of_ref": "indicator--c2c3bcb4-264d-4743-b3bf-01172bac9454", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edec0d9-1e8d-4383-b214-59c885369600", "sighting_of_ref": "indicator--c2c3bcb4-264d-4743-b3bf-01172bac9454", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557e02bd-d100-43d7-9a8a-3a4df2c50a3b", "sighting_of_ref": "indicator--f7850405-061e-493f-bb7a-b90f205366ce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3fa141-9509-40b3-9b1d-df4b55623274", "sighting_of_ref": "indicator--52b48ffd-8f4b-485e-aab0-d5d500687d35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2003b62-17b7-4991-84af-bd8a7b8fb592", "sighting_of_ref": "indicator--398cc06a-8aaa-4fb3-990e-5ba044c5280b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74de691a-2072-413d-8d03-42e0b6139151", "sighting_of_ref": "indicator--33820302-0f62-4028-90d4-6749f101977d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e9b6a1-0663-47aa-85eb-213cc3e6a1a1", "sighting_of_ref": "indicator--33820302-0f62-4028-90d4-6749f101977d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f8c3aa-6114-41e4-81e9-7c51d88ee6bc", "sighting_of_ref": "indicator--c390eb1d-0c95-4160-a6d2-6151017b9096", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d491e4-ad1c-4125-be35-1c7c4ec8ee56", "sighting_of_ref": "indicator--c390eb1d-0c95-4160-a6d2-6151017b9096", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80310352-8c7b-4f46-8292-582451c4cb07", "sighting_of_ref": "indicator--5ac15373-8711-497e-94c6-cae482d9bec6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8019292e-04e6-4054-82eb-ec4c2ed844bf", "sighting_of_ref": "indicator--5ac15373-8711-497e-94c6-cae482d9bec6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85162158-e77a-45e9-bcfc-c3c78cc5e4b8", "sighting_of_ref": "indicator--73ac8ea7-3821-4149-bacf-39cf3cf100fe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c8342f-e182-448c-991b-12e224cf2452", "sighting_of_ref": "indicator--abc2fc52-051d-428b-8ff5-3bdffefa2c1a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7635d47d-69f4-46b7-95b3-3dcff722fb92", "sighting_of_ref": "indicator--abc2fc52-051d-428b-8ff5-3bdffefa2c1a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5966f88d-b790-49c7-b761-af63d2cbf3fa", "sighting_of_ref": "indicator--7822e26c-4c9c-4ad0-937a-980308c7b722", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--728130d6-4692-4ce2-9425-b83709e480ee", "sighting_of_ref": "indicator--65806068-ea91-4308-9090-05056957eb15", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da5256c-59b4-426c-9a57-01058fe7e07e", "sighting_of_ref": "indicator--39f2a776-94e5-4124-aefb-b3c21aefcec0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae28efe4-83bc-4136-959c-c76917c217c7", "sighting_of_ref": "indicator--39f2a776-94e5-4124-aefb-b3c21aefcec0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc5b692-4d8c-424d-ad7f-c6b7a7ca86f8", "sighting_of_ref": "indicator--91759690-a6bd-4726-98c2-2e86812e6272", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749ccde6-ed41-4726-8123-4ae5ad87b7d4", "sighting_of_ref": "indicator--e25c73d3-ebbe-41df-bd7d-e655287e21b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b884ffa-29d7-4520-9171-65676642791d", "sighting_of_ref": "indicator--e25c73d3-ebbe-41df-bd7d-e655287e21b2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad36336d-1200-4d4c-b2de-ed8ca43ffd28", "sighting_of_ref": "indicator--3288978d-57fe-4f3a-b282-78a4287827dc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec60fa59-716b-473b-b1a3-7ec7bd537268", "sighting_of_ref": "indicator--3288978d-57fe-4f3a-b282-78a4287827dc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd16131-802e-4372-8e5c-67de5448f957", "sighting_of_ref": "indicator--a31ae2ba-3dfc-4761-91a1-ec20fc0ab077", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dbc5d85-5e8a-4317-a555-f85b6052074d", "sighting_of_ref": "indicator--1b6aea87-e326-41fa-9a42-189c3b027ebe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3671383b-40bb-41f3-ab8e-f688da4606ca", "sighting_of_ref": "indicator--1f1bc013-a74c-4ad7-b06c-7fa915089d9f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de8c1859-1ebe-4e5e-bf04-2d50b5710829", "sighting_of_ref": "indicator--f92b306f-a8c9-4d85-9ace-bc4341f42b7c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a883cf64-8eae-4301-a1d7-5c61628253d9", "sighting_of_ref": "indicator--5a40766c-9c6d-475c-ac20-7eab9158613a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16450ea8-70c9-4db7-96a2-9e687c4877f1", "sighting_of_ref": "indicator--61f085d3-58b6-4ec6-9ff9-db10005ca47d", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f588a2-cab6-48d1-b7ce-9b1766c6a135", "sighting_of_ref": "indicator--cd985ad6-8eba-401d-a797-19247fda48df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce0a2a1c-c244-4c02-a863-9b13a6e31b2c", "sighting_of_ref": "indicator--b949aa7b-c0f3-46bb-bb1c-e90827be5be7", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--691363c6-18cd-4da0-9568-9b3f6d886010", "sighting_of_ref": "indicator--734e3cea-e57e-4ef2-825b-fb96b6971997", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dbe311-9df4-49c1-9e42-e7d8c1fb4d9f", "sighting_of_ref": "indicator--af26c8cd-6213-40f2-a687-317ce57abbb5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0821450d-bfef-439f-b8b8-6f2401dc62f0", "sighting_of_ref": "indicator--e6b8f7b2-b4d5-48b4-adca-c72170777182", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80afda4-40f7-4586-b56a-578143e6cbfb", "sighting_of_ref": "indicator--81d24169-8d46-47c3-aa81-0c0adba6acfb", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4406296-acd9-43fe-97fe-93d7f1fc606e", "sighting_of_ref": "indicator--f900ae26-a715-4eda-9d6f-d44b9e574286", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa635541-e243-4e7a-9e91-931d13680d72", "sighting_of_ref": "indicator--fb95b22c-2272-483a-9f49-61ede0b17f61", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45625cbc-52ef-4809-bc6f-dd5f04f1e3e0", "sighting_of_ref": "indicator--75bafffd-e723-4ea3-84a7-11dda02552ca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cbf658-c6be-49a4-8af2-aae900f78ca7", "sighting_of_ref": "indicator--d794ce5c-ed76-451d-a6cc-39e795c6fa75", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca496258-7e20-473b-9584-2e5a2206b49a", "sighting_of_ref": "indicator--e0a33cf6-e60b-40ee-a1fc-4813b8287c01", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1465c489-6376-4975-9485-d843d4614e0b", "sighting_of_ref": "indicator--e0a33cf6-e60b-40ee-a1fc-4813b8287c01", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bfa17a-c75a-4430-8245-05c21a1a1ee9", "sighting_of_ref": "indicator--40b5705c-4b01-4436-8732-0e6d7ccb21cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f276c150-1061-4487-84f9-4adb2915eaa1", "sighting_of_ref": "indicator--40b5705c-4b01-4436-8732-0e6d7ccb21cc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca824407-5b05-4f60-a167-c4323c72512a", "sighting_of_ref": "indicator--4d297ce4-3996-494a-b8ae-add060848f53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa15ab1d-3ce7-4326-b790-24e80b8e9a6a", "sighting_of_ref": "indicator--5ca77d9d-2a0b-49bb-a047-e0a07084cfc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023b62f6-0522-4041-888e-4e112a2a1a38", "sighting_of_ref": "indicator--ea541e91-9ea2-4c36-996a-31f03c50e636", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627d2a47-d768-494f-993f-27c3074fbf42", "sighting_of_ref": "indicator--6b550ce0-8685-435d-9b5a-355dab988b0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed64705-70e8-4d87-a09c-6cf6f9fa2ac4", "sighting_of_ref": "indicator--3846c9c2-4b8c-47d7-839d-e82869009936", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--284338f0-be53-4988-8518-113a17b64ee5", "sighting_of_ref": "indicator--74f189d9-db81-4a57-81fc-ea77ff1a416c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2da65ae-1306-4522-a1d7-2bd9b927b367", "sighting_of_ref": "indicator--74f189d9-db81-4a57-81fc-ea77ff1a416c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f7d13d-f9c6-4482-86b4-7471e96e21df", "sighting_of_ref": "indicator--2417ec80-bde7-49f9-92bb-49d1ccea3eca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be19a34-4d53-4f5e-9254-9492dc39252c", "sighting_of_ref": "indicator--79bbe620-089e-4960-8dad-c30fb54a8c6e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eeec21e-a81c-4dd0-99d8-acb0af183de9", "sighting_of_ref": "indicator--e1a73127-d42d-4d79-beb4-2bde460f4e11", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da2ede30-828d-4c30-9b6d-6de13b35592d", "sighting_of_ref": "indicator--b34f84f0-607d-4ab0-bdd9-3c5d5e416a81", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911c8c6d-1bf0-44e4-b916-97fd552b1d01", "sighting_of_ref": "indicator--21c39d68-e1ed-46b3-9782-23dbf737cd89", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5fe4cc-4452-4e87-8f2d-2b6c7f2cf623", "sighting_of_ref": "indicator--3030a186-bf9f-4d4b-bd97-df7f50e9fc9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a0f437-bb23-4dd0-96b0-c816bfeea9db", "sighting_of_ref": "indicator--6a2cb181-6106-40e1-8a1c-0229b83433eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317876e5-f305-44ff-85b2-29eb04c47c32", "sighting_of_ref": "indicator--cbcfc18d-0581-4097-8ead-52a8981dec96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5dee5d3-ef60-4945-9dc8-724f013dcafa", "sighting_of_ref": "indicator--cbcfc18d-0581-4097-8ead-52a8981dec96", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfee2afc-e7d4-4b8e-be1a-9ef979e84316", "sighting_of_ref": "indicator--6312003d-3ef4-49cd-bf70-47c60fb4e0bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e943cc0-dd6e-4a69-b4ea-d947e00c8500", "sighting_of_ref": "indicator--57e2db23-9b90-4262-8ca2-e70d10dea0c4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a452eeaf-7adb-4b04-93b2-2e8555439430", "sighting_of_ref": "indicator--3b8de8f8-897c-4419-84ad-454af4d90819", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f2d0cf-6360-4cf2-9dc3-16e34d1a3129", "sighting_of_ref": "indicator--f7139352-4119-45fe-ae5f-92bd62ea7ad5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa418ed-f406-455a-aa4f-4fc4defaeb21", "sighting_of_ref": "indicator--859e9698-1318-4d85-812b-19369f0a61b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a666f62a-34a1-4bf1-93d0-216d554ce9fa", "sighting_of_ref": "indicator--3c95455c-bd92-45d8-baaa-5df1c6e51e11", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69148113-0504-4bd1-9207-9178cb59b1f0", "sighting_of_ref": "indicator--c7457a67-6cec-4839-9727-7dfb3d80e4a4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--166dfe5a-fe8d-4b8a-8656-37fdd73431de", "sighting_of_ref": "indicator--c7457a67-6cec-4839-9727-7dfb3d80e4a4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b546801-8b84-488c-804b-58860699f909", "sighting_of_ref": "indicator--b5731829-4284-476a-8cc9-c440411ec0fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0876b1cb-f299-4916-ae62-420683633b26", "sighting_of_ref": "indicator--b5731829-4284-476a-8cc9-c440411ec0fb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907046b3-ed13-487b-a010-a2b1b9cc7c11", "sighting_of_ref": "indicator--3f83c742-aa91-417a-a13b-139ef44acc64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9d808f-d61d-457e-aeb7-00486f228930", "sighting_of_ref": "indicator--7a712815-5627-4e14-8e9f-339a17b02031", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45225b0a-ae64-4629-9f1c-e10031e6ddeb", "sighting_of_ref": "indicator--7a712815-5627-4e14-8e9f-339a17b02031", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54b5bff-fd73-4a4f-ac0c-ea3dda67eede", "sighting_of_ref": "indicator--aad5564e-78ab-4798-be4a-f3dcc99697d6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6617ccf-01e0-4644-808f-6584e1260391", "sighting_of_ref": "indicator--aad5564e-78ab-4798-be4a-f3dcc99697d6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455c04a3-82cd-4b41-a77d-6bae98d8809c", "sighting_of_ref": "indicator--98b0ca82-1ffa-49db-9f79-93c5b74a0fe7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06f10da-ff7e-438e-8cce-e507b5ad105f", "sighting_of_ref": "indicator--4c1d6fa3-c1d6-4dab-93c0-d2a429025812", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d563fa2-c8ec-4e4c-84fb-a69692f19904", "sighting_of_ref": "indicator--6edb649e-ed0e-47e9-acd3-6bec8c68b7fa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f76222-65ac-468c-b6e6-7d73f57fe55c", "sighting_of_ref": "indicator--6edb649e-ed0e-47e9-acd3-6bec8c68b7fa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d0c6ac-89be-4c96-b30c-6d2397d8ce5b", "sighting_of_ref": "indicator--a16c05e3-1428-4c1f-b198-de0ec499c1ad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f63645-8772-4122-86df-a58a8ec5a0e7", "sighting_of_ref": "indicator--806728ec-8153-4f55-8fee-45d7fff3e757", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f1787b-d819-4fb8-afdf-d480280e97e8", "sighting_of_ref": "indicator--806728ec-8153-4f55-8fee-45d7fff3e757", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6a05d1-6ac8-47a3-8e22-7dd5f1ac6857", "sighting_of_ref": "indicator--1c96694f-400d-408b-a7ba-6d26d0400cac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b9931d-cb1c-426e-97be-cbe28a9963df", "sighting_of_ref": "indicator--c3338b28-3879-42f8-a7c1-02664acd06c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b759fb3-e44a-4acf-a866-140bcf4468ea", "sighting_of_ref": "indicator--c3338b28-3879-42f8-a7c1-02664acd06c0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab27d49-ee1a-42d5-9841-152ae47c4df8", "sighting_of_ref": "indicator--79ded827-baaa-4d52-89b4-503e269c0cad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8247b52d-143e-41c4-9a06-2dc83c5d1587", "sighting_of_ref": "indicator--28073e28-a342-4e3d-84f9-3c01a21aba97", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62413aa6-6147-4216-8a1d-e46d6be04dea", "sighting_of_ref": "indicator--32cc72e4-1fce-42fc-a79a-9a297dfa3d41", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f43c35f8-58cf-46ce-8535-a1865c303935", "sighting_of_ref": "indicator--b619a578-8331-49f3-a06b-e3d61cc43e9b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775b013a-d593-4cb3-b3e5-2f39413594e1", "sighting_of_ref": "indicator--791ffaa3-4aab-4a89-bb7a-86dc51d1aac6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bece15-d1b7-499d-8750-be3221385bd9", "sighting_of_ref": "indicator--99499c14-d299-40dd-9368-b06504f70828", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489eb88a-91c8-4a38-8e5d-0a088cea90c0", "sighting_of_ref": "indicator--99499c14-d299-40dd-9368-b06504f70828", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68da968c-8006-4e67-b240-1b0257fbe45b", "sighting_of_ref": "indicator--0560524e-404b-4ac5-9731-5e130bca7a9a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a7b649-e2cb-4a34-a086-ff229460c43e", "sighting_of_ref": "indicator--0560524e-404b-4ac5-9731-5e130bca7a9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d0ddd2b-6021-4e71-a563-e65eec6d197c", "sighting_of_ref": "indicator--353ea761-2e14-4c3f-8736-e314b025096a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3499fac3-3745-4f71-9279-664b07cb26fc", "sighting_of_ref": "indicator--eb959d8d-a275-4d30-a641-518e3459f7b9", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f6d03c-6f65-451e-8189-8c3470379353", "sighting_of_ref": "indicator--5a9c54e0-d675-408d-bf54-c308259feab3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b99d54-077f-4787-9f03-1b589dfd4473", "sighting_of_ref": "indicator--762dc4ed-ed0b-4225-bb63-34ebf5a25c46", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6aaefd4-9bcc-420a-8c1f-81b20da16d42", "sighting_of_ref": "indicator--7c4afb77-41b3-422f-942b-df096f1f0463", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3908433-ce33-42c0-bb49-fcc3ffc0c394", "sighting_of_ref": "indicator--e8785864-ca56-4fde-8972-a3718ffd691d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78f05be-7c49-4241-a6c4-a192103968db", "sighting_of_ref": "indicator--603de377-cfb8-44ea-82af-53c62d8f9794", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a0aae15-44f9-44c7-9da5-0631fa1c19ee", "sighting_of_ref": "indicator--ed0c6585-a0cc-4584-b17e-8ba59214a067", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0291e116-e76b-418f-90ee-615a8e678c8d", "sighting_of_ref": "indicator--4a43f70d-7517-4e37-bf0a-1d0e5331aa06", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc6bf72-5b57-4150-8166-5647a4e2ec0a", "sighting_of_ref": "indicator--8be6c396-f93d-40f8-83eb-ca9ebc2c109b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d190e9-176f-4b5b-b144-e9659f9c0374", "sighting_of_ref": "indicator--dec6eac6-c862-4441-8f2c-b76afd5e56ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c83e51-e500-42d1-80a3-917e974c0b16", "sighting_of_ref": "indicator--82e98553-5c55-4049-8d0d-3b1fd4e971ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2ce7e18-a585-46f4-8211-3343420f845e", "sighting_of_ref": "indicator--69e40a9a-12c5-49e1-abde-1f42d3cab1cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504f69fc-8592-40cb-a529-3ac8bedb9ae7", "sighting_of_ref": "indicator--bc066288-7624-4cbb-8342-79e6a02aaf40", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599998a9-2242-4499-9441-8f065e5844dd", "sighting_of_ref": "indicator--10b80342-3e30-4489-a7d0-89f23ae2d232", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3d7e83-1474-4c7f-b405-4600d46de7be", "sighting_of_ref": "indicator--2e94a5de-e77d-4e4f-b9be-dcede54110cc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526e9093-e21c-442e-8e0c-7df6e7a90c56", "sighting_of_ref": "indicator--5db6e010-5723-4c56-99b9-2c98a6d7c312", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90251225-b0c8-44c0-b021-e2e29e2b2d03", "sighting_of_ref": "indicator--5db6e010-5723-4c56-99b9-2c98a6d7c312", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c001509b-d127-4cb3-b3fa-966aa63bcf4b", "sighting_of_ref": "indicator--4697f11c-23cf-4dd9-b6d9-c490b75dd7ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8775a083-f79a-4129-86cc-ea5d11cc48bf", "sighting_of_ref": "indicator--a35bd545-2731-48b1-a436-ef311babc47e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f5312ca-e233-4cb8-a6df-26de88f1d9f8", "sighting_of_ref": "indicator--21d753ea-ac30-4a17-9423-d222bb75e617", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45aca882-a331-4813-8d1a-2da3f3a6d69d", "sighting_of_ref": "indicator--066f4129-7bb5-40d5-a534-26c31559e83e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e3a3f4-f097-498d-af8b-e4bb89b5de47", "sighting_of_ref": "indicator--e94f8a23-243e-4dfd-ae27-dd17d79dc073", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81532379-0d3b-4989-b95a-d2568b09d203", "sighting_of_ref": "indicator--3ed63aa4-1299-4285-8955-5e1f2d22beec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e18221b-2dff-4ea3-b79c-3f2461ec2a8b", "sighting_of_ref": "indicator--74ee2bcd-50f2-445b-b121-c4675a7e616a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eea353b-b8d5-4f14-ada1-322b4cc8ac4c", "sighting_of_ref": "indicator--a54f0ab0-ba95-4b48-bbd1-39eb1578cbbe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f178d0-38d7-4b88-a75e-ca2c1e9b6970", "sighting_of_ref": "indicator--19f1db64-20b1-4821-bf62-eaab3536f09f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a38ff22d-fa20-49a3-aee6-20c54d3bd86b", "sighting_of_ref": "indicator--9ed6bcd2-1bc3-4813-9d6f-19111bc04421", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f3d1c7-2a9d-4f4a-a5f8-759573658696", "sighting_of_ref": "indicator--2e328aac-17dc-42ba-bbc2-2754943d5b0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259a5f23-d70b-4d92-aa10-cbb3c67094af", "sighting_of_ref": "indicator--e709031c-5680-4876-88a6-521055655db9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c47a3a6-facb-4b11-a33e-ef1eb5fc8323", "sighting_of_ref": "indicator--a9568a57-0720-450b-b99f-8145024783ce", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1c6b74c-a714-4d05-808f-9e9f2a93cbdc", "sighting_of_ref": "indicator--a9568a57-0720-450b-b99f-8145024783ce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a403a5d4-f2ff-4e42-b4d2-5c1dea16a68b", "sighting_of_ref": "indicator--176fd4e3-49d3-474f-90a0-0fe65a7ad215", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4dc57d3-c5c7-40ab-b36c-f22e7329debe", "sighting_of_ref": "indicator--e3b9a4aa-768c-4d7a-8370-e0a931e0713c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde3fd1f-ef8a-472d-bea3-8a9034ec016d", "sighting_of_ref": "indicator--783b62d7-8632-4d97-9551-15786249767f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd112ae2-6eca-42dc-9879-baa561135efa", "sighting_of_ref": "indicator--e43bcdbb-4a6d-4796-aca3-dfc81c5bc57c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d265b1a-a0c1-43e9-9714-79925535ac78", "sighting_of_ref": "indicator--e3309f65-b4f8-46ad-a3cd-06f3329e17c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53230b89-6095-4a5d-9d61-a6ed9fbc8a7a", "sighting_of_ref": "indicator--0deb4b63-8a3b-42e5-958a-69114f3f039f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26190fe-8d04-43eb-837c-e9d3da6c5b0e", "sighting_of_ref": "indicator--3706b33e-97b9-42b7-9cc3-e9db07ffbbe2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e3a0ed4-c401-4233-b400-232fd762046c", "sighting_of_ref": "indicator--afa1c57d-ba9d-4738-ab76-760b3647f71c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2e1a68-4b80-4d86-af59-b5ad5dc88a98", "sighting_of_ref": "indicator--8cd7fef1-3344-4f8e-a9e8-2de32ab3a0dd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c823b7cf-e874-42bd-8eae-5a79d367fe55", "sighting_of_ref": "indicator--4ed6b04f-b050-4641-869e-0b1fdc65114a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d677d7-0134-4b45-ac60-409e73c9eeba", "sighting_of_ref": "indicator--c2556504-d6a6-4852-86f6-b7e6f5df1690", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095d1112-9dbf-41d6-b65b-1b3c2fcec049", "sighting_of_ref": "indicator--edd7e5c4-b84f-4a8b-9449-8af43f64b0a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393dadbe-26fc-44a6-93bb-989ddf79dcae", "sighting_of_ref": "indicator--972340be-fcc4-49b4-9d19-ca49bbed5a2c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a091100b-b9f1-4abd-b7b4-2bdfc9058393", "sighting_of_ref": "indicator--318c9f75-26dc-44e4-a353-973a2954ba21", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3033eefa-048c-4ce2-8bdb-89c044c1a48f", "sighting_of_ref": "indicator--eb144ec1-6c83-45a9-ad02-861b00475737", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d84fc6a-c7cd-4f90-9805-0ba62e511767", "sighting_of_ref": "indicator--e83798aa-3c36-421e-b472-51319a95c73f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43e4d682-dfd2-4265-9c83-456cfef53e10", "sighting_of_ref": "indicator--888e34a0-c46d-4a4e-9e7b-9116829ef94c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53803092-d0e1-417a-b0f3-4316e5dcac28", "sighting_of_ref": "indicator--84f99eee-91ab-46a8-86c8-79274c11ca65", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069124e5-443c-491c-95ff-824cc919a59f", "sighting_of_ref": "indicator--8bce9521-1451-4ed3-a880-9bb4b72df3cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f83589b-4e5f-48f3-a387-60dfb8dadcb9", "sighting_of_ref": "indicator--ee533808-7020-4a00-a943-0a36012ddbe9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c415ff0-d26a-4cae-8767-b6bea0bbf080", "sighting_of_ref": "indicator--6c9ce613-9ca3-4a1c-8683-284f03beb93b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef79f6f-de32-469b-8831-e7bf249e38fe", "sighting_of_ref": "indicator--d207a953-8760-481d-9ebc-60ddec67936d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f42b24-cee5-4728-840b-5535c6486b13", "sighting_of_ref": "indicator--02e8798f-b5b8-4022-9df8-2133cc3104ba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8f91a1-c1ce-46bc-8c53-5940b8674ea7", "sighting_of_ref": "indicator--4672cfc6-76fe-4352-b98b-82daff483ca3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5e64ae-3399-412d-8937-622c279de857", "sighting_of_ref": "indicator--6b5c680d-cc08-4353-8904-247273ded80e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9928b221-0845-4693-b68e-674e6582bf18", "sighting_of_ref": "indicator--b79c0bc8-0cab-4c1e-9796-cfa5ff127061", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b254c2c5-9aa1-476a-a5de-e96169793db2", "sighting_of_ref": "indicator--bda75ea0-4b1f-40bf-a628-541fbbc6fb42", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32a1883-f115-43ed-b65d-5d5a3957d81d", "sighting_of_ref": "indicator--b39aa419-8277-4180-b0e1-5fa906a5ddf4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a77933-f002-42ee-a0c9-bb0d7834936f", "sighting_of_ref": "indicator--3ba7b49e-5774-4861-92fc-ad3d273969df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c54f62e9-b663-4a86-ba9a-a2e809d8f45c", "sighting_of_ref": "indicator--ef5a035c-68f0-4ea5-888b-28dc95d7e09c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f8b55d-7005-4136-91bf-a8a1099c2e36", "sighting_of_ref": "indicator--bb232794-a265-4daf-9db8-f33b5ac18223", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68726fa6-1aa2-419a-a81e-37a2befcbe7d", "sighting_of_ref": "indicator--21eb6ac8-acf7-4142-979d-f4568d8c3d27", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a6fb1b-893d-4ba1-b499-22570deb53db", "sighting_of_ref": "indicator--aef0dc14-7d15-4642-8428-02a8bc0b283c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c7aa22-5951-46db-a433-6058cfd0466d", "sighting_of_ref": "indicator--aef0dc14-7d15-4642-8428-02a8bc0b283c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c38f7ab-9c8c-491a-835b-35625fccec1f", "sighting_of_ref": "indicator--5eeb5b18-b144-49a6-bfbd-eb01223fb237", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51ccb1d-55b1-417b-8187-3a3caecebb9c", "sighting_of_ref": "indicator--e8c436ce-9a2f-425a-9899-84556c38200b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a25a1ca-b3ec-4a69-9e6a-9de20be3f57d", "sighting_of_ref": "indicator--e8c436ce-9a2f-425a-9899-84556c38200b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65ba238-3b39-4e4b-8d4c-e7522ebce5bb", "sighting_of_ref": "indicator--e8b50b1d-350a-4ad8-8fae-5f9e5e6984b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da252fe-d19c-4422-a4c3-77499dd719e0", "sighting_of_ref": "indicator--b61eca21-6a36-4219-9f42-8bf3fe0d7856", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fc8d519-73f0-401d-a4bd-e6ff68a45cb6", "sighting_of_ref": "indicator--bbda5efe-44c0-4a5d-8600-542ac76f4f5f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c22d14-c5ca-4f4e-b520-13139a3a0728", "sighting_of_ref": "indicator--b70c99f5-0633-4ecc-8ad8-936c0f376e2f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aeb984f-dff5-44f3-b070-3d59c8dc6bba", "sighting_of_ref": "indicator--66074d4f-3b80-4f0b-8bd7-93f5c297b25f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dd33f7-a4bb-4f74-89d9-f0aeedf5423d", "sighting_of_ref": "indicator--86343abc-05df-4df1-b392-c904558f9584", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad986b23-1f02-4acb-9275-1f6812709277", "sighting_of_ref": "indicator--b1b4529f-d925-4b2c-8185-bece846218f6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b08512-3a5d-48f8-8619-1c8f963c144a", "sighting_of_ref": "indicator--3f6349b9-bb2d-4eb9-888a-62c739169754", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef62314-13f7-4f9e-9dec-cabef206b84e", "sighting_of_ref": "indicator--c787a724-9aa1-446e-b926-9e9064acb091", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603d8412-f113-4280-9365-a5a48e7ee406", "sighting_of_ref": "indicator--6ad84b31-ce83-4d29-b3dc-900acb80d107", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53d5d64-64eb-4ac0-94f5-fba6aac7ac50", "sighting_of_ref": "indicator--cd8b0668-6ed8-45a3-b3ff-b347b6720f47", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25af9286-19ef-438b-85e2-c09a39520f12", "sighting_of_ref": "indicator--cd8b0668-6ed8-45a3-b3ff-b347b6720f47", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac33262b-c970-44bd-a599-43f4b1df2002", "sighting_of_ref": "indicator--2d028f3e-a5a0-4291-8b5d-3028a185d65f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c700421-0bf2-42e3-9cfc-5b4711bb2549", "sighting_of_ref": "indicator--2d028f3e-a5a0-4291-8b5d-3028a185d65f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03404fb4-edad-42ac-8b09-96d183e06e71", "sighting_of_ref": "indicator--d5832811-a7c7-47ef-82ca-8b2b6b868b6e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb352f0-195f-44d1-b3d2-6b23e68997da", "sighting_of_ref": "indicator--d5832811-a7c7-47ef-82ca-8b2b6b868b6e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0832949-e452-420a-813c-e57a6cff9e68", "sighting_of_ref": "indicator--1397b7fd-b6e8-4bc9-a060-d627fbc42240", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928f2a37-ebd3-41e5-b1da-9df46b36be0a", "sighting_of_ref": "indicator--a84c2919-b444-47db-8736-4dd8c525e0fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7040f68-424a-4519-9c55-e0b43dedeca0", "sighting_of_ref": "indicator--a84c2919-b444-47db-8736-4dd8c525e0fb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ecc6039-a3c0-476b-a503-8622e0e74a74", "sighting_of_ref": "indicator--9b6df254-b8a6-445a-b59a-fb4712cc0335", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bd8273-5941-4d12-b4a7-ca5188e56617", "sighting_of_ref": "indicator--d5f8991a-fdf6-49c3-b4c9-6be0a7f9cab6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af998132-61a5-49a6-8e77-5180b7a93e23", "sighting_of_ref": "indicator--ac42a1ef-de4b-44ad-ae85-a135c7556895", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c85423-5413-4f2a-a730-5bfbc2a9a7ef", "sighting_of_ref": "indicator--3da15f10-b201-4757-adb6-46e2718b58b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f18a4ad-9aab-4fd6-99e1-3bdfe17f409b", "sighting_of_ref": "indicator--faddcf96-0bc0-43d6-930f-faaa24b2244a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab18a9f-f25d-40e3-9ab2-0f0b02d13c59", "sighting_of_ref": "indicator--6b5118a4-1893-4cb7-9fa3-1bececa1da9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5e2932-ad29-4e0e-a19d-37af5e264ba5", "sighting_of_ref": "indicator--6b5118a4-1893-4cb7-9fa3-1bececa1da9e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94417280-8be2-49d4-89aa-d7430a41b4db", "sighting_of_ref": "indicator--5f5fee21-8976-4f56-9a96-bbdc38c62887", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d272a1b-0bb1-4d5d-a242-9c9d04a1d5cd", "sighting_of_ref": "indicator--96e2fd1d-487b-4319-b835-e1ac38e0ae99", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc13c6b-2618-471b-8857-9669766ffc1e", "sighting_of_ref": "indicator--00f7e602-ca45-4160-a47e-4f7e35cd877b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbe8f13-0500-456c-a383-896dd5470ea3", "sighting_of_ref": "indicator--674bffff-a16c-4ebf-9a41-31977b7b737f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950ba463-bdbc-447c-aae2-e1dd5d532a0a", "sighting_of_ref": "indicator--ded47a16-ae19-46c1-8a43-9dc041d88e77", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725ce3f1-98ec-440a-b07a-29b66ce0befd", "sighting_of_ref": "indicator--598d9fc9-88bd-4b87-ae6a-881a7bc4454a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36fd485-fe5d-4be5-a517-487d9af140c7", "sighting_of_ref": "indicator--3ba5e5d8-9138-4c6e-9595-173a09e6c183", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bca9ac-75e1-4934-923b-fbbbdf942acc", "sighting_of_ref": "indicator--b712a061-674a-45d8-b8f8-e9cd5923bcb8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f55f9a-a4fc-45c9-9a9a-55f202de9103", "sighting_of_ref": "indicator--01a6a78e-aad1-454f-bd87-79e9277c3906", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c411a0ca-f300-444c-9d1f-2617a85d02be", "sighting_of_ref": "indicator--2c65ae3a-a6e1-4d7a-96ee-d91916c82584", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a60a35d-3fcb-40c4-b47e-53f1a28f66b0", "sighting_of_ref": "indicator--2d16df65-176e-4ee6-9d53-d3a52aab1830", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a22913-2a90-410a-aa9d-8ba29e2fa28e", "sighting_of_ref": "indicator--1ae6d84a-af41-4fa3-b044-dcb2d9e495c7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122f3cf1-85e6-46ab-8f66-a90b1ab3aba3", "sighting_of_ref": "indicator--9965ac28-1c13-46ea-afbc-7d3d32330377", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d456b3-9076-4641-91c7-52c5487004a3", "sighting_of_ref": "indicator--76e07332-d2fe-4400-9e50-0f4ce6a0a569", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce10b881-c9f5-4de6-a764-9db3273a92d7", "sighting_of_ref": "indicator--a0993956-4793-478d-80b5-4506ddbda029", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee39f40-1c7c-471d-bdb8-166994ef27d7", "sighting_of_ref": "indicator--7ffbde30-6aec-41a7-88b5-517d321f63c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc8dc94a-9db9-49c7-af85-43ad280e92aa", "sighting_of_ref": "indicator--7ffbde30-6aec-41a7-88b5-517d321f63c9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed8122e-3906-4a1c-a9cd-c68dc32f970e", "sighting_of_ref": "indicator--67c8682e-7a7c-453a-aef1-6d1ee13e8864", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62051233-ddf3-4797-84c5-460b7404d744", "sighting_of_ref": "indicator--67c8682e-7a7c-453a-aef1-6d1ee13e8864", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e0e86d-fb31-42e4-b9d8-1b9e1a08c17b", "sighting_of_ref": "indicator--51977763-d163-4363-8c0d-6da8de4c5535", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f8279b-c780-42c8-b129-f59049199b4e", "sighting_of_ref": "indicator--bb139473-6651-40b3-b1b2-fd4b2f14553d", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c6b1c4-3ca1-46a6-934d-fab8c4b0a4ff", "sighting_of_ref": "indicator--bb139473-6651-40b3-b1b2-fd4b2f14553d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb7c92d-3d36-424a-8a6b-b10c94d597ca", "sighting_of_ref": "indicator--bb139473-6651-40b3-b1b2-fd4b2f14553d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8af10c8-c8d5-4cd8-8133-2fd7a8a4ffb1", "sighting_of_ref": "indicator--bb139473-6651-40b3-b1b2-fd4b2f14553d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77396119-d6e9-4cd8-b1a9-6a972144d58a", "sighting_of_ref": "indicator--bb139473-6651-40b3-b1b2-fd4b2f14553d", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18358d1f-507c-4915-907d-830039a92ce1", "sighting_of_ref": "indicator--716d0a60-8a1d-4d0c-b9e0-a271586846bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dbdb01a-dc90-4473-b8ef-0c6a356f30b4", "sighting_of_ref": "indicator--797b10fd-2bc7-4a8f-b894-7ac9406019e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6769562-2500-46c3-908b-80244b693a2c", "sighting_of_ref": "indicator--5c8a045f-5192-4f26-877d-f59a10cce572", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e7c0e1-adf0-42f0-a815-04aa8e3611e1", "sighting_of_ref": "indicator--7874d0d4-1954-4aed-a26c-43fb91e5d2cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de7bf508-db34-4c38-ab73-5612b360725c", "sighting_of_ref": "indicator--484805b3-3dfc-48ae-8c22-6995da8a4c8c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e6519c-3c89-486d-b566-dec804b88dee", "sighting_of_ref": "indicator--2a752834-c210-4c87-84ba-c39a9113d11c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fbfa3d-30ff-480f-a7cd-656340c0f0c2", "sighting_of_ref": "indicator--ec929324-d79c-4bad-bd8e-6a534dfa828c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53cb6f63-4646-47d9-a7a1-c36092f853e2", "sighting_of_ref": "indicator--e3d9226d-f916-4d63-8657-da5cfa5d1220", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cac5bf5-e1bf-4311-88e5-85eaac62b85d", "sighting_of_ref": "indicator--6b6d43cc-8bcd-4aa9-a305-4842f32591c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b1053a-a01e-40e6-9c23-46c69dff7a36", "sighting_of_ref": "indicator--0fd8cbc9-6d53-496d-a6d4-7244d33d5685", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5207a6-a4d2-40ea-8809-0b0ea5c495ce", "sighting_of_ref": "indicator--2e75d766-dfb8-4612-a13f-2685bae8f4d1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f38c69-b8c4-4876-8569-eb53970ea0f5", "sighting_of_ref": "indicator--1a6fa77b-dd12-47b5-a846-3492678e6787", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424855c9-1a01-4668-bf29-87898516c59a", "sighting_of_ref": "indicator--b68dd4a4-1668-4c07-99d8-7b63f0a2cf42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6099cb12-8285-4d10-8641-6bc1c1c9b978", "sighting_of_ref": "indicator--b07267a6-c861-494a-8b38-e3c3ba87a2c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87c7281-2950-4cbf-8b54-17202fc22e5f", "sighting_of_ref": "indicator--2008a3c5-3deb-4224-80ca-158a865f7d60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6da3cb-52de-48bc-afb1-9970c28da0ad", "sighting_of_ref": "indicator--d6fb95ea-0048-4475-a0f8-6d038a66db56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee21d936-24e6-4c9b-817a-74ccdfb598a6", "sighting_of_ref": "indicator--399749b5-65bb-46bb-9475-9b93614e8a5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bea68a-dcf0-42ea-aa7f-09283a612d15", "sighting_of_ref": "indicator--90272904-83d8-4383-b0b5-ba44aec2d924", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7a1df7-cb90-4aab-b13d-d13afb7169c8", "sighting_of_ref": "indicator--f1bc0be1-b5b9-4fa4-99c6-5cf0f01a2be8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--254bca3a-3b48-4715-91c1-94fef624759a", "sighting_of_ref": "indicator--efa48d84-a88c-43ec-a938-42359630f3ca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--133fdc9c-62a0-47c5-9666-e30a0540649b", "sighting_of_ref": "indicator--b418bfd4-10aa-4095-b007-5e93d75ad0a9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44584085-d417-4783-bcdf-cab0e7eadd67", "sighting_of_ref": "indicator--91fbe582-28fb-4962-9f1c-5f88a5f3ec5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4307b37e-9e73-4f54-ac75-c8f5166eebdb", "sighting_of_ref": "indicator--fdfad93b-743f-4719-9e9c-8f3b317ad1ac", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086b5f4e-270f-47db-bc3b-cad7fd3be711", "sighting_of_ref": "indicator--a60ee7bd-788e-45ed-82b2-94821fa6883a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0efc49bd-6339-4275-a5d7-0196156cfb73", "sighting_of_ref": "indicator--ac5272b8-0eb4-485f-8d28-5f668163ee19", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57e2de5-9ad1-4b33-ac9f-7540a985de6b", "sighting_of_ref": "indicator--ac5272b8-0eb4-485f-8d28-5f668163ee19", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8976b4e2-f29a-40dd-a3bb-136413f5213e", "sighting_of_ref": "indicator--1705fbcc-bf4d-4c38-87a5-3d7ffebcf78e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b918eee2-e5b2-47e4-812c-749515da323c", "sighting_of_ref": "indicator--1705fbcc-bf4d-4c38-87a5-3d7ffebcf78e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937c57d7-567d-4166-9811-a6fe5dc7a1b2", "sighting_of_ref": "indicator--d0eac0af-df16-456b-a516-d10d5ddde092", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf04940a-ba58-48de-b0e4-96fe922e1ab4", "sighting_of_ref": "indicator--e546924c-6bf1-4099-81e0-923b5bc8586c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdae673-86a6-4aaa-a83e-6d032c15c12b", "sighting_of_ref": "indicator--bc2dc7ad-fd41-4433-bfe8-26fd06cd058b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775145ea-8972-4015-9ad4-00bc2eee5e0c", "sighting_of_ref": "indicator--c8787506-c196-4379-b460-99df9368dc64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f89a311-fb8a-4af4-b985-6d2ad3f3d627", "sighting_of_ref": "indicator--a7b3490a-6b5e-4246-a058-c9fbaa3a26aa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab002ba1-c2cc-463a-9a0c-b8825b29db7e", "sighting_of_ref": "indicator--a7b3490a-6b5e-4246-a058-c9fbaa3a26aa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c1d70c-fe90-4c28-8634-d02ec80963c6", "sighting_of_ref": "indicator--a611c035-2bb1-41e0-b229-c9e99b0e38bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47cf7bc9-489e-4894-bdc2-d283b71bd3d1", "sighting_of_ref": "indicator--0859a1ca-2d06-4b95-99fb-970f7fca9cb7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c48e29-8bd2-42fb-a167-500bdd735c97", "sighting_of_ref": "indicator--67364e7f-3774-485c-a0b1-79a73aa2f0e9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89ff7eb-e2e2-46ec-83c9-7e31cbe421ee", "sighting_of_ref": "indicator--cd5c571c-5062-439a-9af4-417a68bb49c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb572b8b-6097-43b5-b6b7-1df7ad1c0977", "sighting_of_ref": "indicator--9d765cde-db93-4d8f-adc3-b21ea2c680eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc4e165-c182-45e1-8183-a1bc4d6288d9", "sighting_of_ref": "indicator--9d765cde-db93-4d8f-adc3-b21ea2c680eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3daf869a-d4d0-4f7d-bc61-89efea5ba9f3", "sighting_of_ref": "indicator--8c9b5d30-f063-42f8-a1b8-c70a3cdec965", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7ff840-de9d-4dc0-9075-7f92927ee7cb", "sighting_of_ref": "indicator--769bf9e5-5f1c-43f0-a497-7bded18c6a5b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f3fa1c4-10ab-48c7-b2db-0199c3c69eaf", "sighting_of_ref": "indicator--d39d1182-e430-4b77-af4b-4c9e046010e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759916e0-c230-445c-8608-0c1fb9c1df5d", "sighting_of_ref": "indicator--7bdc8ac6-3833-42b8-9a06-8c924862a6a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5ed1b4-0d04-4e74-b8ab-16164bc2fba9", "sighting_of_ref": "indicator--d304bffc-dcd3-4016-8321-71d147eab3ee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d386387-3d4f-4fcb-bbde-f478b7e23f98", "sighting_of_ref": "indicator--d304bffc-dcd3-4016-8321-71d147eab3ee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d426b8cb-d4bb-4d7b-974c-4d02ed65382a", "sighting_of_ref": "indicator--4c4589e7-6821-470e-9584-c448494eb557", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46256a07-5298-4a95-8baf-3f826da0208e", "sighting_of_ref": "indicator--7a4a97c8-1ee9-4201-ad8b-e289d425e2d3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b0b30d-1e3f-4ace-849c-3d38fb82e096", "sighting_of_ref": "indicator--2e845ab5-1833-463d-87a7-f4e837576534", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901f0a69-13e3-4ca5-a58f-4fbcf6415fd5", "sighting_of_ref": "indicator--edfd71b9-9af7-4e75-b372-2f04b3216137", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ebc0ca-ef83-4886-a116-1da20ebf3a0c", "sighting_of_ref": "indicator--7ed34a3a-01c7-4840-88dc-3bcebced2d9a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d227c63-9830-4462-b4ee-4aa803565aa0", "sighting_of_ref": "indicator--7ed34a3a-01c7-4840-88dc-3bcebced2d9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--738fb465-1154-4813-8d54-e33fdde9030e", "sighting_of_ref": "indicator--e5542705-f02d-4d7e-b9d1-c43b98e3150f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcb8e42-ae78-4b08-a0c9-40aa73e56473", "sighting_of_ref": "indicator--e5542705-f02d-4d7e-b9d1-c43b98e3150f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef4af0f-c77c-456a-b92f-e767a8f7198f", "sighting_of_ref": "indicator--c867f780-331d-4b24-bf8f-6100611db34d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163b6bfc-c67a-4148-99b6-1f1f4abdbe8b", "sighting_of_ref": "indicator--d1c9778f-16ad-447f-8fdf-a466798f3b63", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1569ed9b-7ac1-4f6d-a387-1168cf83b3d5", "sighting_of_ref": "indicator--3dffb939-9bd0-4f1a-8556-5a4e2f66350a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdec3c5b-863f-451d-922e-6bdc862fc076", "sighting_of_ref": "indicator--ea36e3f4-f2f6-4aa9-b133-78a9071f0a8b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10353de6-2cdb-447d-9e6e-afefff679bf9", "sighting_of_ref": "indicator--ea36e3f4-f2f6-4aa9-b133-78a9071f0a8b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1106bb34-24e6-41d2-83a5-444c16971488", "sighting_of_ref": "indicator--d839a089-bf5a-43aa-9ea5-4df6819b7ea1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cbfd68b-ce27-4ec0-bdf3-15bb08cd4102", "sighting_of_ref": "indicator--c8992566-5bc1-4e37-a2d3-8f67e1bdfcd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba03a21-1ae3-4636-a053-2f13ff0ee17a", "sighting_of_ref": "indicator--b59c16cd-b074-40c0-8ff1-0b41e153ebd5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4bf6c4-6ee9-4a68-9d55-7758e6c74f37", "sighting_of_ref": "indicator--9a1f1bbd-e9c9-4fbe-aaa3-5e1bdc2a3a50", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87867f9-c27b-48a1-949b-d2223db5922f", "sighting_of_ref": "indicator--360c752c-c257-4afb-bef6-8430ea0cc62a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb95b35b-dc88-48df-b920-9592c2f25dd5", "sighting_of_ref": "indicator--532897d6-783c-4fc3-9aff-7b476a4ecd6b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761f4049-fc5b-4c45-b23d-716a55daa97b", "sighting_of_ref": "indicator--bbefaf2a-d341-4756-b93c-48f107649271", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15106e77-58f5-4ff2-acda-02a6633c2c4e", "sighting_of_ref": "indicator--07048a87-4afd-4138-871c-8c90944b022e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a4cfcc-f651-4db0-829c-f848aa776893", "sighting_of_ref": "indicator--87ea142f-787b-48fe-9bb2-0a3cac0f14a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef09370d-6666-4284-9031-0bd7de7993f5", "sighting_of_ref": "indicator--9f2e330e-a76b-402b-b47e-032e9e65b674", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc7efd6e-be83-44bb-9e83-e489272059da", "sighting_of_ref": "indicator--dd9870aa-e752-4ff3-b38d-a074763aa4f5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743a5d56-2a76-4551-90b8-9864aa9c8a0b", "sighting_of_ref": "indicator--2cba03d5-59ea-4a86-b933-53c3de5eb790", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8ec4a8-1869-468a-bd0d-6dd4c5591b28", "sighting_of_ref": "indicator--2cba03d5-59ea-4a86-b933-53c3de5eb790", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e611d67-5345-4588-b9f0-758e0a67fff9", "sighting_of_ref": "indicator--de0efaf1-a549-4ab7-b801-0480b9df4cb6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9212e132-1349-42e7-aa39-a4c4a63fb8a2", "sighting_of_ref": "indicator--de0efaf1-a549-4ab7-b801-0480b9df4cb6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb21cb10-c886-47ed-b338-9211837e6202", "sighting_of_ref": "indicator--41608758-1136-4a6d-99b0-13ce2550d7a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6538cc1-4220-455a-8731-6374348cf6eb", "sighting_of_ref": "indicator--41608758-1136-4a6d-99b0-13ce2550d7a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b5f205-c4f4-45ce-b5c1-9d5354eecaec", "sighting_of_ref": "indicator--612b5449-e451-4a73-b6a2-ab786887aa7a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5acee6-b6fd-472d-95b5-0c3e6d45bcbe", "sighting_of_ref": "indicator--d96ac7d7-0842-4358-9725-6bf2c96d03f1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40688169-ec7c-479f-b1bb-0e539bcdb6bb", "sighting_of_ref": "indicator--35dded89-4088-4718-a38f-89b861c97b4b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84bf937-212e-4408-9849-42ab83d272d7", "sighting_of_ref": "indicator--35dded89-4088-4718-a38f-89b861c97b4b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--346fb27d-2374-45ff-aa89-c890c42434c0", "sighting_of_ref": "indicator--5828b7f5-23ed-4bf8-9e30-e25b3fa62c40", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cdea313-4da1-4f01-bde4-ac5a63d35c0e", "sighting_of_ref": "indicator--5828b7f5-23ed-4bf8-9e30-e25b3fa62c40", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78f3353-164d-4bb3-9aac-0f219c10b565", "sighting_of_ref": "indicator--9d11cfc3-c850-45e1-928f-89841c21c657", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bc1284a-7e3e-4d54-b37f-751868ca43f1", "sighting_of_ref": "indicator--cd3c3fae-d5e1-4335-a2e6-96a37f48e459", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08182c32-2e98-45dd-8118-afcd92a9a8f3", "sighting_of_ref": "indicator--bbde5361-9feb-4865-beca-6c9a99153671", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0b11b86-59ef-4236-b41a-a1c0dd5eb4de", "sighting_of_ref": "indicator--6ab529c0-f647-4c41-aedd-4723c3e187dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a68d61-59b9-448a-839a-79c974bb33ac", "sighting_of_ref": "indicator--49979ba1-a295-4426-be4a-990b5c3be2b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c786cac-88be-4b50-8344-c751f28c3aff", "sighting_of_ref": "indicator--d8fc2aca-38f6-4741-b652-2bf1f0b2f187", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279e0395-f4b7-4a38-9e40-a1467b428962", "sighting_of_ref": "indicator--a1a13827-a148-4f8f-9587-6567ad47cafb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1c7edb-b16d-48e5-94bf-fb071796d42e", "sighting_of_ref": "indicator--cc333249-99d5-44d6-8ae0-3e07e45c633f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53853523-0755-4635-9b18-e6acd252861f", "sighting_of_ref": "indicator--3def3108-a6ec-456b-8fa8-fa6b3cecaaa9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7962154-ef98-46f6-b812-fac4b4b1180b", "sighting_of_ref": "indicator--34ef49e8-1174-49fd-9374-86d97b0a2889", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831ad772-ac73-4eff-bd97-943d3ae89c81", "sighting_of_ref": "indicator--086ec909-1e51-4712-92e3-4c3f161fc1e6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cfd9ab0-04e8-41fa-9d49-028f49188b77", "sighting_of_ref": "indicator--6e7a6240-9af3-40f7-adfa-c748639def69", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3150bd5c-d139-41a5-bbdc-2907abc4b2cb", "sighting_of_ref": "indicator--6e7a6240-9af3-40f7-adfa-c748639def69", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c454893-05f2-49e0-a32b-87d7a0c07e97", "sighting_of_ref": "indicator--7a509a86-f44e-4bce-88a7-2c72316a402e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa84701-adbb-4468-bea3-a017ba37b2b9", "sighting_of_ref": "indicator--8a7ae5b0-9bf1-4f3f-b570-919dfe6ef5fc", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f4688a-8086-4911-8876-94ba9f5f7d71", "sighting_of_ref": "indicator--53d67002-fd27-4875-87ab-56627fbd930e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb0f645-2b8f-4fb1-beee-0f3383376276", "sighting_of_ref": "indicator--f715f3ea-af27-4afe-a344-bbaa7028aca1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f04109d-8a35-4eb4-a58b-c7802724fb2e", "sighting_of_ref": "indicator--601cd139-464a-437d-baf0-9abc9973ae46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c295dde6-a870-47b3-abfb-faaff15b7563", "sighting_of_ref": "indicator--601cd139-464a-437d-baf0-9abc9973ae46", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9815b3-232e-42bd-85f1-2429d38d89e1", "sighting_of_ref": "indicator--ae379202-e854-4c5a-8d85-ca624c13c23f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9189cad3-8b72-4446-b26d-4c67aefb4fff", "sighting_of_ref": "indicator--7bfe72a3-4033-4889-8458-07894c89a0a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedbdbf9-604a-46c1-90ad-65fa59037f4b", "sighting_of_ref": "indicator--7398bd0f-65ad-44a5-aa09-2cc866274bd4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b04eb65-a84c-4ff2-a480-3be1f5d6e94d", "sighting_of_ref": "indicator--7398bd0f-65ad-44a5-aa09-2cc866274bd4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59feb10-89bc-4e5f-8f08-2c5793e471df", "sighting_of_ref": "indicator--43e489a0-9c10-48a7-a85f-8892dc37f076", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cf6807-ba84-49d0-9185-e3843fb735ae", "sighting_of_ref": "indicator--43e489a0-9c10-48a7-a85f-8892dc37f076", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b76796-9225-4d70-9aba-e6517b0a72d8", "sighting_of_ref": "indicator--f62f9442-5505-45ee-84ff-71369f6f9b63", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258f1b2b-dfce-42f6-bc66-d182bdf4b104", "sighting_of_ref": "indicator--440b81a2-ae4a-4c54-8e7c-04e9d9cbdf5c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c538837-c027-4c28-8b27-e865f1a53530", "sighting_of_ref": "indicator--0e28ce5e-2660-4ac1-8689-24ab4e5b006e", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb0a6e8-ca73-4dcb-802b-28d4a236eee6", "sighting_of_ref": "indicator--54ed0260-21ba-405d-a73c-87d83b7ff335", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19f158a-4251-40dc-91b8-30fa8b7415ab", "sighting_of_ref": "indicator--54ed0260-21ba-405d-a73c-87d83b7ff335", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3881022-b60d-44fe-9a4f-0de90b910b5c", "sighting_of_ref": "indicator--b4ea957a-9cfd-402b-ab5c-14de1fe57331", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ada01ff-83ea-44b7-b239-2a8b1895aa51", "sighting_of_ref": "indicator--cbd57e39-1c70-42a4-b51f-4aaaa9617042", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abe6059-978c-4c46-bfc2-1f3cf9d6d748", "sighting_of_ref": "indicator--472736c3-927b-4388-8ac6-b2635a49aebb", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3150a7-12c0-417e-afc8-6cb68bf5d9bc", "sighting_of_ref": "indicator--21ed7fbb-fb4c-4aee-b4e5-508af582a9c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601b8b55-fe69-49c5-8cc6-ec7360d6bf2b", "sighting_of_ref": "indicator--bfebdfb2-5ab3-4168-83c9-d582589f7cd0", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94d3ffd-317c-4735-9e30-b5491a9aed25", "sighting_of_ref": "indicator--2b968a14-9de4-42ad-818e-911bc8ec40ee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6e7ad9-b76e-4336-8923-3538a0908d1a", "sighting_of_ref": "indicator--25517ce2-bc9c-4105-b8f4-929645e9d33c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c92c9a1-09ef-4b3e-81b5-3ca7b95356d5", "sighting_of_ref": "indicator--8e117736-778a-4f89-98c7-343545b50c44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b42a555-33b4-49ef-93a2-debbdd9421e5", "sighting_of_ref": "indicator--d485004a-6e89-43bc-ae85-9182abf10411", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2887e30-621f-432d-a98a-9f17034cd09e", "sighting_of_ref": "indicator--889c6909-5d42-4eb1-8a26-bad71b735ca8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68400f1-156a-4073-a645-dbc7f08b590e", "sighting_of_ref": "indicator--f84f7b20-333f-40d8-80c8-4be8283f7351", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf3e6b0-86d5-41ed-b0a3-bb92fdd81b4a", "sighting_of_ref": "indicator--d145988a-e836-42dd-8d9b-64c78f90401e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784e87fb-7f4f-48be-a7b1-7122f16b64ce", "sighting_of_ref": "indicator--824185f3-83c4-42cd-bedd-4d64ccbf06de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033766da-2c7d-4bd5-a36e-c139e57fdf48", "sighting_of_ref": "indicator--0b626822-9688-4e07-90a9-03c6e730f172", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f7e59a-a3d3-4a46-83fa-2b8e510f07c3", "sighting_of_ref": "indicator--8f6aa1b7-4d20-4778-a311-cd4dc2a940ab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b8d4fb-571f-4a6a-a1eb-36296a079d82", "sighting_of_ref": "indicator--5a972945-f477-4876-bbc8-3fa7c85848c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a7bdb4-d948-4174-84c7-484d927f4162", "sighting_of_ref": "indicator--08564d06-d18e-4875-8b8b-2da343b674dd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ed0915-cf5e-4942-80a3-70cbe8bad5e5", "sighting_of_ref": "indicator--ba75828c-3739-4af6-99c1-ddef5554ab9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906dd96a-5081-4a01-a73f-a062cc3489ab", "sighting_of_ref": "indicator--ad3a0b53-372c-44cf-a493-50bd5182d8ec", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc5b883-6395-42c6-9906-a00e9835b313", "sighting_of_ref": "indicator--f91c5df5-a093-4920-ab33-58c77a0820c7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16880a28-e0f3-4308-87d6-b70cc02226e9", "sighting_of_ref": "indicator--4a91ae2e-b0fe-41b4-813f-c4a73ebf1a08", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f3d43f-51f4-4858-8ab4-0ccf9f1f7862", "sighting_of_ref": "indicator--90c47cc5-99d5-4074-b2f9-7f1693990cd6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d50450b-3d09-49da-9359-c259f3c9c78c", "sighting_of_ref": "indicator--9f75bd26-2385-4c09-938b-fb64cc2dbafd", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079ad8ef-1f2a-4af9-b63e-b672911e270f", "sighting_of_ref": "indicator--92df19be-68f0-48e6-9778-386e508db925", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc2cfb2-ed86-4918-984b-025f1a5f8222", "sighting_of_ref": "indicator--95d38b7f-cbaf-40cd-ba3e-e764b2f46648", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c835eed8-1c63-4d28-9cd8-cf8f042580e9", "sighting_of_ref": "indicator--09909320-19c0-4c3e-9457-3a67c1cdf9bf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0138aae3-7536-4eb0-8288-c9b167c47c7f", "sighting_of_ref": "indicator--b216ce05-fa90-4b23-8b53-acfeb21c490d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c71d84-6977-4438-b85b-a337d220834c", "sighting_of_ref": "indicator--21c013ac-71d7-4a54-b107-a1cfee464d96", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14704853-89e1-42e1-ae3a-1eb7d62132b0", "sighting_of_ref": "indicator--33fe11e2-e0ad-48fb-bf62-18f62a4e1792", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25871248-a1e7-4645-85b3-1fda75434601", "sighting_of_ref": "indicator--d7711021-13f4-45d5-a268-17a6d02b073e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98a5b3e2-cdff-40da-8500-4450a4a5cd97", "sighting_of_ref": "indicator--7bfaf01a-e6d8-476c-8940-8393be69cd02", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c23fd19-651c-4af6-9c0b-469d655a8a46", "sighting_of_ref": "indicator--6339e8df-6458-4b0a-bfbe-d2578a4e7512", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21977a4-8857-4b61-a72a-bac877506fef", "sighting_of_ref": "indicator--fcbbfabd-fec8-4bc6-aeea-3827f3c5e61c", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc4d4c8-8a9f-4dcc-83d8-3754bc88ee70", "sighting_of_ref": "indicator--d85c2e1c-f7fd-4626-b844-5d192c3dccd4", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9fad5b-3a9b-4e86-83fe-911fa5bb4925", "sighting_of_ref": "indicator--0a1b1257-e542-4b83-b5b8-82ae02a6c7dd", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9b81dc-0c07-4ce9-a999-09e78c74395a", "sighting_of_ref": "indicator--dcb10189-986f-4e03-adba-3341d04098e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c232d83d-b26d-4073-bf6e-bddbd78f07d2", "sighting_of_ref": "indicator--a4733946-d598-4a44-85c5-1de47761e06d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5616b5b-ccae-4316-8118-2ae806605d54", "sighting_of_ref": "indicator--1049e34d-89bd-429a-9b9d-90bd0890d3a6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecda421-578e-46a9-8f02-f08d8c660b95", "sighting_of_ref": "indicator--e7e5aae8-08a3-417c-b2f5-e448aeefcaa4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dabc23f6-8dbf-421d-b683-03f6cee7e344", "sighting_of_ref": "indicator--ac466377-487c-476d-b920-47b2b1e7b283", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dbf73d5-3587-490f-b566-619ef04aa108", "sighting_of_ref": "indicator--53479f6b-fb7a-4e09-abad-0d9116c57f1d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b019980-0900-4de0-ad2d-c4cffaff1976", "sighting_of_ref": "indicator--90672c3c-a509-493a-aecf-5c27128206d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dcde60-be7d-4c2e-a5b9-59c8acc90c4a", "sighting_of_ref": "indicator--90672c3c-a509-493a-aecf-5c27128206d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7454ea-1b05-4964-b0d9-24c6629ad4d0", "sighting_of_ref": "indicator--8fcbc117-455a-4faa-afc0-9df70314a660", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e19ca60-c86a-43ef-8062-f4c6100d0772", "sighting_of_ref": "indicator--8fcbc117-455a-4faa-afc0-9df70314a660", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7836885-6b16-4b4f-9bf2-7d68866c4ce7", "sighting_of_ref": "indicator--353e3710-2813-44ed-8418-6d72d525c573", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--309b1919-12bd-4369-a6d4-4e6aff618bbb", "sighting_of_ref": "indicator--28de793e-1309-4f75-b151-e032892bfce7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65e4ad6b-0c2b-46e7-b7b9-ccb058c98561", "sighting_of_ref": "indicator--5f0cb764-fd43-41b7-b222-9724f7c28f44", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa20ba18-0eac-4258-b456-3488cc6c3910", "sighting_of_ref": "indicator--070c6a42-198d-46ff-bfd4-e17613726756", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ad893f-8d78-4969-a99f-9b986a56f264", "sighting_of_ref": "indicator--e91d3e2a-6873-4584-84d1-98bf35e29fe2", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5c88c0-5286-4853-a4b3-1699eb928245", "sighting_of_ref": "indicator--5ea78076-ff2f-4c86-810b-41b33c67deab", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5826ea-51fb-4791-944f-0ceb21a651e1", "sighting_of_ref": "indicator--5c8c19fd-abda-4441-a99b-dce080a7a3c3", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f46a238-07db-4450-828f-e8f197f35ea0", "sighting_of_ref": "indicator--f41aa8a6-240e-4420-9c31-5936776e2914", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfb0754-04f3-4b95-ac85-f64206729c70", "sighting_of_ref": "indicator--f05b6d58-1a18-414e-a1fe-2e632e1057cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a45fd66-bb81-4d2f-bb7c-cb3cce5a857e", "sighting_of_ref": "indicator--7bbbcf89-f728-4a62-8a04-62c0aa89efc4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c59979f-cccb-471f-b65a-e289f20f4b3a", "sighting_of_ref": "indicator--7bbbcf89-f728-4a62-8a04-62c0aa89efc4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6581f1f3-1482-4ff4-bea3-e053bf8eaf01", "sighting_of_ref": "indicator--9e51daee-380b-4665-9092-4ea3c3f1bfa0", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8fae7d2-f339-4c71-b948-0cc9e0671d02", "sighting_of_ref": "indicator--fded3091-0cff-4114-87a2-f16b9e99229d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8600e4b4-ac6e-4432-903d-75a0cef934fe", "sighting_of_ref": "indicator--7d8aaa31-8439-4882-92ac-8b864ff53dce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390cea87-5b3c-4ce9-9421-caf20b0db6e5", "sighting_of_ref": "indicator--5947055a-c22d-4548-98ab-e1222f0ed6a9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c1a318-2dfe-49a2-ad65-28ee333a26dd", "sighting_of_ref": "indicator--5ff9666a-ba9a-4bab-9a80-2d446ce48a55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8142ed6-6507-4d12-9763-92d5ff9504ee", "sighting_of_ref": "indicator--266e1ecb-e3c3-43b6-9335-9f8ed9ef9af0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f43a0a-b11a-40f6-9cb6-5072fe6c932e", "sighting_of_ref": "indicator--df24251b-cf39-4174-a362-3ee33bcc8821", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6650a3de-5233-4e18-b998-88d4fc58bd19", "sighting_of_ref": "indicator--a70dae22-f19a-4997-bc1a-aa79dd767bf5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0956c809-0528-4332-bb26-f54bf2810371", "sighting_of_ref": "indicator--91680d35-f059-49c6-b8a3-e44226d43259", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf55653-2d91-402b-befe-8c0f6ca1ba79", "sighting_of_ref": "indicator--137d6488-3d4c-48ca-99c6-5410e98f3cfb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801724f6-4344-48b3-81d0-00b923ea59c1", "sighting_of_ref": "indicator--0b239735-30b0-476d-b5f0-b4c0f6d14db9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a26442c-153b-46b1-b6f2-8bb503628d10", "sighting_of_ref": "indicator--0b239735-30b0-476d-b5f0-b4c0f6d14db9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b958a40-033a-4e26-afac-a1b7a4da11c8", "sighting_of_ref": "indicator--16334e5d-d61e-4b68-93e3-8abc4e1b251e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772dbcb1-04b6-4bec-a469-fc0ede5b9417", "sighting_of_ref": "indicator--16334e5d-d61e-4b68-93e3-8abc4e1b251e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b0a433-5928-453b-8594-d44b8530174b", "sighting_of_ref": "indicator--747d0128-5171-4ed1-ad74-56eaad33393f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024cf24a-26cc-45b1-aef9-dd57c6aec6ce", "sighting_of_ref": "indicator--7a6213e9-f738-4285-a5c3-6d1455404d11", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e89ca6c8-e115-4efb-880b-35449bfccbe4", "sighting_of_ref": "indicator--7a6213e9-f738-4285-a5c3-6d1455404d11", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a71572d-413e-4767-96a1-af60b0ef6747", "sighting_of_ref": "indicator--c1c2f259-d79a-4e1d-aea1-21dd2cf029d4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14206087-4918-4f68-8cfa-29d4b60dd135", "sighting_of_ref": "indicator--c1c2f259-d79a-4e1d-aea1-21dd2cf029d4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f82587-fb6a-4d4f-b131-fb5e723ab17d", "sighting_of_ref": "indicator--a697130b-9b51-430f-8f1a-ff6c2d1738ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01111e73-c070-4da3-a1d4-125ea5b0fd8c", "sighting_of_ref": "indicator--a697130b-9b51-430f-8f1a-ff6c2d1738ff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8183f6-71f4-4604-bf85-ce851171986e", "sighting_of_ref": "indicator--8e3101d0-98ab-4682-9641-83d7783d25be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf71170f-89fe-4133-8404-a66893ee54aa", "sighting_of_ref": "indicator--b2e06e4a-613b-429b-9994-3a9a8bd3dfe3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ef0805-ea57-4aee-8a15-8504dd277320", "sighting_of_ref": "indicator--b2e06e4a-613b-429b-9994-3a9a8bd3dfe3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86dc823a-a4ae-4e35-afa1-4d8d49f4f3e1", "sighting_of_ref": "indicator--1f353da9-5f9d-4f6b-91b4-f59672d74c52", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d3490c-83e8-4a2e-8188-7ee87efacff4", "sighting_of_ref": "indicator--0972b9b0-a1ec-4bde-86c0-84d10c6c7181", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f99b712-ebff-40db-b4a7-9714a1f56d22", "sighting_of_ref": "indicator--0972b9b0-a1ec-4bde-86c0-84d10c6c7181", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9155359e-b3a2-4e0b-b4ff-ea9af7ce2de8", "sighting_of_ref": "indicator--449cd51c-5ece-4da8-a07a-c87cff1c5831", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863261bb-3cda-4bec-9b7e-3f501dfacc6f", "sighting_of_ref": "indicator--bf04b0f2-b6d6-4f5e-9d22-4ef250b2ad9d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27015bcd-b056-482d-85eb-f80e5f46c74a", "sighting_of_ref": "indicator--bf04b0f2-b6d6-4f5e-9d22-4ef250b2ad9d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7b03aa-8399-4a21-9f7f-54878cdd14ac", "sighting_of_ref": "indicator--9104dc29-65ac-40a0-ae62-17604af8f22b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c941e726-064f-4ad3-83b6-24e183a3144b", "sighting_of_ref": "indicator--9104dc29-65ac-40a0-ae62-17604af8f22b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b461d207-85d8-4142-a797-6a31dcc9dd5a", "sighting_of_ref": "indicator--84180006-a43c-481e-9a45-98746d500a80", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610ae88e-db56-4029-aaa8-84aed0fd1f18", "sighting_of_ref": "indicator--84180006-a43c-481e-9a45-98746d500a80", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9e5088-7a93-4a7e-a2bc-d13230079392", "sighting_of_ref": "indicator--c104d843-886f-415b-ac35-393fefc4259a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8183d5-a029-4edb-95b9-82fc2fd69e03", "sighting_of_ref": "indicator--c104d843-886f-415b-ac35-393fefc4259a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54cd3d5-7a25-4f85-b03c-f51bdc8acb03", "sighting_of_ref": "indicator--cf463b62-ecd8-4a30-8b33-ccf4724d34ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976dd358-8c50-445f-9df5-a1fd2ac98bc9", "sighting_of_ref": "indicator--cf463b62-ecd8-4a30-8b33-ccf4724d34ed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453e2ddf-6dba-4cb8-833a-214452590ee6", "sighting_of_ref": "indicator--b36c853d-0b5b-41e5-8a34-764032b02301", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e447d84-ec64-42b4-818f-d462a250e6db", "sighting_of_ref": "indicator--518fbd08-1a95-4152-8e03-348af096d515", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25c9d22-6d01-4042-bd6a-8951dc925c4e", "sighting_of_ref": "indicator--518fbd08-1a95-4152-8e03-348af096d515", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57871396-dc73-4d5c-96dc-fc4351c7a52a", "sighting_of_ref": "indicator--de51088f-02b2-42b7-9cfd-5d6e17141f7d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e3d1b8-8d69-4103-9245-1940a682dac4", "sighting_of_ref": "indicator--de51088f-02b2-42b7-9cfd-5d6e17141f7d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f7dc51-d45e-40dc-8d77-65d90d3bea7d", "sighting_of_ref": "indicator--a9d56145-a597-40d9-9b6c-43544af100bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c427575c-2405-4d50-a076-e1cd4de7cd35", "sighting_of_ref": "indicator--a9d56145-a597-40d9-9b6c-43544af100bc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4646d296-1a61-4db7-a7ef-7e5f15f9cec2", "sighting_of_ref": "indicator--26d003b3-b969-424d-a05e-e593086634a9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b17ebd73-b05e-4992-979e-1992f62a6948", "sighting_of_ref": "indicator--26d003b3-b969-424d-a05e-e593086634a9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c4d834-52e3-48b8-885c-512ec64ba43f", "sighting_of_ref": "indicator--841a551c-6932-43ee-b1c6-28699decbf96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec0262d1-2f7a-4a1c-9108-dfeae2f2cddf", "sighting_of_ref": "indicator--841a551c-6932-43ee-b1c6-28699decbf96", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087f2d8e-4b1d-4d5b-b3f4-658d61d5a0f7", "sighting_of_ref": "indicator--fe639b16-8bc2-4f83-96da-8de21d0b33f1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3cdca17-1a37-4606-91c6-1a601405c1ab", "sighting_of_ref": "indicator--fe639b16-8bc2-4f83-96da-8de21d0b33f1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8957527c-86bc-4529-afbf-a9989e111c36", "sighting_of_ref": "indicator--56ce3f5b-c883-43d1-8658-5448a22abe74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc164a83-cc3c-4432-83dc-22e3f96fc6fe", "sighting_of_ref": "indicator--56ce3f5b-c883-43d1-8658-5448a22abe74", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd84fdc-f879-4bae-846c-3faec5defa93", "sighting_of_ref": "indicator--7baf9c10-2080-401f-bac4-7ec1c5eb174e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb9bf2b-d555-4476-a74c-2029328adf71", "sighting_of_ref": "indicator--7baf9c10-2080-401f-bac4-7ec1c5eb174e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27333da7-ac8f-49ea-b657-e3ff6a129940", "sighting_of_ref": "indicator--417efc83-f363-472c-bbde-8798d01fa943", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b57227-0110-492d-b163-c29693e39ed5", "sighting_of_ref": "indicator--f909c122-b0de-4aa5-acb7-ff8284d24799", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df32051b-b904-4ad4-910d-5accd112a4d7", "sighting_of_ref": "indicator--f909c122-b0de-4aa5-acb7-ff8284d24799", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e886e95-40aa-47cd-9c37-df2092dcea83", "sighting_of_ref": "indicator--9b700377-f2a1-426c-beab-269febc88c8f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--103383e3-5817-45de-9177-5912aebe05bd", "sighting_of_ref": "indicator--9b700377-f2a1-426c-beab-269febc88c8f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475298fb-0049-4429-8128-20ffdb03d2d3", "sighting_of_ref": "indicator--f9fa9df5-5b1d-41c4-ae81-1cf00c19c23e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2959c0f1-d7e7-442c-9c3b-e7e4f497eab5", "sighting_of_ref": "indicator--f9fa9df5-5b1d-41c4-ae81-1cf00c19c23e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112e3806-7e1b-4dde-9a99-77eb23b4a21e", "sighting_of_ref": "indicator--3a4d711f-a89e-4a9d-b201-d185280d8e82", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e8e456-73ba-440b-b856-a41c2841d38e", "sighting_of_ref": "indicator--3a4d711f-a89e-4a9d-b201-d185280d8e82", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00926014-e086-48a9-b430-fa9387437ac9", "sighting_of_ref": "indicator--72ec3929-b0ad-4b3a-8921-15f2f29e0372", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe3ec84-0c35-4d78-94eb-0d6de5712381", "sighting_of_ref": "indicator--72ec3929-b0ad-4b3a-8921-15f2f29e0372", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03be8066-3e22-4d8b-8c74-67b5bab67d53", "sighting_of_ref": "indicator--a9f4b933-7d08-467d-b298-e413afe444c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11b0cdab-c5a4-4214-9dd5-b127990f70a3", "sighting_of_ref": "indicator--a9f4b933-7d08-467d-b298-e413afe444c3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83adb53-7f2a-443b-a2d7-2df1ee8e86fa", "sighting_of_ref": "indicator--ac0122f8-334d-4429-b036-73a74d37aa76", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13af6aa7-bf25-406d-b786-6ebe0d39fd8b", "sighting_of_ref": "indicator--ac0122f8-334d-4429-b036-73a74d37aa76", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cefd64-54eb-4eb3-9513-4caf48ce0c0d", "sighting_of_ref": "indicator--b207e381-0385-4e77-afea-490bb9674954", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc685c75-e5b5-4841-acff-bb3a826a6a67", "sighting_of_ref": "indicator--b207e381-0385-4e77-afea-490bb9674954", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24363dde-6066-41dd-b332-3e95264ef9ff", "sighting_of_ref": "indicator--916e2489-727a-4418-a9d3-23c356a51961", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570b61c2-390e-46a6-aeff-1544231476d4", "sighting_of_ref": "indicator--916e2489-727a-4418-a9d3-23c356a51961", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3515d42f-02c7-4eaa-b84e-c0d510d33f88", "sighting_of_ref": "indicator--7c1d13b1-3dd8-42f5-8c4b-dec63fe9bf0b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795ba980-af3d-4c97-b5ba-5c23fda8080f", "sighting_of_ref": "indicator--7c1d13b1-3dd8-42f5-8c4b-dec63fe9bf0b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1c73c6-2ec5-4776-8627-df1e639fee3c", "sighting_of_ref": "indicator--5776eacd-5266-48e7-b6c5-f1faabe43d6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb58a32-82aa-4da8-aec2-e81f2d46ea9a", "sighting_of_ref": "indicator--e41b5b24-2d5f-4e1f-9a28-17c3332f29b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a54fcf-a218-4d2a-b9af-7f96628574ea", "sighting_of_ref": "indicator--62d67d27-8fcd-4591-861b-fda5e97b6076", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e22412-d5cd-442f-92ad-9a46426965dc", "sighting_of_ref": "indicator--62d67d27-8fcd-4591-861b-fda5e97b6076", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac26c9b-75a8-401c-8494-0e3b544da1ba", "sighting_of_ref": "indicator--5e6a2094-4fdc-4876-9fc0-243ef86d4aaf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9b96aa-72ec-4b00-9973-5b87242f41eb", "sighting_of_ref": "indicator--5e6a2094-4fdc-4876-9fc0-243ef86d4aaf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5884840-d758-41b2-835c-37b62dc794f8", "sighting_of_ref": "indicator--de58db16-afcc-4afe-873c-433ba54df077", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3610d393-cc77-4ac8-b95c-59f7b147f22a", "sighting_of_ref": "indicator--de58db16-afcc-4afe-873c-433ba54df077", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ef0a06-b35a-4348-b32f-7932433ca7b7", "sighting_of_ref": "indicator--9f7e62fe-5aeb-4253-ba09-1174894dfecf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7167e835-29c5-458a-a996-9b99cdc28d3a", "sighting_of_ref": "indicator--9f7e62fe-5aeb-4253-ba09-1174894dfecf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947997fd-1bc2-4c66-9767-7890b1f2033b", "sighting_of_ref": "indicator--cf78aad3-fae6-4b3d-8222-fe27209b7cca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4188f740-ebd4-415c-8db3-05d33dce1a38", "sighting_of_ref": "indicator--cf78aad3-fae6-4b3d-8222-fe27209b7cca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c613868-406c-44ad-9e85-25ed48541888", "sighting_of_ref": "indicator--faee7c67-da3e-4966-b0d5-225fda3c680c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f91bf9-02e3-4746-a6bc-368f34a11cfb", "sighting_of_ref": "indicator--a7830202-9fe5-425e-952c-6d40a66b79b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef9db32-5f78-4f65-a539-e7b25c197b7d", "sighting_of_ref": "indicator--bbbd2687-7926-4e18-9547-66d65713940a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52e154ba-a15d-422f-8509-94bd40149d08", "sighting_of_ref": "indicator--72411567-bb83-4918-9eca-34561ae20ed7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732479ed-b68c-4ee1-aa11-98e3cc35402e", "sighting_of_ref": "indicator--a4bae56e-bfe3-4db1-a17d-2445114d621f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41fe9a69-9c0f-4462-82a2-7bbd1fcb28cf", "sighting_of_ref": "indicator--bd93519c-efb3-4fe3-8bc7-88f9599c1f2f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c4fe888-cd94-4740-a04e-80a97681dcb2", "sighting_of_ref": "indicator--5172e4f8-ad05-4c44-9370-d4da7d2c5ef8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e90dfd-8211-405d-95a0-b6cb16e8d81d", "sighting_of_ref": "indicator--71911e4b-7a47-4abb-9830-68c2a65ababe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409ab259-87d5-4a1c-9019-f9b103674519", "sighting_of_ref": "indicator--6305ab89-cb9e-486d-917a-4dc3d527c094", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4634a02f-0bf8-4375-8ad4-5db6bf7e743d", "sighting_of_ref": "indicator--6305ab89-cb9e-486d-917a-4dc3d527c094", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6f9d26-d7fb-40e3-9eb7-1cba6353cf24", "sighting_of_ref": "indicator--f575891f-3b7e-4aaa-b789-830d55095721", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be7e225-5008-4a16-8fb4-4e93cf33074d", "sighting_of_ref": "indicator--5887309c-9a12-4579-9094-72bcd5f6596b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21fc61f-93e8-4d3d-9d2c-a790f44c652d", "sighting_of_ref": "indicator--9a427d09-f9e0-49ed-8706-356eac8d401c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27df648-2735-42e3-88fa-eaa24e441bb0", "sighting_of_ref": "indicator--9a427d09-f9e0-49ed-8706-356eac8d401c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01d0d10d-ca31-4490-a0a7-1ee2e34b9677", "sighting_of_ref": "indicator--d7a567d8-ce63-4845-aa7c-d7490af5062c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7b53fb-ce71-4863-8e12-e2e349044037", "sighting_of_ref": "indicator--cf98e783-747a-4f05-a4ac-9adda111ffeb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba78ec14-c80a-4275-b979-eb014a382fb3", "sighting_of_ref": "indicator--cf98e783-747a-4f05-a4ac-9adda111ffeb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f32cf1-1001-4333-8592-cfff2a0892cd", "sighting_of_ref": "indicator--75530bfd-2486-47fa-b301-4e103a117f27", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d06aa44-b03c-4821-9aca-10c5b28957b6", "sighting_of_ref": "indicator--d0020e1c-45f1-4ca7-b4a5-e34e586e9ac1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b7530d-5f57-4e01-85ca-e8887162bffb", "sighting_of_ref": "indicator--0c79aad2-5e3e-4afc-823d-a5c2b6a0a380", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203e8f1f-4a76-4374-9c70-8c5484b71d4e", "sighting_of_ref": "indicator--f07c79c0-db76-4d25-be54-7b2776c346a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--332be29d-d492-4df4-8c8b-4f3d61c8eac4", "sighting_of_ref": "indicator--c6df9213-c9b6-4cf6-81e6-14b5b4da6192", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4d82ce-6d21-41f4-a4bc-27d404b57e5e", "sighting_of_ref": "indicator--86bf151d-23e2-4945-9491-f8637cc0ff41", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1a06d5-0992-4000-bfa8-d8b0e2f3126d", "sighting_of_ref": "indicator--59a586af-5cb7-44f1-83a6-230b50ab4acd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828d125a-116c-49aa-b2d5-c8fac195ff47", "sighting_of_ref": "indicator--b7ac3ef9-f187-41cb-91e0-8b570c218253", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0d7043-38b6-408a-8277-4496b56c438c", "sighting_of_ref": "indicator--e6522697-d427-4e36-bfbd-86876bcf099a", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3214a5-e0f4-4d54-9a71-5760836bb2e9", "sighting_of_ref": "indicator--e6522697-d427-4e36-bfbd-86876bcf099a", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9203e61c-8c6a-4498-8f55-806d5cb9f4af", "sighting_of_ref": "indicator--e6522697-d427-4e36-bfbd-86876bcf099a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38adf07a-fae5-4f54-8283-fb1759e66dd1", "sighting_of_ref": "indicator--e6522697-d427-4e36-bfbd-86876bcf099a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6437b813-3033-448e-9d33-9eb1c41267e8", "sighting_of_ref": "indicator--e6522697-d427-4e36-bfbd-86876bcf099a", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902a9998-2799-4ba3-93f9-4604e6acbc08", "sighting_of_ref": "indicator--e829bde1-9c57-4787-8544-a9b016ee829a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ce15f1-12c1-4048-a3da-65fa20a75c4c", "sighting_of_ref": "indicator--5c916e14-ea63-4bdb-99e5-99ec161652dd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c88e0ed1-4de6-4151-96f6-6152a482c854", "sighting_of_ref": "indicator--740f182e-a180-4024-94dd-9ae6816989d3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06ac3d8-ae69-4195-aa55-056abe03d973", "sighting_of_ref": "indicator--4636a053-36f3-4a50-b006-b4b72decb386", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e812a233-69f5-462d-bb89-723617f7a07e", "sighting_of_ref": "indicator--1de6c4b8-c883-4a8d-aa91-fbca1a7a4cb0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9196c379-be14-4b21-b5f2-06ab5f5939ce", "sighting_of_ref": "indicator--75931eef-d729-46e9-a5fa-7f261e02317f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da112a88-b22e-440d-a69d-f19794c4aad9", "sighting_of_ref": "indicator--c6fe0e2a-c7de-4af3-85e0-82d0607ad5e6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26fcfcf7-eddb-4ab1-9ffe-372e0335cdb9", "sighting_of_ref": "indicator--41a758d0-5afd-4e9c-b133-399d122f9acb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--611d0226-3375-4782-aadb-7d6a03e489c0", "sighting_of_ref": "indicator--03bf4b83-2423-48b6-b352-562322ecc2dd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a644d845-d297-4083-a16e-45a1e20e8905", "sighting_of_ref": "indicator--e24e8f9b-e67f-4d68-8d9e-51430892e77b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fbaa429-34fd-4a8a-bb9a-bb11209d8f87", "sighting_of_ref": "indicator--b7e64066-ee5b-455d-a4b3-d4d93d52ddad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3de7e83d-b6ea-491f-94f8-197d9fb2ff7e", "sighting_of_ref": "indicator--9466c908-6900-4d7d-ab09-8b89a5b10f67", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266e2e21-ebc3-4def-9647-aa7bf0ebe9ae", "sighting_of_ref": "indicator--b90eec77-c99f-40c5-bf4d-fdb2b4e27d6c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2105e906-abd2-46aa-a7b6-2cf1974552d5", "sighting_of_ref": "indicator--abc70801-86c2-46eb-ad01-b9d928764d16", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8cd717-7ba4-426a-946c-b67895843d76", "sighting_of_ref": "indicator--abc70801-86c2-46eb-ad01-b9d928764d16", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc834e5-c6bf-4737-acef-66f29ef8b672", "sighting_of_ref": "indicator--2704367d-4e9f-470f-8fbd-787289f4275f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61124fb-25a4-42ce-8616-75d8a2afee79", "sighting_of_ref": "indicator--c9a40edc-6769-4b20-8145-ca61532d949a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--253acbf1-4eec-4bef-ac1a-e8b013be9896", "sighting_of_ref": "indicator--5638a4d4-c095-46b6-9ba8-be96a8e3be10", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--735e6b51-3dfc-42f9-a5dd-14190459e1fc", "sighting_of_ref": "indicator--90fcb9d7-c3df-43d0-97d8-9ab893624b1d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0601bcf6-8d66-4141-b9e0-838604e36bb9", "sighting_of_ref": "indicator--bac574dd-fb61-4ef5-8f87-236b94aa2690", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0cd0f3-cf6d-40b0-a144-923b5920a235", "sighting_of_ref": "indicator--34283832-0d2b-4f95-a2aa-e03d72aebcfc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a91b74-0584-4ee7-b5b4-4eededced1ee", "sighting_of_ref": "indicator--0b5ef173-0fdc-4bca-8f52-2a6e2a383a84", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c112923-df2d-41fd-8103-8fe5249c4f41", "sighting_of_ref": "indicator--24612a93-b136-4831-9814-0405c3f2a3d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39f6458-45aa-4483-a853-441a1698cbea", "sighting_of_ref": "indicator--5596026f-a280-4d62-b3a4-e0c2a224e5f0", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6775eda0-505a-4287-a885-ce246f3c227c", "sighting_of_ref": "indicator--0f2c5ad7-2eec-4a79-86fe-09b23e477eb5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae66f3ef-29d1-4d9f-b900-4109c9e55759", "sighting_of_ref": "indicator--451cd66a-1bb9-467b-b23e-e67ff21cd536", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84020b65-10c6-4fe2-bdda-2427b0104f48", "sighting_of_ref": "indicator--ee0d4e78-9c61-4228-8e88-8a76ab68ab92", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe332ef-49c5-4354-be80-7c81593d61fa", "sighting_of_ref": "indicator--05b1a8ab-47e9-417e-a6f9-7c27c03b2a75", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925bd657-1b40-4995-a0c9-e0d03fda3763", "sighting_of_ref": "indicator--c5a62f86-9c53-4b28-9609-50682b177e65", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec65bc07-cb5f-4aa6-9b38-c7a1929b73f5", "sighting_of_ref": "indicator--ac800e4a-de6f-4aa3-86df-9de3c42f411f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--453c0ae7-ead7-4f49-83e2-3922a05e0581", "sighting_of_ref": "indicator--ac800e4a-de6f-4aa3-86df-9de3c42f411f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd579a66-f021-4b35-b916-99ff0b8162eb", "sighting_of_ref": "indicator--76db950c-3ec3-4a0e-97e1-b4106ae32dc7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c928f7-e1ee-4097-bab5-8028342b9a9c", "sighting_of_ref": "indicator--76db950c-3ec3-4a0e-97e1-b4106ae32dc7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69d042f-7b68-434e-a7d5-98d5d179f8be", "sighting_of_ref": "indicator--3e75d66a-d123-41d1-ada5-7e85e8950ef3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e44a42b-1699-4256-b834-2ca639fba793", "sighting_of_ref": "indicator--3e75d66a-d123-41d1-ada5-7e85e8950ef3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5f83df-a233-45a5-8abc-18b860b70063", "sighting_of_ref": "indicator--f9775cfe-64eb-4f19-91b9-fbea60ea948d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4946dc26-966b-4039-863d-78badbf39308", "sighting_of_ref": "indicator--f9775cfe-64eb-4f19-91b9-fbea60ea948d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b58645-53ab-41d5-b31f-685c27d89f8d", "sighting_of_ref": "indicator--48815a1f-f8a1-462b-bf06-61998bde4f86", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2e8a3b-4f3a-4332-9117-e32dcf05d2da", "sighting_of_ref": "indicator--48815a1f-f8a1-462b-bf06-61998bde4f86", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394c2997-fb36-4772-b5b1-68a23baa04ee", "sighting_of_ref": "indicator--23eaf841-96c9-432d-b8aa-ee6dd55a3b37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a32b394-6746-4939-b757-eddcf0486f82", "sighting_of_ref": "indicator--23eaf841-96c9-432d-b8aa-ee6dd55a3b37", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f403d6f2-5095-428a-92f1-0b0be6668382", "sighting_of_ref": "indicator--8d441c7f-277e-4f41-9adb-e0b6cebd7e0e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096385fa-29a8-40e0-b631-e470f3a33cf1", "sighting_of_ref": "indicator--8d441c7f-277e-4f41-9adb-e0b6cebd7e0e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbda3189-72ac-4ce1-940e-020aafc6ea15", "sighting_of_ref": "indicator--f989754c-4b53-4839-b03b-4bf76cc0b248", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f513e991-3ec5-4863-96fd-8b5bcb4072a9", "sighting_of_ref": "indicator--f989754c-4b53-4839-b03b-4bf76cc0b248", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa62355b-ecbc-48cc-9604-e2f42a87ca6e", "sighting_of_ref": "indicator--8c90474b-f3bb-4773-b5f6-5d6db975bb48", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201d8bda-30af-4c08-81ac-610ca5001692", "sighting_of_ref": "indicator--54cf0429-b34f-46f4-ae57-2dac0bf46bb2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc647aff-b9a4-44d0-8c91-c62d58757a1a", "sighting_of_ref": "indicator--54cf0429-b34f-46f4-ae57-2dac0bf46bb2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f969d409-5394-4448-a090-de79f9886c9b", "sighting_of_ref": "indicator--1d1fc395-0549-478b-8d64-e431c04d7ec4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc41d26-db73-4160-bd3d-c471aa1fcf14", "sighting_of_ref": "indicator--1d1fc395-0549-478b-8d64-e431c04d7ec4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d404ed-434e-4d7d-851c-f9e7482ae3d3", "sighting_of_ref": "indicator--8f8ccef7-2a71-4dfe-992a-8177dc3f2e79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d183d2-62a7-4caa-96c5-a699e6104e0d", "sighting_of_ref": "indicator--8f8ccef7-2a71-4dfe-992a-8177dc3f2e79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e803dea8-76b6-492a-820f-dfa5f26acd4d", "sighting_of_ref": "indicator--8a05c2ce-c274-4d2d-98c1-7d97ede7857d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6699c9cc-a0bc-4101-a274-2ff04f8945b9", "sighting_of_ref": "indicator--8a05c2ce-c274-4d2d-98c1-7d97ede7857d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf016d89-d5f7-4e67-981b-04180c7c96de", "sighting_of_ref": "indicator--58f624ed-694d-4957-a8e3-b5344474f0c1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8253c255-30af-4521-bd9c-0375c2eb69a0", "sighting_of_ref": "indicator--75810635-5b96-4a60-ae78-8b15fed00282", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef20725d-733f-453c-a8ad-2f0541fe6400", "sighting_of_ref": "indicator--75810635-5b96-4a60-ae78-8b15fed00282", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f0ddb2-6b3c-40f9-966b-34bc141d5f72", "sighting_of_ref": "indicator--35a1ef85-14bd-4da2-a371-83a1af6bde7a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c308ad36-f1e8-41f8-a5b0-fd7b701d5ab2", "sighting_of_ref": "indicator--35a1ef85-14bd-4da2-a371-83a1af6bde7a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b25ba0-aea3-4d4c-b397-9466092c2031", "sighting_of_ref": "indicator--e0f663c3-529d-4f07-abd1-647f7823fa11", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1755f9da-17a6-4ffa-943f-2af4f6e92b36", "sighting_of_ref": "indicator--e0f663c3-529d-4f07-abd1-647f7823fa11", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c77041-6f6f-471a-bfba-0db036e1bae3", "sighting_of_ref": "indicator--3e872d41-c3c3-403b-b31e-bd0bdf84be9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38210417-a592-4e42-9234-a3951443a264", "sighting_of_ref": "indicator--3e872d41-c3c3-403b-b31e-bd0bdf84be9e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29276fb7-4e35-464f-84c4-88b03a207334", "sighting_of_ref": "indicator--d6dc0bd2-fe13-466e-9fcd-f04a879479eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae53f2b-b4cb-4758-aa85-623438bc98de", "sighting_of_ref": "indicator--d6dc0bd2-fe13-466e-9fcd-f04a879479eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94ded8e-7aff-4e11-8284-859057ac5657", "sighting_of_ref": "indicator--65e6bb8e-8778-436b-8f2a-55e712c495f3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c794f1e8-d2a0-41e3-a4bc-8021489b8cac", "sighting_of_ref": "indicator--f1330e8a-ce36-4441-9665-bcc02c5a4e16", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9ba950-18f6-469a-9e68-200e477a4da2", "sighting_of_ref": "indicator--f1330e8a-ce36-4441-9665-bcc02c5a4e16", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39dbb380-9c5b-4693-9770-859e7138b3cd", "sighting_of_ref": "indicator--a45105f3-7777-4e22-829f-fe32dd93f979", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8009f9c-26f7-489d-825d-2a4d12787db8", "sighting_of_ref": "indicator--43910f31-abad-446d-9909-afa380fc7e86", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f28aa28-05f7-4088-a9d3-d0cc22203a3e", "sighting_of_ref": "indicator--43910f31-abad-446d-9909-afa380fc7e86", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72421ed1-3283-42bb-b5e7-546c4aa31277", "sighting_of_ref": "indicator--4e2fceb2-a927-4481-a4d6-9eb9f9707c39", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cecd9d0-ad90-492e-976d-b85cb6c5ac38", "sighting_of_ref": "indicator--4e2fceb2-a927-4481-a4d6-9eb9f9707c39", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfe387d-5d4b-40e7-a169-0b4457ebbf2f", "sighting_of_ref": "indicator--b1529a54-5b38-46b6-948e-fb5ad264ab78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8a8d0c-f0f0-4e5d-8e2b-90bf851349cf", "sighting_of_ref": "indicator--b1529a54-5b38-46b6-948e-fb5ad264ab78", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaaddee-b7a5-4240-a9f7-248ed9b72471", "sighting_of_ref": "indicator--9e8eabe1-38f3-4936-b9aa-2a9c8eee497a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99477f9b-cb32-4674-9715-cce617d17d70", "sighting_of_ref": "indicator--9e8eabe1-38f3-4936-b9aa-2a9c8eee497a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8648bd-c6d9-454f-8fbf-4666cdf97798", "sighting_of_ref": "indicator--ffeb89c8-44bb-4559-b592-751cc84d0fda", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8344db6-9256-4a59-bc63-a0d9b561ac2b", "sighting_of_ref": "indicator--e26c3122-1b96-4f38-9f83-a2f066c4e544", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7068390a-aa9a-4433-96e0-1b8c0d8213ed", "sighting_of_ref": "indicator--dcad4658-d9fe-457c-8a2e-a9fed0b86593", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e04c2b4-94ec-4eda-bc95-384ae8cb7ca8", "sighting_of_ref": "indicator--8d867e1d-6289-4cc3-8265-60bb92ee24da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9d998d-cd15-4efa-87a5-dc37faad0105", "sighting_of_ref": "indicator--28536d9c-5110-4108-ba7b-291ff169e9b0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e7114a-74eb-40ae-8827-d6b84819b7e5", "sighting_of_ref": "indicator--0b9e69a1-ab0e-47a4-9d92-e16bc9f9554e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b8cc7b-fd71-4ac3-b6aa-ec50065ec760", "sighting_of_ref": "indicator--0b9e69a1-ab0e-47a4-9d92-e16bc9f9554e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd4fc71-eef6-4a12-99d4-0adbcf702d35", "sighting_of_ref": "indicator--b172640f-d712-4c43-865c-72dba5bd38a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08a60b64-6415-4be8-9f18-2da086e7268a", "sighting_of_ref": "indicator--b172640f-d712-4c43-865c-72dba5bd38a5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58d17db-8d05-481e-9f84-4175e0963065", "sighting_of_ref": "indicator--265d26e9-46f8-42b8-87bb-8272035bc52c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460fe6ec-1e7b-4df4-9389-0da357226e4e", "sighting_of_ref": "indicator--265d26e9-46f8-42b8-87bb-8272035bc52c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd093c6-3354-4bd4-b4c6-ca8868302fff", "sighting_of_ref": "indicator--3b36c44d-653d-4337-ad65-50a4a56c85b3", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8535a9a2-2e96-4eef-8e01-454932f6934b", "sighting_of_ref": "indicator--e41b022d-14e4-4b03-9277-bfb027ac75a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a340adb8-cc62-4790-b2d2-ccbb43b7b285", "sighting_of_ref": "indicator--14b0e790-dbf3-4c41-9d05-2b697921eca7", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6883f76a-b34c-4c46-b4a3-47d17edae504", "sighting_of_ref": "indicator--fdde8035-0bde-4a57-bcae-8d217f66934f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0c19e5-c1d6-45ef-aeee-df4157773c3f", "sighting_of_ref": "indicator--fdde8035-0bde-4a57-bcae-8d217f66934f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385b7aaf-dc2b-4657-aa86-406023a817c7", "sighting_of_ref": "indicator--06ba1413-8152-47c4-bab4-c1d49471deb8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a291dd7a-3268-4027-90a4-e3bdb0f30e79", "sighting_of_ref": "indicator--06ba1413-8152-47c4-bab4-c1d49471deb8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b566ec0-c88a-4832-adb9-079be05b708c", "sighting_of_ref": "indicator--b2b290c3-d885-471c-bd31-7246e34ac748", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--243efc20-cb87-4f6c-99ba-9a6745f11147", "sighting_of_ref": "indicator--b2b290c3-d885-471c-bd31-7246e34ac748", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3000707c-6b27-4079-bb09-04940f92214d", "sighting_of_ref": "indicator--1114958d-a9b3-4814-ae18-8823b35dbc9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cc063a-51ab-4f93-afaf-d4a0bad9800c", "sighting_of_ref": "indicator--1114958d-a9b3-4814-ae18-8823b35dbc9e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ca93fd-db69-458d-afc1-779946171b53", "sighting_of_ref": "indicator--4049475b-b018-4967-b5ea-b408b204911f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7ce347-1c3c-412d-8653-87931301f72c", "sighting_of_ref": "indicator--674c59d1-44ce-4f48-9b66-53b67882d217", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea10cc5-2877-4ed6-a5d5-ff8536b2f50e", "sighting_of_ref": "indicator--c7297348-d9b3-4c7a-b42e-d54eeb89d76a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2669dffc-791b-4dba-8f58-a758cb2a1866", "sighting_of_ref": "indicator--bfd07c5a-1689-4db4-b1b3-c8a41c87712a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3c789e-b1e2-427b-9465-36c5d90514cf", "sighting_of_ref": "indicator--b052bfb1-22f7-456f-bd15-2b80781df3c5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0714e386-f3bf-48a6-a4d6-73909697b371", "sighting_of_ref": "indicator--0b75776d-ce77-40b9-a9e0-55642e10203e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd92fb74-8723-4b26-b0dc-80c36f96b946", "sighting_of_ref": "indicator--5c676482-6008-437c-aafc-9ebfb758c434", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0623b513-8b15-49f3-a3bd-d0fecb07f0a6", "sighting_of_ref": "indicator--c348bc53-e111-4ea2-9dfa-f87ef1a13108", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc8e091-b5dd-4d14-92e6-6d210aa913f0", "sighting_of_ref": "indicator--240623a7-cfe9-42b1-b41b-be984645837b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963e4be1-52bc-4350-8f18-4d3dfb81b97c", "sighting_of_ref": "indicator--240623a7-cfe9-42b1-b41b-be984645837b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ef34b2-3832-40e1-926c-566484d47a4d", "sighting_of_ref": "indicator--a2de0c13-094b-4dbe-b59e-a4974cae1b26", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a923b245-c85a-46b2-9c35-39dbcca3800f", "sighting_of_ref": "indicator--a74467ce-47a8-430b-9b3c-f86e30e8d882", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04e4d62-251f-4553-8111-ab0aeb814e52", "sighting_of_ref": "indicator--881ace7f-c686-42d2-b101-ac4e89764191", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca1202a4-88ae-4816-ace5-7c3a8bcecfa3", "sighting_of_ref": "indicator--1d6c26e8-1cd5-4924-995f-14e76f25efc2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3b79b7-c163-4444-8ffc-26b69adad08a", "sighting_of_ref": "indicator--b0510157-0d78-42bd-b631-021c9b739010", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d35fcc-073e-434b-8b59-9278d4f8e94a", "sighting_of_ref": "indicator--e69b906b-af8d-42e9-af2b-a44318c03fb4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6029e17c-27cd-4d4e-96d3-9363d74187c9", "sighting_of_ref": "indicator--e69b906b-af8d-42e9-af2b-a44318c03fb4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7c3bda-4033-4997-a541-85d789d7163b", "sighting_of_ref": "indicator--e0261860-69d7-4ede-869f-693b4500d90f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bdec48c-c92d-44f0-b48b-f1771141e810", "sighting_of_ref": "indicator--f8810c72-cd75-4d5e-bc2c-164058e03c17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4637602e-a631-4a04-8866-9aa30044698e", "sighting_of_ref": "indicator--8d0f9751-9e8a-421f-81cf-48bcfb0d556d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e8ef69-1253-4f6a-81b1-ae73a9a16f38", "sighting_of_ref": "indicator--e5ad9c92-1882-47d1-a598-095c18639d70", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d687b0-4ce0-4b4b-a568-2c9425d08477", "sighting_of_ref": "indicator--c4c5af0b-9762-4369-a92c-7f834d4d4668", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7fe36d-d1b5-4d74-a4fe-bd2c64ff8141", "sighting_of_ref": "indicator--ac375074-5668-48fd-9f12-4b5133cadd04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406b4c4a-428e-41ed-9323-110150bf2b93", "sighting_of_ref": "indicator--1bb32660-a1ae-4cb0-9de9-a527c1d1c2b4", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9cbd59-1b19-4e80-8ca4-04aaaa7d5e8e", "sighting_of_ref": "indicator--68a95a9d-6feb-472a-83da-9d1618e6fc30", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc1fdbc-4336-4b37-93d2-7609f8f0481c", "sighting_of_ref": "indicator--5eb4463e-1897-474a-8c82-ef49fec7a48c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f5176b-e7d6-49dd-980e-b5151205c67b", "sighting_of_ref": "indicator--aca3d075-84f4-4b08-bc8a-231065472694", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d29b2a2-29f2-4d26-bbe6-a9c3afe3ff91", "sighting_of_ref": "indicator--a15e1369-94ad-4fd5-b6cb-091a63f185a2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3589dc2-6b1a-4012-892b-f82f9d833937", "sighting_of_ref": "indicator--f8ea1575-e698-4619-be68-bcb0a9231293", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c959dc1-2a63-4020-84cf-240b149bbaa7", "sighting_of_ref": "indicator--0edeff63-d73b-4563-adc5-f5aa39f1a7da", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dda92fc-468e-4747-99bb-aa069cdd8170", "sighting_of_ref": "indicator--12bbca50-c790-47cd-b07a-a1c6ba1d03db", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604faab2-fe23-4546-baa9-8e6e1d942e0b", "sighting_of_ref": "indicator--12bbca50-c790-47cd-b07a-a1c6ba1d03db", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b89467e-913d-41a1-9093-2364b2ea9ddc", "sighting_of_ref": "indicator--daebbc73-cd2c-49b5-822d-967ba1c9c1f2", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e9e1bc-9372-4a4a-849d-3d68856d182c", "sighting_of_ref": "indicator--f751ba7f-c9ce-41ec-b32e-38e096f7a898", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7e9edc-9595-4d4b-9969-e30b87985318", "sighting_of_ref": "indicator--63a4d92b-9564-4b1c-99e9-4fd69319d9da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaef5b18-867e-4f04-9f73-462ac2cc6646", "sighting_of_ref": "indicator--3536a734-7f47-4c07-9425-ccd7e8bc0ea0", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f42fc0-5a1b-440b-b323-63bf9d2849e3", "sighting_of_ref": "indicator--649acb8d-4786-4781-a771-8c18e4819ea6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3759e29-cc9e-476e-a677-189c26d70750", "sighting_of_ref": "indicator--43ad9f76-42ae-43fd-816a-e0429356c1a4", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67eadfaa-cfc4-4e22-8217-0a2b1f1c8643", "sighting_of_ref": "indicator--a7afd47e-516e-4b4a-8e77-09bdbfd01492", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28e99ca-a086-4277-8889-de06fd462e89", "sighting_of_ref": "indicator--aec76ae9-7920-449b-938e-d3f9b1ee66f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401f94e5-2d5f-427a-bee9-c7c2aa03d0f2", "sighting_of_ref": "indicator--9d24ec76-f8dc-4a27-b7f1-7cd2bed7d114", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97b7aa6-c797-45a6-89d9-56687bc6679a", "sighting_of_ref": "indicator--6cbaab66-53f9-4a2e-af56-9ca136384977", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21635a8-40b6-4bd5-8b30-2008c5b69db3", "sighting_of_ref": "indicator--9a765342-7c10-4a1a-96d4-440f063ec8b8", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da4ff4c-5999-4573-a8a2-63733a83e2f1", "sighting_of_ref": "indicator--d73192e4-94d2-4868-9565-d1914a417c01", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c1dadf-ba78-4699-a8de-dc7ee8aed0a5", "sighting_of_ref": "indicator--a781f5da-dcbc-4639-9bac-7ef598f87d34", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3c1dcc-c705-4dd0-9654-d1601f1c96df", "sighting_of_ref": "indicator--73ba3e58-bfa5-4f0d-9843-0952bc53ad16", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa98f9e2-77fa-4f83-ad25-151975bb942b", "sighting_of_ref": "indicator--73ba3e58-bfa5-4f0d-9843-0952bc53ad16", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--540e085d-a5ba-4226-bd04-ad441fdf60f8", "sighting_of_ref": "indicator--2614a4f5-9e2e-40be-9b8a-fba584511a60", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49096fa8-30e5-408a-a1d0-39bd39aaa909", "sighting_of_ref": "indicator--69cbcca2-68a0-47a4-a7b1-aeab2feaccd3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5f529b-1748-4da5-95b6-3c6292c60b48", "sighting_of_ref": "indicator--44a1e489-ba58-411f-953f-dc000f1f0952", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e05b914-290a-4969-872a-395d2bc1a1b1", "sighting_of_ref": "indicator--e7e32948-77e6-4619-8093-b06f80e22a51", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eec0d76-23c0-44d8-892e-0118876e882b", "sighting_of_ref": "indicator--e7e32948-77e6-4619-8093-b06f80e22a51", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af40523-2d24-4edd-a6a8-7fdccf6f88c6", "sighting_of_ref": "indicator--ee4f0219-11f4-4d12-a2b0-f04fe1873f49", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacaef53-5e90-49aa-989c-b6c49f6d148a", "sighting_of_ref": "indicator--dc112fef-a651-4537-9fb0-a91de99c24c4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d4219a-fdda-4019-b0e5-d80c8c2424ab", "sighting_of_ref": "indicator--dc112fef-a651-4537-9fb0-a91de99c24c4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa424d32-a3fe-4229-a6ce-0a40be095e48", "sighting_of_ref": "indicator--413a1809-d1af-44c3-ba65-e5f26049b8a1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96ea29a5-cf4d-4a37-a94f-c89cd3792bdf", "sighting_of_ref": "indicator--e850992b-d88a-4529-a486-9796af7dc7ab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f52f3d3c-2319-48e1-b4a9-59e765fd16ba", "sighting_of_ref": "indicator--a2336045-9b55-45ad-bace-836e12b82256", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ace7114-c3f7-410a-9a2e-674e06c6edb6", "sighting_of_ref": "indicator--4df5da72-0625-40c9-bfc5-dfce5278cee9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62fa6ec-3bfe-44d9-83ef-790a791ce0b6", "sighting_of_ref": "indicator--458ad36b-efe4-4717-9ba6-b21c191d4bcd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ea334c-3503-436e-b093-750c6fe0b5a9", "sighting_of_ref": "indicator--4b48f2be-2d39-4b80-8967-baee2aeb77c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc55789-b6f9-44b7-8676-a6a66da71aa6", "sighting_of_ref": "indicator--f93fb998-02bf-417c-b6ea-37fc94ab4297", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9662f1a1-f418-4a2a-9d06-819a6c887e7c", "sighting_of_ref": "indicator--f4fa8d02-0388-42ae-9e41-69f4a7f30632", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963b24e3-0782-4721-b4da-3f7d004f6792", "sighting_of_ref": "indicator--20bea89e-28de-47cc-8e95-679085806a25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a71b55-e088-4878-bf7a-c6aa92b51e77", "sighting_of_ref": "indicator--2be12932-e633-4103-a6f3-3671cb95bc0b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41d4d7d-8e59-43e7-8d7f-3667ff3839cf", "sighting_of_ref": "indicator--2be12932-e633-4103-a6f3-3671cb95bc0b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded89377-7f71-42da-9e50-9d44a254a050", "sighting_of_ref": "indicator--c9dbe5bc-897a-4245-a265-179287964277", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c222bdc3-b8cd-4e93-ae22-f77cf1a8ffdd", "sighting_of_ref": "indicator--c9dbe5bc-897a-4245-a265-179287964277", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca415a85-925f-4d4b-9ff0-c7225c314aa1", "sighting_of_ref": "indicator--05745d22-3b3f-4afc-aa0b-95d8a50d2b76", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ef0c366-8a98-4620-ba1a-ee23dbdde0b1", "sighting_of_ref": "indicator--b7485030-b287-40e0-ada3-754c7e8d86c4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72697911-c956-4d48-820f-4f9be7e2b433", "sighting_of_ref": "indicator--b7485030-b287-40e0-ada3-754c7e8d86c4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887da265-6171-4a1b-963d-5ee14217ac16", "sighting_of_ref": "indicator--cb70c70e-6f2b-4a59-be7b-38eaaa239b3b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2493b7-184b-4812-86d9-b4453e67392e", "sighting_of_ref": "indicator--16396833-ab0c-4027-a126-0f0acd89e01f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d131a2-ea28-483b-a93c-dd449c211849", "sighting_of_ref": "indicator--16396833-ab0c-4027-a126-0f0acd89e01f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a17fc1d-35ba-4c4f-a84f-0421dea4b40e", "sighting_of_ref": "indicator--00d35532-b56e-4be1-a78f-1d72e63a9a4b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eadc7b18-400c-42ae-905b-5d47ffe5113a", "sighting_of_ref": "indicator--81d28b8b-35f8-4c07-83f0-78142b2baa79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f8408e-346a-4a0c-8834-45a9064f95a5", "sighting_of_ref": "indicator--81d28b8b-35f8-4c07-83f0-78142b2baa79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e10142a-2d65-41a9-9d65-6ed6144dbe62", "sighting_of_ref": "indicator--29c652b9-a58b-4eda-ba51-6735c03b91fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c742a354-6ee2-4549-8c3b-ea7194ee936a", "sighting_of_ref": "indicator--3905865e-3dc5-477b-90f9-e00c3e37cba8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd904c21-efcc-4b4b-a451-2fef4f782b3e", "sighting_of_ref": "indicator--c2fd201e-89fd-4ec0-a053-9bdbd377afea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db22091a-ba6e-4c50-ae8c-243c8ace826e", "sighting_of_ref": "indicator--58364cf6-caec-4f55-b24e-8dcc4b36967a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125bc6b9-28f3-425b-a32b-b58f5d79eaac", "sighting_of_ref": "indicator--c0b9dcdf-dd3f-4f22-80f9-f122b625c6dd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1aae24-41c3-48a5-ada0-5cc9aba61850", "sighting_of_ref": "indicator--6f861143-687f-4ddf-82f2-eb7b728589a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8ddf67b-2ee0-4d48-becb-5a36b31451d2", "sighting_of_ref": "indicator--b632eef4-5f95-4d32-b42e-9099ce356a04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483fa44a-b0bb-46a3-a08d-2378ad75cce4", "sighting_of_ref": "indicator--5ecd77ef-7188-45ad-baa1-b57f3ed45d8a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa639ce0-a498-4d6f-8c3d-ed7f1865908a", "sighting_of_ref": "indicator--1916d004-d404-4a0a-a907-81dca2c8692f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa23d24-f7d5-492f-b3fc-34f67c144d58", "sighting_of_ref": "indicator--4fe43b64-ff02-4c60-a5af-4c9da762fbe5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f17d05-1b88-480c-8cee-fb2408022096", "sighting_of_ref": "indicator--3389ae9d-7a2e-467b-8ab0-d630a242662c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ef3951-5521-42a1-8d51-fadf7305164a", "sighting_of_ref": "indicator--ce6d3221-4624-48ff-92cf-232b3b5483f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb00c14e-cb41-4339-879d-75f20d98abd9", "sighting_of_ref": "indicator--fdb8510a-e8d4-482d-bac9-b9d61e4a7793", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4246f1d-2ce7-4dca-b53a-83042821c785", "sighting_of_ref": "indicator--2dad1be3-56d0-4fa5-9934-31471db14ee1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d13479f-1587-4971-ab70-1ee30dc7a920", "sighting_of_ref": "indicator--f6756296-100f-4e88-bb28-b74a5d3a20fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7f686a1-a22c-41dd-9c79-de2bcd8c64a5", "sighting_of_ref": "indicator--f6756296-100f-4e88-bb28-b74a5d3a20fd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2b27a4-83c6-4641-97c7-d83879ae8ffe", "sighting_of_ref": "indicator--8a7d2fc7-86f5-44bf-9b9f-b492014b08e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8918ccaf-31a1-40c2-92a0-c52804bf06c5", "sighting_of_ref": "indicator--1dbae941-4093-4dac-b176-8f97bbb59f70", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77ade36-7ed0-4c93-91b6-5b4ef5902385", "sighting_of_ref": "indicator--559751b8-d2dd-4faf-9804-21190044e1af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4822f13e-cbd8-41a0-ae41-bdddb573b875", "sighting_of_ref": "indicator--85fcaa61-aae8-4cd9-b563-d0050fa339f5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ffcd933-5fc2-4e2c-abcf-7c9980772aef", "sighting_of_ref": "indicator--e12d22f3-fb03-4cfc-b645-86e03f30885f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26b04c9-8673-437b-8d3f-755ff138170f", "sighting_of_ref": "indicator--e12d22f3-fb03-4cfc-b645-86e03f30885f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09573a1d-9b02-45e2-af80-ff25828657fb", "sighting_of_ref": "indicator--2f31c1b0-e16f-4ad1-905f-9a17e5c18003", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e470e5a-167b-440f-b379-3febec770a55", "sighting_of_ref": "indicator--ee9a5c29-8133-489a-9719-4b95cc57336d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce465d3-0479-4c23-82bc-5ad0594c84e8", "sighting_of_ref": "indicator--1e4cfc28-c24e-4c3f-8c78-008d361894cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b72f21e-c55e-43ea-a213-0ac8ea528c56", "sighting_of_ref": "indicator--1e4cfc28-c24e-4c3f-8c78-008d361894cf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1c5e9e-6121-4a43-9de7-742520879716", "sighting_of_ref": "indicator--cf663083-6e13-4495-8386-bdc5a7ab1b85", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0322a32-c7a3-45e2-96bc-45e86874f52c", "sighting_of_ref": "indicator--cf663083-6e13-4495-8386-bdc5a7ab1b85", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affe4370-7b6c-4437-b92e-3d5656e54f91", "sighting_of_ref": "indicator--bb798cf8-2bc7-4b1d-a3ab-20462ccd789a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b701f4db-8a20-4cb9-b963-9753392348ac", "sighting_of_ref": "indicator--bb798cf8-2bc7-4b1d-a3ab-20462ccd789a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca85426-44b8-4205-97c8-d6399256e7d4", "sighting_of_ref": "indicator--a9c3b185-1bd0-4306-a627-a3992d297728", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf72a1a6-3888-47db-baa5-31e6bd92ec9c", "sighting_of_ref": "indicator--fa5afbfb-9a7a-42b1-8729-bd5ef2919954", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645f727b-00bb-4e0d-b069-c993289c5853", "sighting_of_ref": "indicator--fa5afbfb-9a7a-42b1-8729-bd5ef2919954", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c200396-3416-45a2-af45-69f936cc7bc9", "sighting_of_ref": "indicator--dd752a54-ce83-46ee-a443-a24ba5bc7ecf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac5dc21-e3f0-4877-bcfd-d54d3f7ba5d6", "sighting_of_ref": "indicator--6e45ae80-6605-4b18-99fd-803d47a52d60", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec84223-173c-45b5-845a-99c35554878b", "sighting_of_ref": "indicator--6e45ae80-6605-4b18-99fd-803d47a52d60", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc007e8-db28-47c0-905f-3265b1a31e83", "sighting_of_ref": "indicator--56c2db85-4b29-43c3-b205-2dc90223202f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1286b5c-875f-43db-908b-9a68329b0665", "sighting_of_ref": "indicator--a83cdc5b-cf36-46a9-922b-73a56122c28e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b325935-8f4d-49c3-bb0f-bd3bb704e179", "sighting_of_ref": "indicator--ece491d6-1ad2-4a96-9115-17090a60dd5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fdf04ba-01b1-4bc6-b7ec-21ac1622cfeb", "sighting_of_ref": "indicator--cff440de-d116-46f2-a4d3-fb05245bc657", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9769ec8f-1f67-477f-98c5-f85909d528dd", "sighting_of_ref": "indicator--4014118d-23a4-4a97-8b40-b9da184bd8a4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f94eb3b5-4764-4c55-a386-5d6bf3be48a6", "sighting_of_ref": "indicator--1464ff0e-8c53-496b-8e6d-accee42a1c5e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6771ad9-cadd-4bbb-b9a3-391b4ad2aa4c", "sighting_of_ref": "indicator--51707feb-f1e3-43cf-82f1-807c840ea303", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96da5eb2-1618-4844-954e-456c45d7481c", "sighting_of_ref": "indicator--93d3b51d-6eff-4ad7-bf5e-8760ac98b85c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29fd68eb-fcd0-42a1-8530-bd00a0113688", "sighting_of_ref": "indicator--50c9c062-2cc2-4b19-9523-d6f4e8f44e10", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09d5630-48bd-4b9f-b3f3-fd6cdb6a2be8", "sighting_of_ref": "indicator--afce9c30-6d0b-4c83-a624-fcfad5f76a05", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b41b598-1bf3-4ffb-843d-4777b881bc82", "sighting_of_ref": "indicator--afce9c30-6d0b-4c83-a624-fcfad5f76a05", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c12351-c5fa-42b3-9c30-d5dc045c818e", "sighting_of_ref": "indicator--a26f5b16-8a44-45d4-9714-498db82a8ecb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a177b00-1ff4-46b8-9497-931a23e06564", "sighting_of_ref": "indicator--5f88ed4c-a0fe-45c1-80bf-4b1e60deba0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21eade5a-2907-4c7b-822a-290eb609ee8f", "sighting_of_ref": "indicator--6e1d3b53-b9db-4d1f-a442-98b272b3e40b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--406f4477-ec1f-470f-a9f0-37bddd8985c7", "sighting_of_ref": "indicator--f14409f7-65f3-45ec-abaf-6063970f2ea8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d29ca16-3607-4ef1-9f01-c7f48296a825", "sighting_of_ref": "indicator--0ef74838-04d4-49c6-9d6e-7965b484bf38", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e418cd-8791-4d21-be84-1d73318016bf", "sighting_of_ref": "indicator--fb3e76d7-3b7c-4b02-b6ff-39aa0d38d6b4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b024fc-e6a8-4112-88ee-90591811e840", "sighting_of_ref": "indicator--e0abd524-35c2-4456-a3b3-2c7d1bee9d14", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761c5491-7706-40ab-8894-ceba947bb19a", "sighting_of_ref": "indicator--5f7e990b-6ef5-40d6-8b7a-79f33cfb270e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9695c2-e7f9-4ce2-b29f-807a780bdad5", "sighting_of_ref": "indicator--5f7e990b-6ef5-40d6-8b7a-79f33cfb270e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04757608-65e3-4cb6-8acb-34d7d722ca4e", "sighting_of_ref": "indicator--3f86b250-8e64-44b6-9ecf-7a1f2d25611d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e04422c2-a99f-4ba4-af60-9dc8aa539516", "sighting_of_ref": "indicator--3f86b250-8e64-44b6-9ecf-7a1f2d25611d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271760dc-2b74-4ceb-864b-b47b59ed2290", "sighting_of_ref": "indicator--46a61e6e-88b9-466a-b655-3b8fde57051e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5724dac3-13b8-4fbd-8451-3a65bcaddc76", "sighting_of_ref": "indicator--46a61e6e-88b9-466a-b655-3b8fde57051e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69efc036-2fe4-42fd-8a46-49545f495eac", "sighting_of_ref": "indicator--8a580f94-e7bc-44be-b7cd-aff348b9177a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7d4bdf-d29b-40fa-9b4c-7d2e6aabc67d", "sighting_of_ref": "indicator--6f722dda-7c56-4045-be08-a6cb0a553713", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508ab607-b05b-42ec-b241-c68c804dc9d6", "sighting_of_ref": "indicator--e4e31f2d-a753-4cbe-ba7b-1ea86f7dea07", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db823454-f26a-441d-bd0f-d59c6fdfa804", "sighting_of_ref": "indicator--78796cab-eaa0-444d-ae7d-40790c0716c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69fd5b6-63de-432d-ba18-9ecbc8c7e1d3", "sighting_of_ref": "indicator--de1d1ab3-7127-434d-bf2f-7c05ffcd9b29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ffe89e-3eef-482e-9e6d-64a5bff006b8", "sighting_of_ref": "indicator--e0a486a0-7ad0-4fad-85bd-08783ae1fb8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4839041-40a9-4d6c-a32d-c50fdaa1acf8", "sighting_of_ref": "indicator--0b52906d-0173-4f3a-abb6-99c80476ec0d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e6d780-2722-495b-88b3-650934321f6c", "sighting_of_ref": "indicator--f20a7246-9cce-4c56-be86-777521918a3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963858b6-e4ae-4fb1-a81d-163467153541", "sighting_of_ref": "indicator--e5f31ade-88fe-444a-9201-c1d4d48e5802", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe855ad-41f1-416f-9823-8659322056f9", "sighting_of_ref": "indicator--e5f31ade-88fe-444a-9201-c1d4d48e5802", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49d26d46-2ccb-49d7-b42c-0f1088d5fa15", "sighting_of_ref": "indicator--83ddf469-ab2c-4479-9d46-f5769e0809b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77ef6924-ddec-4d46-9683-97cad11d576a", "sighting_of_ref": "indicator--623217b9-3a67-438c-818d-251e78a1b6a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa38717-f1ae-47cd-917c-a5befcc3e167", "sighting_of_ref": "indicator--00db8548-3b4b-49b1-b220-f308529942b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb31c64-52c3-4dae-b403-52b37fd76905", "sighting_of_ref": "indicator--eb2f68b9-6d25-4564-b5c8-5a52fbe463e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eff2359-9508-45d8-9668-8ad0d1d17895", "sighting_of_ref": "indicator--0cd8d05f-ea56-498b-86cc-620fb0efa252", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4367228-1337-48ae-8a92-53960c70a0fb", "sighting_of_ref": "indicator--0cd8d05f-ea56-498b-86cc-620fb0efa252", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba7bfa0-fe76-47a6-b5a1-b294cff4b310", "sighting_of_ref": "indicator--4f4ada6d-dabf-495e-8d21-58a6cf53003b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6fab37-549b-46bc-ad04-334efbd4edcb", "sighting_of_ref": "indicator--0b3a3387-3ab8-4a4b-ac56-5f4b1fbd9c9d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56001759-27b3-4a9f-84f7-098c1c32390b", "sighting_of_ref": "indicator--26d0990e-c920-494b-86c8-aba3231ac25f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feced580-92b6-476d-9f1d-6eef3e87e184", "sighting_of_ref": "indicator--a00e7e90-f945-4cd8-8b91-47d8d88feeed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea64eff-e69e-43c0-901a-8cfab9f9cf07", "sighting_of_ref": "indicator--b51e6484-f53f-4fa9-b9e7-83437bfd583d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9120da33-d6de-4dfc-992e-946e4b803970", "sighting_of_ref": "indicator--b51e6484-f53f-4fa9-b9e7-83437bfd583d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b8926d-d0ef-45da-b16f-6b6f1c040191", "sighting_of_ref": "indicator--c233f9af-2651-463c-b6c6-59321be725f7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef34a19d-2abb-47e3-80bc-85ec3c453653", "sighting_of_ref": "indicator--b478e862-1e03-4213-96d0-07bef60f96a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1cbef46-bc64-441b-ac1d-a3534d86352a", "sighting_of_ref": "indicator--f15da2c2-8d1a-41ba-a4f2-a818148b5490", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7240dda-b9a2-4ea9-85d3-f0d4147c10bf", "sighting_of_ref": "indicator--f15da2c2-8d1a-41ba-a4f2-a818148b5490", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11effb21-47cc-45b9-a613-38ec75aee177", "sighting_of_ref": "indicator--f15da2c2-8d1a-41ba-a4f2-a818148b5490", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461d90ab-fc4a-4b8b-9c76-55ebd5d40518", "sighting_of_ref": "indicator--7359f6b5-c71f-4e57-93b8-e96c1e679d45", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40173897-a76d-4768-a2fa-28feee6f5525", "sighting_of_ref": "indicator--62bb09a0-2ef0-442d-bb8e-d3f629d650fb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73ee63a-2f59-40af-b8ab-007e1092fb5b", "sighting_of_ref": "indicator--9832b1c6-8bdb-451e-9dd2-b7e39da3f2ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948d9b24-59e2-46c8-a215-11976cef9b87", "sighting_of_ref": "indicator--1b833bef-3269-4eae-be33-f30b61b8ddcb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c93157a-3fa1-4bac-85cd-ac20c55e613c", "sighting_of_ref": "indicator--b5893d56-cf34-43c4-8f58-04943115730d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cdf8f2-076c-4b34-a400-832ed7d77e93", "sighting_of_ref": "indicator--b5893d56-cf34-43c4-8f58-04943115730d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1846ba8b-0b84-4050-960b-4803b2389e3f", "sighting_of_ref": "indicator--be36a69c-575c-4ea0-9024-869de9cd1ce8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ede4b7-e348-4811-8bc7-fce384cba58c", "sighting_of_ref": "indicator--acaf1816-d1e2-4cfa-8509-3ca81fb54cd0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2b7823d-25e3-4f7e-951b-4e6605c535ce", "sighting_of_ref": "indicator--acaf1816-d1e2-4cfa-8509-3ca81fb54cd0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a083314-004b-479f-ba90-8409b112995f", "sighting_of_ref": "indicator--469639d7-600f-4c78-a723-58494405d97e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74323569-d8c5-47d7-859c-249f8183ae87", "sighting_of_ref": "indicator--37218f54-284a-4496-a9f1-c95352da000d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ce61b6-5a31-42ed-b75e-e2c42131b62d", "sighting_of_ref": "indicator--e0ccccc5-21aa-4960-bda3-1b757de90864", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c393b37-d5a3-49ea-b3c1-24d2427f4e54", "sighting_of_ref": "indicator--cffd8ffb-5b16-4db9-883f-d01a5d478076", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b8f77b-0940-403f-a3d7-e88d31fba86e", "sighting_of_ref": "indicator--78de3206-b989-4506-ac29-5e3a24b6824c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29c6dbd-4bd4-4ca1-a23c-7cc65ad63840", "sighting_of_ref": "indicator--78de3206-b989-4506-ac29-5e3a24b6824c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95dc4e43-cda4-4ec2-b633-a51f7da1ddb1", "sighting_of_ref": "indicator--240e4ac0-2fec-43dd-8f93-c506de4d37a2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7230b28-5a5e-4277-a0f1-22fb88ddb685", "sighting_of_ref": "indicator--d64e7d8c-6064-4e9e-a23d-de61c557aa54", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22500fac-d300-4b82-9a08-d62477b98307", "sighting_of_ref": "indicator--648dcb45-6c21-4d43-9e85-7c354f3cdaf2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eb692ef-517f-41ac-bc4a-4a55171d80b7", "sighting_of_ref": "indicator--ec87f249-8703-4602-b2f5-c5f6d7366b16", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83e9d93-265a-4fa0-abb6-07385452c861", "sighting_of_ref": "indicator--3fc4ac00-e8fb-4a9f-a6db-c8ef51f064bb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c7c01f-c584-4214-8d2b-ce8257a0bc91", "sighting_of_ref": "indicator--07fadda1-39a4-40f2-b299-c5102863552a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd35fd98-1a6f-4d63-8f93-fe2b949e130b", "sighting_of_ref": "indicator--0ee0dc7f-ae73-48fa-b846-20489f32989b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957fe031-7a8f-4179-b836-1865794be4b7", "sighting_of_ref": "indicator--a663a3db-c7fb-4592-92d7-f42dff01ec78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2ccdc1-50c7-4c4f-8508-03b2348f91ec", "sighting_of_ref": "indicator--a663a3db-c7fb-4592-92d7-f42dff01ec78", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a3ddd7-a920-4cef-9340-5db1721090a7", "sighting_of_ref": "indicator--b1fe81be-2c4a-4ad9-8cd8-59503a053694", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7b9707-27f2-46ec-9d82-1e4061562f8b", "sighting_of_ref": "indicator--b1fe81be-2c4a-4ad9-8cd8-59503a053694", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f1e3de-cb51-4a15-9030-51cd6caad90a", "sighting_of_ref": "indicator--c7e3eae5-8daf-4a4b-bd43-d7dfedfa79ab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fa68e99-26bd-448d-8db0-5688a2afc000", "sighting_of_ref": "indicator--ddb5d08e-15fa-465b-86a4-d3ec0f79bb43", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a74d60-9052-4d20-a269-b1fb87ff4043", "sighting_of_ref": "indicator--813376e2-a113-43af-b29d-60d9289dec37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082df7c0-6dfd-4b6a-a1e4-ecedae02d4ac", "sighting_of_ref": "indicator--372be098-c9d9-4aea-bcb8-380c5470ed3c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051dffb2-38fd-4ed4-b830-e3c501adcf42", "sighting_of_ref": "indicator--372be098-c9d9-4aea-bcb8-380c5470ed3c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fa47597-f090-441b-a12a-0fb3a53b4128", "sighting_of_ref": "indicator--2f7ac492-e83d-48f0-992e-6a52d4d3e444", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127d4ced-55c6-45b3-83e0-2e74c9f3d384", "sighting_of_ref": "indicator--2f7ac492-e83d-48f0-992e-6a52d4d3e444", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c028b5a-44e0-4dd0-ab1b-32c68c20f61b", "sighting_of_ref": "indicator--a5712608-e255-42f0-9fb7-d2dff4fcbf58", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cbdcf88-d213-4dc4-be2f-a0f3176e1ef8", "sighting_of_ref": "indicator--a5712608-e255-42f0-9fb7-d2dff4fcbf58", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1027ebfe-9c24-4a06-9575-01494fc370aa", "sighting_of_ref": "indicator--dd41a1a3-0c7e-4378-a54f-d6fb7e0316fa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e20e594-2907-4d8f-8e7c-b8820b845b57", "sighting_of_ref": "indicator--dd41a1a3-0c7e-4378-a54f-d6fb7e0316fa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac394c67-97d8-4931-b96b-5825194ed268", "sighting_of_ref": "indicator--b3b6d1c3-14c3-48da-a948-e9649ef47baa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe86122-7bd9-497a-9cf2-ca68f05ba848", "sighting_of_ref": "indicator--ca782e74-71ff-4b7a-b6df-c5cfa71eeae6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cb70ee-6da2-4f73-aa47-7a172ed3b37e", "sighting_of_ref": "indicator--ca782e74-71ff-4b7a-b6df-c5cfa71eeae6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a4250d-26d8-4951-81cc-691319983236", "sighting_of_ref": "indicator--4663cd9b-8392-4fe3-808a-bdb16f4ca8f5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408390a8-f814-4bfd-92cd-d9d99f76fb16", "sighting_of_ref": "indicator--4663cd9b-8392-4fe3-808a-bdb16f4ca8f5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfca8d99-95eb-4257-a463-f553d6392433", "sighting_of_ref": "indicator--b081e06a-3faf-4fd7-b916-bf14cdbf8c44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213de1c9-72ad-4513-bbaa-4ce74bfced64", "sighting_of_ref": "indicator--bd998518-0579-4d54-8b9a-c8884aa75674", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd137cd6-2be8-4b13-9698-7a484ca0158f", "sighting_of_ref": "indicator--cec3d5dc-137f-47f3-b09c-7aaedec7d2b0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5d37c8-8d34-468e-9f98-ff66ab52c67f", "sighting_of_ref": "indicator--8132708e-552c-48d3-8305-0711d0da55f0", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65638d6-2240-41d1-9111-7a5b2d3a1a1e", "sighting_of_ref": "indicator--8132708e-552c-48d3-8305-0711d0da55f0", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0318d61e-c28e-4c46-a0f5-697520ff25d2", "sighting_of_ref": "indicator--6c235c1f-8fd6-4545-b640-8cb9b5ad4bac", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e11e9534-7270-479a-a4d6-bd5b6a4e9d17", "sighting_of_ref": "indicator--d8857054-78ee-4a40-8221-b205befefb27", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7b6ebbe-51e8-4ef4-b59c-2ce55ffa8663", "sighting_of_ref": "indicator--391f20f1-e027-4d7d-8cb6-89d8b413a1ab", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a9544b-158d-4357-a374-679306f23b5f", "sighting_of_ref": "indicator--6a6513c9-ef71-4fa7-9613-f2576cc641f7", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ce3447-7df4-46ae-be2f-bd5d2ed5285d", "sighting_of_ref": "indicator--5536bbc2-69e8-473b-bcf1-c132f6533e59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a39422d-33c9-4273-a0ac-567163d30c50", "sighting_of_ref": "indicator--5536bbc2-69e8-473b-bcf1-c132f6533e59", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65b18b4-9234-4fa5-aec9-bec65dabfb0e", "sighting_of_ref": "indicator--4c44f89b-1119-40df-8ee7-a96e24085e5e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ef17ef-bfb7-4190-a926-a166a70b85f3", "sighting_of_ref": "indicator--79067e3e-706d-47fe-b2f4-800bff83b578", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3281991-9b65-421a-bd03-2b2d3e76b6b0", "sighting_of_ref": "indicator--79067e3e-706d-47fe-b2f4-800bff83b578", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ce00ae-17f0-4733-8998-7157c8bb4c77", "sighting_of_ref": "indicator--8804b98c-7ed5-4b0c-8864-dbbb1f0f8a64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10754c0f-c386-4c9a-920a-763a2f9689e5", "sighting_of_ref": "indicator--8f2aa589-26f6-4db6-a618-97ca24a54eca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a13a39b-2f25-4ff3-a2f9-378b30021386", "sighting_of_ref": "indicator--8f2aa589-26f6-4db6-a618-97ca24a54eca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a3320f-cb8a-497c-80c6-260e32b3d5a8", "sighting_of_ref": "indicator--1b1cea07-e96b-4c82-a2d3-d3044a469c1e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d1e6fa-4cfa-4df8-b390-bb684ead2114", "sighting_of_ref": "indicator--50baee4c-6c4b-470a-9ae8-c6cf7d7a8c24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a49ce2-0676-4a2e-aa7f-509057a939ab", "sighting_of_ref": "indicator--e2ba5a52-0869-4c3e-9390-fc55608f0618", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57f8479-7585-445d-91d1-f953808ca0f0", "sighting_of_ref": "indicator--e2ba5a52-0869-4c3e-9390-fc55608f0618", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63cc7eb-2219-4e32-a310-b2012ef2f0f2", "sighting_of_ref": "indicator--c861262d-33e9-498c-934d-89f2e824ae67", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21151965-5ae9-407f-b49e-1733cc58521d", "sighting_of_ref": "indicator--08a42402-4c12-4270-b095-e2c68981f481", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe0d9f4-0a74-4d9f-838e-be33af4ce651", "sighting_of_ref": "indicator--08a42402-4c12-4270-b095-e2c68981f481", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4310aa48-0f78-4320-8bef-d6e756cdd87e", "sighting_of_ref": "indicator--ae0ebf87-d120-4960-9801-51e935770bc1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5071cdad-e081-4c7c-86ce-3d7a61ebbd7d", "sighting_of_ref": "indicator--8ef734a7-d2ac-481a-ad63-474f84a88245", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2926b23-c48a-4ab8-bf55-eb32d723c691", "sighting_of_ref": "indicator--8e3f7090-051a-409b-8f82-a1e33e98ef8a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c62b5b-adca-4c71-a4c1-b5981c5565f8", "sighting_of_ref": "indicator--a71bc22a-2723-4d25-8633-faa6b03c122b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d1f5dd0-06e8-4310-8457-aadc39c4860e", "sighting_of_ref": "indicator--19eb4ec7-1987-4d1c-ab89-4927d0dbb817", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00fd5d1-ce32-4a2a-b3fa-4977d920a0b0", "sighting_of_ref": "indicator--477a24f5-9215-4ea7-b20d-88899548c9a8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--498a9c12-d65b-431f-99a4-a79be2e269e8", "sighting_of_ref": "indicator--01e2d671-36c9-46ec-8e82-384a96936899", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e844a34b-6295-45b5-8da0-0fb4222f8be2", "sighting_of_ref": "indicator--5372afce-7757-4ccf-ac9d-7c4dd9bc16e7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f639fc-0bcd-49c1-877b-4c2eedaafb25", "sighting_of_ref": "indicator--0cca900d-2055-4a9c-8022-cf498aa685ea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0f57ab-3b13-4dc0-a703-26cecc84713d", "sighting_of_ref": "indicator--3db19957-99c6-4b43-a5c1-f66e8994fa24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a542399-2d32-4225-92f7-cc4788d2ad26", "sighting_of_ref": "indicator--448aaf4c-5b69-48b9-9db6-0e0fd389be80", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe40ebac-90f7-493a-92db-2b26d71ae287", "sighting_of_ref": "indicator--2546724c-7b5d-45d2-9380-3d39832a2c22", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd64bbfa-e642-46f1-859e-4e4a1e10f754", "sighting_of_ref": "indicator--2546724c-7b5d-45d2-9380-3d39832a2c22", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17bda12-6a2e-4736-b819-b64977b4d852", "sighting_of_ref": "indicator--13857e52-386a-45be-821d-1c342f335907", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abe55a6-7ebb-4612-b963-77a8caec3962", "sighting_of_ref": "indicator--13857e52-386a-45be-821d-1c342f335907", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f568453-8dae-4aa7-a4a0-fa860c2fc5b4", "sighting_of_ref": "indicator--1a84b152-6afb-4033-94db-d119baff432e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8da457-5e87-4fad-a7b4-c08cf3456b8f", "sighting_of_ref": "indicator--b3b96675-c614-4726-9d79-d07117f9a744", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b191ac-8dd3-4da8-b7bd-3b2dcd52f527", "sighting_of_ref": "indicator--3d337fc2-4de5-4f55-8f72-6fb1dc56d864", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a247c5e-bf10-4b81-b47f-f8c2612126e6", "sighting_of_ref": "indicator--3d337fc2-4de5-4f55-8f72-6fb1dc56d864", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819a9d19-f0d4-4186-af36-4f2970ac30b4", "sighting_of_ref": "indicator--54022d33-1b37-48af-9b5a-efe712108830", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9491e163-3772-4794-9312-40a567119363", "sighting_of_ref": "indicator--0c9c2c9f-6849-4ea2-89f4-48db5cdd97e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da7f7e1-6f7c-4bdd-bbe3-5ba7c2330c5c", "sighting_of_ref": "indicator--0c9c2c9f-6849-4ea2-89f4-48db5cdd97e8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dd0005-1f8c-4a91-b5ad-492b145e9604", "sighting_of_ref": "indicator--c55501d9-4f3b-4100-acf1-6a9f8571daeb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bae4ac-5572-4379-9339-724d51ef959d", "sighting_of_ref": "indicator--c55501d9-4f3b-4100-acf1-6a9f8571daeb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11cddad4-2e99-4482-9c8d-909010c5e868", "sighting_of_ref": "indicator--065b6fb5-ac66-4e8d-a755-1718f3ae1f39", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd15ab7-7577-4006-8894-67e3e8a6297f", "sighting_of_ref": "indicator--065b6fb5-ac66-4e8d-a755-1718f3ae1f39", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ab1012-8048-448f-a14d-8b96c8cb52d1", "sighting_of_ref": "indicator--0506cc94-7006-4db7-8dc9-28f234092aa9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0aac54-56c8-402f-9705-75961f4452fe", "sighting_of_ref": "indicator--0506cc94-7006-4db7-8dc9-28f234092aa9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247c97e6-9cdf-4902-95cd-ece079df487c", "sighting_of_ref": "indicator--ad6e6774-00d5-4c91-83a6-039ae2ea7d66", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacce314-23e5-43f9-a038-49c93c8c4611", "sighting_of_ref": "indicator--ad6e6774-00d5-4c91-83a6-039ae2ea7d66", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8109b03c-e930-4bbf-9a18-60fb89da222e", "sighting_of_ref": "indicator--fa9d67b3-40c7-4a3a-9541-e5247f3ee655", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada2dc7e-29d6-477f-a0bc-514b98813828", "sighting_of_ref": "indicator--fa9d67b3-40c7-4a3a-9541-e5247f3ee655", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af94767f-aee2-4983-9017-6627b706fbbd", "sighting_of_ref": "indicator--5fbb0f1d-3b30-4448-8ea9-7c00741230c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82825f53-e4e1-4e90-8dfd-24c233dd78ed", "sighting_of_ref": "indicator--5fbb0f1d-3b30-4448-8ea9-7c00741230c3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cba32b9-f082-49f4-9cc8-5efb77ab66d5", "sighting_of_ref": "indicator--5b986fc7-22c9-41ad-8aac-931aabb37cad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46f6a94-407c-4830-8eb4-2e4b778b770c", "sighting_of_ref": "indicator--5b986fc7-22c9-41ad-8aac-931aabb37cad", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39379e64-683e-426f-9e47-3f5aac24cf94", "sighting_of_ref": "indicator--ec58cefe-019e-4406-9ffd-06c5372cc66d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dc22032-efd1-4975-ad9c-aa46edc3f13b", "sighting_of_ref": "indicator--ec58cefe-019e-4406-9ffd-06c5372cc66d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1208b7f2-97d7-4149-8ed2-a0da02ee95b6", "sighting_of_ref": "indicator--0806284d-a70a-42f6-a703-3562fbf0e2ee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4664a50-35e5-43c3-9e90-40d157259d0d", "sighting_of_ref": "indicator--3ec48ed2-9adc-4a11-8174-c9a9d84fe098", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d454ffa-8be5-4e6b-8c17-d310211c7887", "sighting_of_ref": "indicator--11b89432-2bfc-4d85-809a-e1ee6e2cac3f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8908c4d-fa0b-4215-ab03-d399095a2708", "sighting_of_ref": "indicator--42cf2f4b-34da-41fa-bcc9-77d8626267e2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f972fe04-1222-435b-ba38-a0147bb4774b", "sighting_of_ref": "indicator--fce4db3c-1ebd-4f1b-a01e-52c2b8a1dcbb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ed7009-2d74-4eb3-8426-35cebdf9d69d", "sighting_of_ref": "indicator--8295e61c-8dbf-4f11-b6a0-08376c7a4a62", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d767c4-7615-4843-ab13-4b1211f4ddc4", "sighting_of_ref": "indicator--c6c5d384-2161-409d-bda7-62209139051f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c7efd7-0b04-4256-8ca4-97565e55cc87", "sighting_of_ref": "indicator--95202754-99eb-4545-90d7-3f938b96932e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439de9de-b8e4-4fec-908a-ba89e61eee13", "sighting_of_ref": "indicator--e4fba62e-7ffb-449d-894d-e9112eb69da7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bed833b-3b99-4aa2-acf5-0c6163f01d02", "sighting_of_ref": "indicator--f25244cf-7bf4-46ac-9bc5-622a7ccab7bc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f189e9-c36b-42fe-8fdd-869c7899fb0c", "sighting_of_ref": "indicator--53cfd1b5-e94b-4061-8a9d-8778d995477d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab94818-d500-4ccb-9970-cce9a0fe267b", "sighting_of_ref": "indicator--4f1cb04d-20a5-4e72-a35b-02248c613469", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32162ece-0747-4631-9704-6f55059ee1cf", "sighting_of_ref": "indicator--e8e49d49-b337-4ff2-bc56-53f93260f788", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83821c9a-ba6d-4514-8ad0-0d7abb0d5de1", "sighting_of_ref": "indicator--b5e09323-3fed-4c8c-8492-168401e4e396", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127b74c5-6f5b-43d2-b876-7bc263f1303c", "sighting_of_ref": "indicator--a1a72e89-8920-4670-ad83-8560f97d0564", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a0190e-8a73-4e65-8938-1b293e521506", "sighting_of_ref": "indicator--0fbdfa89-e5e3-4529-9720-d803853ea44c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8616461-182a-491e-967c-81390c4d3a4b", "sighting_of_ref": "indicator--c4eee77b-e608-4cb9-af0c-3fa4b4bc04e2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f12d4b-8d0b-433b-a025-a15f3e05ae8c", "sighting_of_ref": "indicator--94f5336c-68f0-43f4-953e-74fbfaf7568e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--920e3b79-1fb8-476a-8fdb-4044557d83b8", "sighting_of_ref": "indicator--47ae5774-cfa9-43a5-a4b9-cf3e7c875df4", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64f82e8-6f33-4a22-b215-7535fa765f81", "sighting_of_ref": "indicator--47ae5774-cfa9-43a5-a4b9-cf3e7c875df4", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a9d3227-13ed-4390-a2d6-543ea07da70a", "sighting_of_ref": "indicator--47ae5774-cfa9-43a5-a4b9-cf3e7c875df4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5691ef-a203-40cb-8910-8a9b828593d7", "sighting_of_ref": "indicator--47ae5774-cfa9-43a5-a4b9-cf3e7c875df4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46033b34-8852-47b7-bb96-dda9f34e79c4", "sighting_of_ref": "indicator--47ae5774-cfa9-43a5-a4b9-cf3e7c875df4", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a55b54-eb08-49fd-ad2c-d5f2c45e6f73", "sighting_of_ref": "indicator--40cf88d3-a71b-4635-9ad5-56637b2c6a02", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de3b369-fd5c-4be5-9acf-0d2546aa0ffa", "sighting_of_ref": "indicator--40cf88d3-a71b-4635-9ad5-56637b2c6a02", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c763120f-513d-4a3d-a909-4dd2537b2f8d", "sighting_of_ref": "indicator--40cf88d3-a71b-4635-9ad5-56637b2c6a02", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49abf042-545d-4395-8ea1-e6b6b2cbf19e", "sighting_of_ref": "indicator--40cf88d3-a71b-4635-9ad5-56637b2c6a02", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53fc16b6-242c-4ef5-b765-0f59868595e6", "sighting_of_ref": "indicator--40cf88d3-a71b-4635-9ad5-56637b2c6a02", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65320995-5af9-4ab9-8546-da2e9da6192f", "sighting_of_ref": "indicator--75384e23-d563-4f9d-8e02-75090a0e287a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ae65fc-e2c6-4670-a684-7b0e8ee74d0d", "sighting_of_ref": "indicator--86f88a32-8b62-4f1e-84b7-093a8157d228", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e234af0-387b-4e2e-95ab-c82c747eb2df", "sighting_of_ref": "indicator--86f88a32-8b62-4f1e-84b7-093a8157d228", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc59bd7-a221-48ce-bb3b-5e875c7a60d0", "sighting_of_ref": "indicator--985aceb2-5e2e-4e46-8b32-82757bedeb6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29087b69-90e3-4904-84e7-0cb7092bb5a5", "sighting_of_ref": "indicator--5da85e43-bbf7-41f3-a750-62e6885937ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cbf679-2b85-4415-986a-a1373bde6840", "sighting_of_ref": "indicator--5986acd5-d243-4278-a137-82c12c43ce98", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a360370a-ad00-48f9-8911-c589a5bdd89d", "sighting_of_ref": "indicator--5986acd5-d243-4278-a137-82c12c43ce98", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940f16ca-2f76-4bc9-bd9a-031f6dde1991", "sighting_of_ref": "indicator--6909816d-2c1f-46ea-83a6-7b0e912dad68", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8258a2cc-d0bd-4fb0-80fb-7c865d6ef11d", "sighting_of_ref": "indicator--9c7c2066-06f6-46ae-8104-87df2d85b486", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3136151f-7258-4e30-ab6f-9f9b4d7658ee", "sighting_of_ref": "indicator--cabf9e89-bbf1-4fe0-95a0-cfb8a885bfcb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7acf3111-5085-4d15-8c27-fb95de526c1d", "sighting_of_ref": "indicator--b6f3f225-b226-443b-ab6c-8fe415d9535f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fddc2ae4-6703-43ca-ac45-01f5ffa18150", "sighting_of_ref": "indicator--6f69784a-cab5-4deb-a915-421083d5666a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66835661-b099-49b6-8880-28cf8f058390", "sighting_of_ref": "indicator--500e59e5-b7a6-413f-bc61-c5d262689e17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c3fec9-72ba-4750-9eba-f44120e0f381", "sighting_of_ref": "indicator--2b7c6dd5-0952-42fe-8a27-d7b6d9ba713b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703b96db-fd6b-4f9d-a693-d2c3e6256e17", "sighting_of_ref": "indicator--ae99060a-033d-487b-a1ac-ce127babdb55", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54563587-8e83-4712-8c7f-f605c510002c", "sighting_of_ref": "indicator--1b4fad58-eb34-4c4f-877d-61bfdfb41e64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e944e60-bf47-47f0-acac-27543a29084e", "sighting_of_ref": "indicator--0eae3d84-2763-4177-8361-6ba6626d0af0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b33d1e-26c5-4e0f-bb9f-d526c4a5ed18", "sighting_of_ref": "indicator--3e21ddc9-bc29-4237-a103-3fb9ebaa926d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cd88a8-8b0f-4b2e-8e96-f0d41c870c67", "sighting_of_ref": "indicator--6780dfe3-9dd3-4ffd-8630-79e036c4e1de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f34bbc9-b37a-46aa-856f-61b0a63ab785", "sighting_of_ref": "indicator--1fa8f3f9-7840-46f2-a58e-2575bc549d75", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a993aea4-c5bd-4de5-8a32-d62a476fe3b6", "sighting_of_ref": "indicator--460602d1-2c49-4c9e-87e6-aad89d3f849a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d1d0b2-794c-4067-8c3c-42603e3bcce4", "sighting_of_ref": "indicator--437a30db-6372-4e61-bf87-f85a959cdc25", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4be917c6-7ac8-4d9a-952f-77f8664d1441", "sighting_of_ref": "indicator--70c64813-af84-472d-b1af-7d5ad8892528", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8558550f-68b2-4374-9035-7dca0464b215", "sighting_of_ref": "indicator--2815e838-dfc5-45ab-929e-06093a4749c5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65099d8e-e131-42e4-bc6a-13efb2bf47e9", "sighting_of_ref": "indicator--b4001fba-dde1-4654-b497-c24e4db201c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--108acda4-b628-429f-8d41-bc30dbfff48b", "sighting_of_ref": "indicator--cffaeebd-db2b-40af-91d7-e9c91f72aebb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d457a2-4935-482a-b4cf-5f7585a8a660", "sighting_of_ref": "indicator--b6b6438f-cddc-4fa8-8438-b26fc5525d3f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40cde1bf-870e-430b-b6b5-8202530ad99f", "sighting_of_ref": "indicator--14ab0ded-d34b-4b84-b6c1-050c09fd9eb1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8898d3cb-1be4-4870-981f-01e333ba145d", "sighting_of_ref": "indicator--f43f1f9a-5cc9-456a-b62d-883ba7cb4bd5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73af2952-dd15-4b27-9307-cef2801dc413", "sighting_of_ref": "indicator--4fd588bf-1999-4556-80e6-60f6629569e5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd79ac9-5621-4cf4-b0b6-c264d3083201", "sighting_of_ref": "indicator--661ad6ad-092e-45a9-9b6f-5286791d0f38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d1da072-523b-4c34-96c3-4b3419d92be2", "sighting_of_ref": "indicator--ed86afe0-9a24-4647-81df-d192d2beec70", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac36cff0-233d-43f2-9d68-164335447203", "sighting_of_ref": "indicator--3d384427-a610-4c78-9de1-d07f06a591b4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c16e876-cc33-48a0-9d37-378c1fa2678e", "sighting_of_ref": "indicator--8ed69d3c-3fdd-4ac7-baae-d665cd2e0c29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da00e963-ff6f-4856-90d3-26f097e64c72", "sighting_of_ref": "indicator--39a3cca9-0beb-406e-8c1a-062882035699", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f99e9b9-3a94-42a1-aa5b-4e4d235204d7", "sighting_of_ref": "indicator--5dfcbf40-7e2c-4b04-896a-29e9176209a1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5d9169-78a3-41e1-b1a9-3cc61e8c59a4", "sighting_of_ref": "indicator--3295d61b-52e3-41d7-a8d7-c93113752bd1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76391417-3a96-4a88-bf13-4096c07810f5", "sighting_of_ref": "indicator--23709abc-7c5c-4796-96ee-3d7b6ec02274", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f21c3e0-2062-4bf6-81bf-6c2fd508f786", "sighting_of_ref": "indicator--e408c170-ae44-4067-8468-9c189bf4f96c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5dd0e0-5bd8-4c8e-a970-971fe81d6df0", "sighting_of_ref": "indicator--841f2028-ae98-4eaa-9dc1-a47b262fed87", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec9aadf-f8ef-4177-bffd-cdcfa99ed98a", "sighting_of_ref": "indicator--0373ee08-fc27-4d1f-8a87-abbd47ceeef5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b495ae76-2535-441e-9533-bd39978b8c18", "sighting_of_ref": "indicator--b106549c-8c89-4064-b98b-79212bde0e62", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5830d6e4-b48d-41f5-b9b1-5b7349eacddb", "sighting_of_ref": "indicator--659ce4ad-0d7e-4dff-95bc-f84264dbe1bd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c487448-3cb1-4199-8f27-41ea2039abee", "sighting_of_ref": "indicator--352babd5-c4a8-46f5-bd20-352b8061b481", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655b89df-7c46-4b2e-bdb3-7400c1f0a76a", "sighting_of_ref": "indicator--8c799b45-e4b0-4276-87bd-5015c389ca6a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3d5da1-d676-4721-9ef6-d93057d726ba", "sighting_of_ref": "indicator--1a70abf3-8170-439c-ba1c-87e43b2d7cf9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4d0710-eb10-4338-9384-897c73b243f0", "sighting_of_ref": "indicator--d4ee847e-569f-4bda-8a77-77ab324ef462", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb0052a-6392-4dbc-996c-a21b5bc355d4", "sighting_of_ref": "indicator--f92db836-615e-4348-8841-b9f1082d83dc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf71884-0dc8-4261-b94e-7b7a332fdeb5", "sighting_of_ref": "indicator--e60ddc23-fc82-45a4-a636-01fa9d3323f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0698da34-ea86-4612-a130-66640662389a", "sighting_of_ref": "indicator--36b23e7e-c0a4-47ab-a344-8d00d6e99f0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deccf449-7b90-4937-abf6-e9dacb713e59", "sighting_of_ref": "indicator--1b76e93e-437b-4255-8beb-c1938c64e9ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1b6fcb-153b-4bc9-9eac-ec5c14779f4e", "sighting_of_ref": "indicator--fd15ff67-3714-41c4-a6aa-4b3c058f63fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9db5b340-952c-4f61-a23e-d17bf333b703", "sighting_of_ref": "indicator--fca9fe0c-2769-46c5-92ba-290e946eb4c7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603eb360-ab28-4243-be39-c25af18d07c9", "sighting_of_ref": "indicator--6035a663-bd9e-402c-80ad-978fb9680514", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3e8c59-5fc6-4bf2-b7e3-68ac41f0cdfb", "sighting_of_ref": "indicator--cbe42234-d47f-45f0-ae79-37be158210e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf63ad3-ffa1-4511-9fea-d0db264b735f", "sighting_of_ref": "indicator--2633a4da-1b31-43a9-8897-ffd84dbc2e7e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9352c224-dcae-4eb5-860f-db7b3954c2ef", "sighting_of_ref": "indicator--1a03f900-8d2c-4555-ac46-519cd40931bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0277bb77-0882-4158-ba75-814a600af039", "sighting_of_ref": "indicator--79040b64-a502-4c20-82f2-c0c0cd78e2e9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2efc271-08af-43ab-9bb7-211606804eb7", "sighting_of_ref": "indicator--79040b64-a502-4c20-82f2-c0c0cd78e2e9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12662176-b65b-4e23-b47c-03604ea0e8a8", "sighting_of_ref": "indicator--01f2ce59-4237-48cd-a977-7aadbf56a665", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b870af-7db2-4f32-880d-4d61357ab7cc", "sighting_of_ref": "indicator--7d38267a-f636-4f5e-ac21-1134dc462fd9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673f4820-8f9d-4163-8765-24aff3f4afce", "sighting_of_ref": "indicator--6617d96e-2751-4146-9b45-564085cd4a88", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--834c05b0-974f-4d4c-8099-042065977394", "sighting_of_ref": "indicator--6617d96e-2751-4146-9b45-564085cd4a88", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9704910-1da8-4cdf-b474-34e648592970", "sighting_of_ref": "indicator--7eec810a-5e53-46e2-af3d-f9c64a4f62ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5528c8fc-8321-482c-8300-cf85995f491c", "sighting_of_ref": "indicator--0b625a30-a8a3-4f5d-b0b4-e99baa4c597b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd04492c-5c09-466f-bd58-f0989eb9dd68", "sighting_of_ref": "indicator--19c0bd61-8d1e-43af-a95b-980335e4e092", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172d6083-1727-496d-a9e3-b0cf353a34a1", "sighting_of_ref": "indicator--c0989186-d24a-406a-b1a5-7d393dfbdf45", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7522bcc5-29b1-45b6-9672-3de15644aab2", "sighting_of_ref": "indicator--5eeb96a5-e6be-4294-bfd0-a3901624a797", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068634f8-e24d-4c00-84cc-8036a3b69f4a", "sighting_of_ref": "indicator--07233e13-1b77-4f33-96f7-ef3fd3264423", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69ef66a-159d-4140-813a-922d1671ce2d", "sighting_of_ref": "indicator--f80e2370-98e8-4731-91de-9eb9ae3b1692", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e080bf0f-b4ab-4afd-a6de-72c22764306e", "sighting_of_ref": "indicator--ace8e526-86ff-4738-aa24-7cccff514b1b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd1fed7-fe37-49cf-9fff-558a846ae663", "sighting_of_ref": "indicator--89321679-61fd-460f-8f1e-753f4e046b9f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9d8aef-07db-47f1-b7b2-70fdfa8e62b2", "sighting_of_ref": "indicator--4a5d8f73-09bf-4020-b324-e3ad19875961", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6990e517-897b-48f9-87d8-1f441175a824", "sighting_of_ref": "indicator--6e57b0f0-0b3e-42d6-bd71-934c1d74abdc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb9df12-b1ab-424b-8761-3e14d1659321", "sighting_of_ref": "indicator--e58e6d5b-77c3-4055-82ed-68fcdb17a669", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a320f5-a7a8-4dd2-b997-06c99b98c780", "sighting_of_ref": "indicator--c746452e-cd55-4b9d-af8c-917327613558", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e19933-5fca-4633-9c4a-274f8f374d85", "sighting_of_ref": "indicator--e4290c4b-c768-4c44-acfb-f5b62b3effa9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2a366f-dd15-4d80-ac4b-3a26beeb6918", "sighting_of_ref": "indicator--6f1002d0-4c2b-4742-ad07-8900d6d5b63d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b938c7f3-b571-42d4-84b1-36bc4ddacc31", "sighting_of_ref": "indicator--0af7f9c3-40bb-4b44-ad86-6f6173f1947d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c8c6c1-143c-4a0e-9f06-f7a6468d36e2", "sighting_of_ref": "indicator--0c953941-d5b9-44cb-9ac9-4e62a668725c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca509d27-103e-4741-ad29-1ac1a0f28737", "sighting_of_ref": "indicator--1cdf77a9-062a-4271-8507-5bb0efa639d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1379a126-ca6e-42d6-b5a9-0107de8dd447", "sighting_of_ref": "indicator--38528833-0aa3-47fa-9588-f14f8909477e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f3ae8e-ea63-4542-8fa6-03e535d95fd4", "sighting_of_ref": "indicator--4d360794-e9c2-472d-9446-f4242d0683bb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1237ca1d-9a70-4a8f-8a09-96af8329788f", "sighting_of_ref": "indicator--3d86ee18-8c95-44cb-b3fd-64fc360dff16", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152152c5-218b-4127-89a1-d847d3125374", "sighting_of_ref": "indicator--cba567e2-a24a-4fc9-ac45-67d6e2c54ec0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df929905-5a77-4234-9560-0b9bdb916e69", "sighting_of_ref": "indicator--131f13e8-d296-4d78-be35-7dc91c83b0db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c00ffdf-f2d2-4563-be4d-3b466d9ca85b", "sighting_of_ref": "indicator--f1cab624-903b-4ffb-8aa2-de8c8ade2f10", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecceccb5-96ad-4c6c-8615-2447938cc724", "sighting_of_ref": "indicator--a734a765-21f5-404a-bafc-370d7d441129", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a482a744-36dc-459a-b799-a947ae641618", "sighting_of_ref": "indicator--0b26ca19-7b21-44a9-a028-50ad1d23d723", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156e673d-49da-4d6f-a599-d9d951d104c0", "sighting_of_ref": "indicator--5904b9a5-e273-428b-9e09-a209d09bcd74", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403e5ac7-ebaf-40cd-a3f1-0cbcf65573ae", "sighting_of_ref": "indicator--ca233bfe-a8cb-4293-9444-93d9bc3381d6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ae1c98-08eb-4852-b93c-0216e21814ac", "sighting_of_ref": "indicator--286629af-7e39-42e0-9799-2280f97e991c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b5192e-3eb5-47be-bd28-3aca0a12798f", "sighting_of_ref": "indicator--7b66e49f-4428-4bea-a15f-b8189ce48a53", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fda7a34-aa98-4321-8962-9d4a214855eb", "sighting_of_ref": "indicator--fe93b879-b197-4f1c-bd01-7bc2d1218522", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21822f6d-ad18-49fe-aa07-c76e42f1f1d6", "sighting_of_ref": "indicator--5afe87c7-32b4-4f6a-a555-b48e0becaeaa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa393a96-9596-4eec-b75e-8c0e67791bbd", "sighting_of_ref": "indicator--becf044b-96a3-46f9-af31-53ca1e098637", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e752248d-a533-453c-9ed5-a5de60a1894d", "sighting_of_ref": "indicator--23017cd5-5c3a-4cb5-850d-e8744e074c46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad5905d-e222-4f89-ac47-dd0cc41fc7b7", "sighting_of_ref": "indicator--508b6a6c-ec15-4804-a76c-57dd7e352868", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce74ac5c-82fc-4bf9-876b-849239bf9525", "sighting_of_ref": "indicator--2887ab45-1651-4fab-a3ee-f0e6e9a37572", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2332bea6-3c8c-49e8-8a34-ee19bb23023a", "sighting_of_ref": "indicator--b81c88f3-8df7-46ca-953b-416860411b19", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f17b48-18c7-4f57-b322-825d8f8cae64", "sighting_of_ref": "indicator--d76823aa-0e12-4418-9ed5-9e44625f660b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9fb030-22f3-4339-a0a8-8c55e458e5ee", "sighting_of_ref": "indicator--ee1672ca-f9ca-498e-90f1-069059821c8e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f31b6e1-3547-49ed-ad27-28af5ec3f3f0", "sighting_of_ref": "indicator--a7ed9517-d018-4d44-8e61-6da74f80745c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ca36ae9-b10c-4f5d-a6cb-be7c58579171", "sighting_of_ref": "indicator--7df22bcb-815a-4f2d-825d-20a60827426e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47be7106-c316-40fe-a298-2d08dbbbe2ac", "sighting_of_ref": "indicator--1c815a1d-f740-4d87-994b-89845362e0e9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573cd97f-e00d-47ba-8b6d-7abbc9abf5d9", "sighting_of_ref": "indicator--56b31e58-b7b0-4d4e-af72-7fb484c99ad9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--671a3341-f8dc-477f-b477-31e00e757724", "sighting_of_ref": "indicator--b27794a3-6d6c-45a0-8947-82ff029b9d0e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99960120-7eb7-424c-b2ff-318198409c24", "sighting_of_ref": "indicator--d5910fa0-6f83-4d99-8f29-b5287807ec97", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0742fd1-3428-4141-9ff0-a0e4637a0e3f", "sighting_of_ref": "indicator--cd8ec106-185e-431b-8569-549aef820706", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7011b7b-04c8-4dfe-8458-0ce182e62eea", "sighting_of_ref": "indicator--9b09cdcf-6244-4408-96f7-6abb939d99b0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44b2f1a-9ebb-4731-b5ce-211b33ae8331", "sighting_of_ref": "indicator--420f3ded-521d-40a3-b659-44c9f464d91d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb263a9-40e7-4a4c-a5a3-78e802dbe105", "sighting_of_ref": "indicator--dd55bb4a-7580-4945-bca1-5c9ce5892f3b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935887e1-999d-4da7-9995-217475267718", "sighting_of_ref": "indicator--46ce0540-ad9b-4b21-bfe0-b624b91a9d9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9dcc36-1748-4c22-a2f7-304524255a4c", "sighting_of_ref": "indicator--fdc7f3ca-b6e4-4f91-a6c7-46b0daf80a6e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d56e6eb-1926-435f-ba76-faa3b51f1c91", "sighting_of_ref": "indicator--58ac19f2-57a1-4282-86d0-60f3fef3ae35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbccc2db-ccad-47e5-b562-e5ca468bac15", "sighting_of_ref": "indicator--f568d7d9-c125-4be2-9a1b-a47c94cd7646", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097d9935-91cf-4ed4-8ebd-12ee45090aca", "sighting_of_ref": "indicator--81837f42-9b28-475d-9d0f-25d6bb5e8b7b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5254b65c-aeb7-45fa-85e5-57275aa17a62", "sighting_of_ref": "indicator--01413b7f-da16-459e-8fc8-1a32c5824eb0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952f4cf7-1947-4d25-80af-62b6b31c5edd", "sighting_of_ref": "indicator--e1b3bab3-6d7f-4413-8fd5-d120a1741bab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d84d9f-f32f-42ba-9f77-0540a0e09449", "sighting_of_ref": "indicator--eb342208-a749-48ae-9fc5-fbe3165e4db9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a871afe-3a24-486c-ac03-32f9757cf541", "sighting_of_ref": "indicator--b412482a-004a-439c-928a-47d3264e263a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6a264d-0cde-42fc-bf1f-81e90b532588", "sighting_of_ref": "indicator--b412482a-004a-439c-928a-47d3264e263a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbc3bee-458d-4254-b271-dc04e9b744f8", "sighting_of_ref": "indicator--272bdc53-bb61-4916-bdaf-535595e4730f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428890e6-a4f9-4f11-80f5-2f518eedfa78", "sighting_of_ref": "indicator--2a2509a9-df3a-421b-9299-f393aacfb242", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bbce1b2-6536-4cd4-9c98-ed252b2b1694", "sighting_of_ref": "indicator--9eb7d1c4-16ed-43da-baa6-740170e8197a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e2b557-d19f-4cf8-abd6-bc9071b642e1", "sighting_of_ref": "indicator--c29df8b3-38eb-439b-bea5-d361b1519637", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7909bd-3174-4bfe-a6dd-80dcbee132ca", "sighting_of_ref": "indicator--ecb73375-8779-46c0-93ec-ed07c59b3f47", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd990af-03c4-4c88-afe0-1b2813135d82", "sighting_of_ref": "indicator--da477a98-7e85-4dc5-9b75-af173c2792b0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba45c412-8f50-4be7-977a-b0eeb8151700", "sighting_of_ref": "indicator--2b849455-3a12-438a-88ee-4037e301130a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca82c2f-ecb2-4132-8dfb-badd616e12da", "sighting_of_ref": "indicator--f5356a6b-2726-409f-8e31-a179c9b05fb9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e10159ba-aae3-4f7d-a086-4dc60c9ef90c", "sighting_of_ref": "indicator--a9c876f9-9da4-4d5c-b5f5-a8c7c52db7cd", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--048ee12b-5226-43af-bcc3-cfb9b3ee86c2", "sighting_of_ref": "indicator--57bea15c-ff91-4f7b-a4fa-ab76ade6ef43", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a749020c-bb06-4fb3-b7fa-16d778fd7472", "sighting_of_ref": "indicator--272beafe-91a4-43e5-b8e9-bcbafbd62414", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be9bd61-53ec-4a1f-9e3c-71a421d21041", "sighting_of_ref": "indicator--19e678fb-13ef-4701-863f-e20e474b96fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f85b7c-961f-438f-b181-9edf6b1ac893", "sighting_of_ref": "indicator--19e678fb-13ef-4701-863f-e20e474b96fd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ae802a-8b37-44db-a1f3-1e357865f9ed", "sighting_of_ref": "indicator--ff5acbe5-495e-4f1b-900d-7523def1b36c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a038fe-4766-45ab-8c79-d2b48ac9eccc", "sighting_of_ref": "indicator--316ac307-1a80-43ec-8f07-ee9a165a7036", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3480fdc1-d89e-40cb-a496-f9552b5b37d0", "sighting_of_ref": "indicator--b472c9a2-a4f2-43e3-914e-dca0c056c107", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a787f3e8-814c-4b32-b03d-1fe6b18c7652", "sighting_of_ref": "indicator--04826e3d-942e-44e7-9434-818689e4068f", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600f1d79-2785-4b1a-a336-edf7695d89b6", "sighting_of_ref": "indicator--dedb5128-0f91-4264-bf31-e4be68a2593e", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d685854b-c196-4bf6-9bae-c403a72b82db", "sighting_of_ref": "indicator--05e5091c-34dd-4e61-a76b-1a01462a5d65", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ada3fa-4133-4dcd-9ccc-fe581de72ca3", "sighting_of_ref": "indicator--673bb946-8bb7-4f35-abfa-2f29194b6508", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75bb359-1209-4157-a0cd-aa69e45e0624", "sighting_of_ref": "indicator--c28c7c16-2896-4074-89ad-80fcb951fa51", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80b9b04-1346-49e4-a8dd-7b26d4e01b5d", "sighting_of_ref": "indicator--a716d198-ccde-426f-8d04-b1f39e092a81", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df5cad0c-3497-4462-b3ee-4dbe7c51b481", "sighting_of_ref": "indicator--a716d198-ccde-426f-8d04-b1f39e092a81", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45c6a129-c50a-4ef4-9f82-529102324ee7", "sighting_of_ref": "indicator--9c7da23d-cb0f-4aea-bd38-a98de14fddf1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32ef1ee-e1e9-447f-8654-c37fa45aff40", "sighting_of_ref": "indicator--e8197301-25fa-40ad-b4a1-6377bc595227", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bed29c6-13c0-488c-b3c6-380f94575632", "sighting_of_ref": "indicator--95b466df-92b4-421e-a789-a2083251a9f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603e7009-b1be-4000-b78f-79734c6d54e8", "sighting_of_ref": "indicator--be77837e-9496-453a-a930-9c4978edff2c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152bf1df-cea0-40cd-8913-f9618e468636", "sighting_of_ref": "indicator--dd727cd3-6b3a-4b7b-bb6a-3a4e59efe0b0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6fc6a7-103a-4f24-9be9-bfc9d8057f00", "sighting_of_ref": "indicator--13c6e576-6acb-49d9-bd3e-a03bbebbc582", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dbf0e8-d6d9-408c-a91e-0171c04933b4", "sighting_of_ref": "indicator--55b93c17-55b4-4707-83af-a3baf2b1a4df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46384b2-0824-453a-a149-81ca09ad4623", "sighting_of_ref": "indicator--6a287bfa-f50f-45ca-9492-84d648e2c9f6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c0d25d-c3a6-4304-a8e1-feb0104441a5", "sighting_of_ref": "indicator--095ea7a8-2eb5-4790-8fba-fd8c456ac8a3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d48955-10ec-4e60-bd23-d7b4b8bafd64", "sighting_of_ref": "indicator--688c80e1-d050-4e61-ac49-684252063df3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db51a31e-4b23-4229-a1bf-d26eab086beb", "sighting_of_ref": "indicator--74383a65-5753-44d8-a979-e2229a2420fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30fb0805-941f-4607-9ce3-0ca6c6681ff0", "sighting_of_ref": "indicator--a68446b3-b895-4a1d-97af-3e637017e7a0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044b9c45-c3a7-4a1f-8658-7e561421d92b", "sighting_of_ref": "indicator--fad0b4c2-69bb-4473-8244-84d126a0b8e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa803681-ccda-45bf-be2f-2241ad66c89a", "sighting_of_ref": "indicator--afe04934-d034-40dc-996e-e6b6be68eb89", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b45434-7ad3-4c1f-a991-38c53bf13417", "sighting_of_ref": "indicator--26dc884e-4ed2-4ecc-a970-0fe13f5b6a06", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4508e13-e75e-4f20-8bcf-77cd041f6f04", "sighting_of_ref": "indicator--c81f0385-be92-4191-ab52-66ae771356e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cfe197-37e0-49a8-9127-e3f461ebf3fe", "sighting_of_ref": "indicator--4d855f8e-03b9-4b02-b04a-19c294a035cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab1b485-84fb-4367-b390-96363fb42233", "sighting_of_ref": "indicator--e55d1a35-838c-4589-bd76-88664c77dd05", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae84e4ce-db04-4cb3-bd40-4a57d7ad2f4c", "sighting_of_ref": "indicator--ff097a25-1034-49e3-9881-487076e3b34c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7704877b-0b6c-4d53-b25c-956b3bc701b8", "sighting_of_ref": "indicator--3dbf1d17-bf4b-45f8-8a81-be1a265c2c52", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d22758b-a4d5-47db-9377-d900dad6e015", "sighting_of_ref": "indicator--ddaf7d01-f8bf-4074-bfed-adacb199015e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e4783a-b8c0-4a55-bed2-bedbd8512fdb", "sighting_of_ref": "indicator--c430517e-de46-48f2-a5d6-1bc8219316f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed99949-3a95-4e37-a202-650eab449175", "sighting_of_ref": "indicator--9acd68fd-72a4-48ec-ae9a-575ecae80393", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82faa6b1-32b6-4dbf-a902-548cb77b77cf", "sighting_of_ref": "indicator--2fc2f829-74ce-44a1-b5af-cdeb9e4c9192", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2854804-c692-4e06-8722-9648418b3f50", "sighting_of_ref": "indicator--2f574aeb-517b-4822-b6d1-065b33e11bce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bff1ba7-1592-4913-9508-b1b9df28b435", "sighting_of_ref": "indicator--580a0bae-8162-4dd3-9375-4847eca82a0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b1349b-0853-4011-a156-217b3acfb0ea", "sighting_of_ref": "indicator--36dcd00d-42a7-4c6d-9c12-d0e8241fe8ee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0726d795-7733-4677-8dc4-42b484945e10", "sighting_of_ref": "indicator--feb80b95-a971-44e6-bd40-e9aeb1c98d32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b52d3e8-5519-4a27-bd08-6477a4a17501", "sighting_of_ref": "indicator--68df3fe2-4a35-421c-b56d-f95d36fa5cc7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0692d5e0-5c9d-4165-af8f-3766d3610844", "sighting_of_ref": "indicator--f3ea5adb-993b-44b1-a3fb-65554115b1ed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5893d2ac-11b0-428f-8134-d745e731b449", "sighting_of_ref": "indicator--1f4820a0-4a1d-4b5b-a9e5-2eb70dad7cb9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2e327c-1de5-476f-8147-612ccceda8dd", "sighting_of_ref": "indicator--e77a0ccd-744a-43c1-bed6-6ca01922836b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b64acda-92b4-4c55-8540-b1abc5199e63", "sighting_of_ref": "indicator--a5366ee5-5158-48c0-9951-cca36eca2aa2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--252faffc-b248-420a-8fdf-5b7be3f1c4f3", "sighting_of_ref": "indicator--c104f6af-3e33-497c-b8d4-d129f3df9a4c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e571da50-7af8-4515-85d5-55322230ca62", "sighting_of_ref": "indicator--23e20ffc-b889-45a5-a700-a97290c797f3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d93d88-7b27-4812-9aa5-a0507a00e57e", "sighting_of_ref": "indicator--05727844-4579-4d62-ac3b-023d694df38e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e76ddb-7ab6-446b-95ea-91a302b3e1d0", "sighting_of_ref": "indicator--58435f9b-8336-4c6e-b84e-5305b1fad7f1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be949f16-fe9f-498e-b7b8-6c5d085512e4", "sighting_of_ref": "indicator--420a1d1d-718d-4102-9a55-ee28fc63d4b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64cc8bdd-932a-4209-93b8-33be6e2b36d8", "sighting_of_ref": "indicator--6a1af312-9dd0-4560-80f6-f5ca651cb26b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f507185c-e930-4808-aedf-16ea4cb403ea", "sighting_of_ref": "indicator--787f2a30-4be9-46a3-bf9e-f81b7fa82451", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef16d58-61f8-4a33-b5ca-eee948b563c6", "sighting_of_ref": "indicator--e88ceef0-4729-4d75-b965-3e4b7e4a83a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd7fb61-09c6-4abd-bc18-7129dbb33e71", "sighting_of_ref": "indicator--7193da8c-95f3-4e03-a5e4-19436f5560dd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fc6ceb8-6b71-4f30-874b-8d0d5e43cb22", "sighting_of_ref": "indicator--df931f14-0e5e-436e-813a-86c8bb1a3e4f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c6c8b2-7461-4f71-bad1-31c0ebf3e772", "sighting_of_ref": "indicator--00fe3f22-96cd-4fd6-a55f-af3244ff0f66", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a8a2e72-0ef0-4afa-b5f8-bbdc43dbd7b7", "sighting_of_ref": "indicator--4f3cdf94-5ea4-4ed1-99d9-a14bc69f0174", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9d4a9a-6a46-4c60-90e9-6c06333b6350", "sighting_of_ref": "indicator--eff60844-5541-47fb-82d8-b84aa8ccf7e7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e88005b-8f0d-49f7-91d6-e8c35ba9fe02", "sighting_of_ref": "indicator--0baf0a36-f2f5-4fb0-b32b-f5631568e34b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b7ac53-4ee4-42ff-827e-a771b856dcdb", "sighting_of_ref": "indicator--49f63abd-c5fa-4df5-b8ba-bb565c78c606", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1401cc-58fc-4a71-a129-d5f3f05efd16", "sighting_of_ref": "indicator--52fe952e-d032-4e33-8c06-2c5bbe225145", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ec3051-811f-4483-83d1-d2966c44c8c2", "sighting_of_ref": "indicator--19ce4f7c-0783-412e-98e1-36135305b68d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867d6fca-24b1-4e12-baf2-ca47732d2683", "sighting_of_ref": "indicator--12fa936e-2aca-4012-a0dd-b3ce08524dc1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608a7f4e-0c27-4a6b-9226-fcb20aa314eb", "sighting_of_ref": "indicator--1ef59f33-972d-44ff-acdb-f9be6f311ea1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e01912-5ac7-4000-be2a-8b3d94aeb386", "sighting_of_ref": "indicator--c443029f-0bc4-48ad-a3c8-9919ae88c853", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d6fee0c-5c91-4c82-be51-3e8d75292a4c", "sighting_of_ref": "indicator--1f36f7f4-135b-43d5-a6de-e6e11bc246dc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f549ff47-788c-4c78-85d9-1fe0e4f422db", "sighting_of_ref": "indicator--256bf957-ad2d-4f33-81e4-eab1eb398c83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c386b156-226e-4478-a426-d8459a0ad212", "sighting_of_ref": "indicator--5a892e9e-41eb-4ce4-a75c-49dc9e8d26cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561ead64-d4aa-4e5e-9dfd-8ba0e21bdb8b", "sighting_of_ref": "indicator--f9d14f24-20eb-4608-9fa8-cd2de6707816", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa25c30-197a-4c5d-8bbc-9f741468825a", "sighting_of_ref": "indicator--1a0c068d-eb62-4886-b26d-c848b07fc402", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b3094d-541d-4d7f-9ac6-2a17d6099543", "sighting_of_ref": "indicator--7c5597cb-77bc-47fe-acb4-d7970ca5cf6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bae14a45-cfe6-4cf1-bdad-574c99e22e31", "sighting_of_ref": "indicator--28a1fe51-9386-45e8-ba86-d31404637149", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdde55c6-338b-496e-ae6d-bc96765cd964", "sighting_of_ref": "indicator--af4d28e9-f8cf-4689-b18f-59b60ce85f2c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2f3f02-1f2c-49ae-a0c9-43d29d6cf8a7", "sighting_of_ref": "indicator--e94ad80d-6a51-4603-9258-b021b968eeff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd57d8f3-f5d6-432a-98bf-836d179b1123", "sighting_of_ref": "indicator--bee680ca-fc10-443b-ad7c-f6c268b149b4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cfec061-b39b-4eb1-bb46-e61a18bc9020", "sighting_of_ref": "indicator--5c8a65f8-2c5b-4316-87c9-c4d05318fa8f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf55366-920b-4902-b312-bb44d74e88a1", "sighting_of_ref": "indicator--0a3fe13d-d4ea-49cb-a697-09cc296f0289", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586b660f-61d0-43af-aa3e-45e5d006ca87", "sighting_of_ref": "indicator--9c43d5be-fb11-41fe-8a80-d275bb81bce6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8005d7b2-cad4-4d4f-919d-a05b98fbbff4", "sighting_of_ref": "indicator--8ef7c101-eaa2-4990-8b84-3e1ffd8482d6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ff97b7-e94b-49bb-b746-c9448aeb5607", "sighting_of_ref": "indicator--2139bdb8-1304-4cef-8efe-d3bf7e00ff02", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9808a7c3-5061-4a31-8236-164264efdc02", "sighting_of_ref": "indicator--1ace18ff-8687-4082-89a8-8ad0ac374026", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7ef40f-b1e4-427b-8dfd-d096a9c474d2", "sighting_of_ref": "indicator--461e76bc-7c10-47c0-8ae2-04d163ad0d30", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e200647-0e14-487d-8173-c5e6982cff21", "sighting_of_ref": "indicator--ba271f54-5114-4dfe-b2d6-67f212a2a1f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67238e7-b4e3-499d-9301-46c1112e670d", "sighting_of_ref": "indicator--f30958e7-1e7d-499a-b06d-de9422daeefa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7945a97f-511e-4d20-9a51-85299c2f4d59", "sighting_of_ref": "indicator--b551171d-1e61-409d-93a9-359145b05a41", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19a72918-8497-45d7-a1a4-dc1c9dde2f92", "sighting_of_ref": "indicator--a7804146-52e6-4c9e-870c-30555ce1cd4a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91d4446-66c9-4dc7-aab7-0eaf80f36abd", "sighting_of_ref": "indicator--e19b1fa3-1754-4783-9cb1-039a107efc1e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35350aff-247b-4b80-839f-c5f26eb7208e", "sighting_of_ref": "indicator--8331e823-d451-46d3-859e-bf79d2384e33", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8f80e7-38bc-4460-8d3d-78b3614edf60", "sighting_of_ref": "indicator--65ba39e7-bce8-44d9-bbec-53ec6d70b0cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7682c21-1713-4763-b15b-1aee78d5954a", "sighting_of_ref": "indicator--51e4ab3a-9142-4b39-95ff-888332d137ba", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6bb1cd-d8d7-42e5-a1c0-159822607bdd", "sighting_of_ref": "indicator--e7702fbb-8676-498b-b5ff-7cd5619ae3d5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c9b761-782d-4c71-b5f1-999a50f89b4d", "sighting_of_ref": "indicator--3070fbe2-05f1-4698-bd39-1c10c76f2637", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c7c27f-6411-43a0-8480-7131ea09253a", "sighting_of_ref": "indicator--51908f5e-6497-4355-8f8a-9a4f4162002c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82567b4c-247c-4cde-ae8d-4b3ca58ff620", "sighting_of_ref": "indicator--36c88038-d10b-45f8-9c6d-83f14acec729", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accf42fb-3158-47af-8534-ce521fa23179", "sighting_of_ref": "indicator--f66dcfaa-760c-46fa-99f5-3725b83d2104", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7477fe3-8692-4aaf-a167-52ef12dfa739", "sighting_of_ref": "indicator--bad528cb-dabb-48bc-af5d-822e0cb9dfda", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51d09fa-dc45-4267-a213-8a314f1fc1d9", "sighting_of_ref": "indicator--1a040376-2bf5-43d8-a99a-2f05fa22a6fe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8602a6-641d-44c1-baac-b4b9628fd028", "sighting_of_ref": "indicator--eab4a602-79c6-4630-ad42-87ad13e019a1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27dd6dd3-3fcb-4e04-a62c-d352d5ab0c7c", "sighting_of_ref": "indicator--b907665f-d63b-406a-b88f-5514a6c8cfcc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb23895-2fc6-42a4-9778-d7075faa7d89", "sighting_of_ref": "indicator--874094e9-ac02-444d-8085-fc61d3d2008e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bae1bb0-e26f-4fb9-9d9c-526162a2ef77", "sighting_of_ref": "indicator--c02489a3-24ce-4915-90e5-b0fc33896c38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e499133-f922-4d53-a836-d383819d9b73", "sighting_of_ref": "indicator--726f0dc3-5847-484c-9de3-8aa7c9c7fa62", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55fb8e2-2428-400b-a9a0-feefd4f23128", "sighting_of_ref": "indicator--b78ed8ee-90c1-4a1b-87c0-43d2aaeee679", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2ccddb-7e5b-4e93-ba99-c818c785594f", "sighting_of_ref": "indicator--b78ed8ee-90c1-4a1b-87c0-43d2aaeee679", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc155bcd-5774-421c-bf5c-54be3defb2cb", "sighting_of_ref": "indicator--7dd40ed4-d9ba-43bd-a7bf-dfb4e3ffc437", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90bc6bae-77c6-41b6-beb1-dddc56895334", "sighting_of_ref": "indicator--2986ab30-7fd5-4629-ab31-cfb549772b83", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f024435f-a7cb-4d8c-a037-9654ef480058", "sighting_of_ref": "indicator--61f0e134-2e62-4839-a82f-c919ea54cde4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b72f51c-9878-4f91-862d-1d6c19075d73", "sighting_of_ref": "indicator--045de07a-9297-458c-bdcd-4358aa5ac094", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58c512d-f553-43bc-afb8-247ae4d03945", "sighting_of_ref": "indicator--6f6bea32-9e69-4e23-b9c2-89c3bc6cefee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11c9eae-120d-4095-8f8b-2822dcebb284", "sighting_of_ref": "indicator--d124b7e2-c95b-48de-8329-3feef3cb4063", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f58a801-98e6-4e6e-9681-40fe8e449afe", "sighting_of_ref": "indicator--556bc3af-d278-43b4-b9ef-82e3219b1600", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f05fad-e87d-46c0-a59f-82ec17dff833", "sighting_of_ref": "indicator--48990d98-f9bf-43ec-9827-603462b9e3f4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d06c66f-416c-4cd4-a3f4-98aae29f1119", "sighting_of_ref": "indicator--d087703f-51f0-4bab-9fa6-69d37d9668ac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12163947-fb37-42e5-a0b9-80bbd63ee562", "sighting_of_ref": "indicator--2f3d58c7-7a8b-4ee4-aacd-5e935b57de9c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdeeb8c-41ff-437a-8a63-6e0ff32ee3b0", "sighting_of_ref": "indicator--1b6b1c01-ce03-4173-a46d-52a3b039e853", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7054a223-f10c-4e3a-a736-39e05b557fad", "sighting_of_ref": "indicator--9f1f4af9-d2e9-449d-9e15-2de8da28b68d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f34f1cc-5ab9-4188-9f75-1a13b58db88b", "sighting_of_ref": "indicator--08f6c7b2-343e-4eba-8a1f-30ee58ffde24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42359063-9bba-4e5c-b33d-b80094372dd0", "sighting_of_ref": "indicator--3926f108-6ccd-4e27-a755-bd841d2e6350", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5b18e80-f6d1-4456-8cc4-6f7db9277464", "sighting_of_ref": "indicator--0104ef52-32f0-46e7-82d2-e2e4570a21c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2926ea9f-eb83-42d2-b63d-cd8bff4228a6", "sighting_of_ref": "indicator--3363ed22-7a48-4028-8622-ca49c73a3339", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c272a1c-09f4-4477-a2df-4bb30a0c4d20", "sighting_of_ref": "indicator--a9ef747a-fdf8-4405-bea7-b2adcf1a47ee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2181cee-f702-4880-963e-42b3657ba385", "sighting_of_ref": "indicator--b1ac5e03-b252-4b27-82ed-acb7fb10e5d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ceb04d-f2be-4324-982c-866520c4a1b8", "sighting_of_ref": "indicator--2e3cbafb-95e8-4837-92d4-d5dd3ac7cbb4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70543827-3e66-4b2e-90b2-3328a7de2c95", "sighting_of_ref": "indicator--c68aeb00-9f72-415c-b35c-dfc03fc2cec8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed7011b-f632-45f1-859f-72cc013962ed", "sighting_of_ref": "indicator--9e8a1fbb-a82f-4b8b-a054-3a8eb96a1cd6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244a738a-682b-4401-bc47-6c7cdaba363d", "sighting_of_ref": "indicator--2d3313ba-3f1f-4224-880a-aa528a126299", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a758732-cb6e-4b24-8d39-e75cb947177f", "sighting_of_ref": "indicator--11f2c7ee-4cc3-4282-948b-870b25ee9275", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b62147-afe5-4e82-8fe8-b26753ce2851", "sighting_of_ref": "indicator--428657bc-1128-40ef-bd11-8b32f4566500", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71263ca3-5126-4b44-82b6-0d28fac49bd1", "sighting_of_ref": "indicator--91f8b10b-9ce5-44ff-b333-d971606796ee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4deabb-90b7-4e06-bac3-9b03f1f00cf4", "sighting_of_ref": "indicator--328c0d86-b8ba-4f53-bc79-6f4e700e1732", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ad3323-104a-451f-9c50-9fcea6674401", "sighting_of_ref": "indicator--328c0d86-b8ba-4f53-bc79-6f4e700e1732", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b8be0c-adbf-49ce-a25c-12d39bda6a32", "sighting_of_ref": "indicator--86890f6b-65c7-40a2-a270-1d52982355ca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6077a6-c2ff-4e87-9a7e-26ad051202c1", "sighting_of_ref": "indicator--c6b86aab-60f7-4854-a7b4-5e296fcaed78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2240bc-22e7-4b39-9f80-db5639c61c2f", "sighting_of_ref": "indicator--c871963d-d6f7-4e1c-81ba-b8f0786b06d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68d69f7-f11d-4900-8f91-898a3fb11928", "sighting_of_ref": "indicator--48d9c0d8-5620-48c9-b6f4-805e4add8c13", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8acb6961-24ca-43a8-b79d-86b5a60f23a8", "sighting_of_ref": "indicator--2e82ff07-ace2-4dd5-82bf-7e1391837cec", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51fd89eb-f11f-4934-9220-7dedc281cb00", "sighting_of_ref": "indicator--4d673791-aab2-42cb-b766-5091e8dc7e74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3005692d-3210-4616-a8c2-e42270448fcd", "sighting_of_ref": "indicator--37c977c9-73fd-4cd0-a51c-a54d35d0937e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cef240a-7147-4daa-a16d-34ee1202cf44", "sighting_of_ref": "indicator--ad5e32f7-3021-4817-b587-98cce991a805", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a26ee44-5afd-48df-a9d4-69a3f1bbdec4", "sighting_of_ref": "indicator--4ce6096f-644e-42d1-bf0c-7318e5f4ebb0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321b87ed-61b3-45e7-b125-180341183700", "sighting_of_ref": "indicator--4ce6096f-644e-42d1-bf0c-7318e5f4ebb0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e03d5a-4701-4345-911d-7c42b939e8a3", "sighting_of_ref": "indicator--3a418155-cc5b-4fcc-a813-d718651c790f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9dfaa6-b871-4462-ab5f-956048ec6b45", "sighting_of_ref": "indicator--bb736db2-717d-450b-8a99-49938284cc6f", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8d93393-88d9-4c3a-b4c0-02e409d3b805", "sighting_of_ref": "indicator--786010ea-8aa2-4dba-8ce5-478c882720e7", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d48ba19-1b68-4312-8516-698ae6b085f4", "sighting_of_ref": "indicator--776f386b-cc73-4d3c-9880-cfaad977848f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94c71d7-5e43-4c6f-b223-e245ecc85eec", "sighting_of_ref": "indicator--776f386b-cc73-4d3c-9880-cfaad977848f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1009d3-ba42-4c7a-94fc-b95402d802e5", "sighting_of_ref": "indicator--c59731c4-3265-432a-886f-f3499aacae21", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--410f0fba-4302-4b66-b26e-3aeb91cd037c", "sighting_of_ref": "indicator--a8c5c9dd-840f-483d-89fe-a2044b69d713", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b13ebbb-5fe4-4d03-9d23-4086dfc5fe17", "sighting_of_ref": "indicator--6b40224a-593f-4291-a5c2-b4f73f23f0f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4eecdb-7500-4326-a4af-b80bb780a281", "sighting_of_ref": "indicator--1abd69a0-f00e-4e3b-a030-a566813e55a2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0b7c77-8c0b-4122-9cba-278499b1e296", "sighting_of_ref": "indicator--1abd69a0-f00e-4e3b-a030-a566813e55a2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aa4cc5b-40c3-47b5-b3e2-55984b9e7071", "sighting_of_ref": "indicator--8bdd892b-313a-493e-82c4-588ecaed0a56", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9075f8-b02c-4c13-b106-9078ac895108", "sighting_of_ref": "indicator--8ba74bc3-3329-4d57-86d8-89086f682019", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523f1f16-3970-4888-a904-9c8b4ed0ab48", "sighting_of_ref": "indicator--d2d92af3-6cca-404b-a485-58743b865c69", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8246eeb-75f7-4b13-9f90-59cc7c5bc59b", "sighting_of_ref": "indicator--663842f2-a3ec-415b-8e2d-a52a7722e1a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9968f5-828d-4833-b4cf-6123dc7336a3", "sighting_of_ref": "indicator--5c05c84b-38dd-40d8-a6d1-6486144cb058", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81593385-9534-43c7-a1ad-76586761d219", "sighting_of_ref": "indicator--5c05c84b-38dd-40d8-a6d1-6486144cb058", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401f194e-de5a-4687-8c10-4e4d486455e8", "sighting_of_ref": "indicator--6845e523-9cfe-45c6-acaf-de262ffb3552", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c7c656-cc75-419b-b455-a3eec22797dc", "sighting_of_ref": "indicator--6845e523-9cfe-45c6-acaf-de262ffb3552", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9970148f-2f5d-4f96-96a5-e5b66019c82a", "sighting_of_ref": "indicator--5c0513a8-e50e-4d38-bb7d-17443f5f4e27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd7ad31-532f-40a0-8235-8ee1b7e4af27", "sighting_of_ref": "indicator--5ea69375-c35d-4b97-9405-fab3e84089f0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570e1a6c-0e81-4fca-999c-7f39c6c1aacd", "sighting_of_ref": "indicator--a7bc1ffa-ecff-4b3b-affa-14680dd5b6a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f69998a-1bab-4e1a-a975-19774d752af5", "sighting_of_ref": "indicator--9f53e4ea-7c09-4c24-933b-30212eb25a40", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8c2601-fc68-409c-8eeb-9cd84158ac41", "sighting_of_ref": "indicator--9e6e0c0a-0394-4ef5-bf76-17396edc799a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae7fc6b1-21c9-4d67-a9a1-2fd01d4854d3", "sighting_of_ref": "indicator--e79bea9d-ea18-4224-9a5b-eb1b78a3eba8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c57df1-d978-4f75-a935-1f3e2b222dc9", "sighting_of_ref": "indicator--adef96f1-018a-4783-9e61-99792109817e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43806d0-3b96-4e73-bd91-a00b62d91c0b", "sighting_of_ref": "indicator--05ffc75c-afa6-463e-a685-068e4b4d6d75", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--154659f4-0026-4b1f-99fd-acafc3e352b6", "sighting_of_ref": "indicator--cd6d842e-890f-4614-836b-d5e1b0d77741", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708d60c3-308d-405f-8dff-9b6b1b204ccf", "sighting_of_ref": "indicator--0280984d-a7b8-497b-9cd2-2807183abe08", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad8f9b6-d632-403c-be16-f012dd471fe0", "sighting_of_ref": "indicator--b52b1a64-82b7-4e6e-9074-e537f94b1e78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c4f5ed-6d67-43bf-bef5-96eeafee4906", "sighting_of_ref": "indicator--b52b1a64-82b7-4e6e-9074-e537f94b1e78", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e7066c3-05d5-4d4c-b80b-bb5131428984", "sighting_of_ref": "indicator--5442f31b-a68d-4389-b6c6-a06a66b0e12d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db62834-509d-4c42-a153-ec2e223e0ab6", "sighting_of_ref": "indicator--d2727ac1-56f9-48e0-8821-db39cfdf0e41", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5117cfe3-addc-41d8-b44e-a2480ea5b858", "sighting_of_ref": "indicator--b64f9e67-9700-4599-bc41-89b0839658a1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b37a930-743e-4e17-9c69-4d4bf6804efe", "sighting_of_ref": "indicator--58fb10a5-0eef-432f-9c8d-719541c1b413", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023550bf-b56b-49ed-877e-b9d1b56c3241", "sighting_of_ref": "indicator--58fb10a5-0eef-432f-9c8d-719541c1b413", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e183b12-a8e7-41cb-8a26-7f272ee01594", "sighting_of_ref": "indicator--16a2fbf3-c29b-41f5-93da-259f8dce24eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18d4698-aeb5-492a-98ec-9674856e39b5", "sighting_of_ref": "indicator--16a2fbf3-c29b-41f5-93da-259f8dce24eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97599e97-7025-4d09-9513-e34565528ac1", "sighting_of_ref": "indicator--92b67664-2eca-4b52-ab06-d444042b6ee5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93958989-e7ef-4c15-80b1-f694e0733205", "sighting_of_ref": "indicator--5103b7b6-d50e-44b1-b019-c1e760c84bfc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a64265-9649-4b59-b377-6fae3a4fcfeb", "sighting_of_ref": "indicator--67710111-f988-4c37-873b-814adb7a37d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f119f92-31e2-4e88-a63e-12eb3a8c357c", "sighting_of_ref": "indicator--67710111-f988-4c37-873b-814adb7a37d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1ec9e3-0c68-43e6-b4a9-c415dd575137", "sighting_of_ref": "indicator--e362c97d-d56f-4498-94a5-c780904f310e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f86377-eb62-4b66-b88d-0f93b0c897b1", "sighting_of_ref": "indicator--972950f9-f8bd-4070-9927-9c3cbefe2567", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f443942b-8887-4055-94c0-8d2d0c6cdb1e", "sighting_of_ref": "indicator--972950f9-f8bd-4070-9927-9c3cbefe2567", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d13cda4-b4c3-492f-b599-0c2d2718f746", "sighting_of_ref": "indicator--f7c6f5c3-172f-4635-9ae4-9f8e588f7ba4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3990ea-c238-4160-b42d-cafc06f5f2ae", "sighting_of_ref": "indicator--f7c6f5c3-172f-4635-9ae4-9f8e588f7ba4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b578da47-d10b-4a8f-a934-66a5331afd60", "sighting_of_ref": "indicator--41417200-2a8d-4739-818d-39cc2f7b4c0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437530b6-2d84-4e76-991c-019cfd5041a0", "sighting_of_ref": "indicator--a50061e2-bad7-47fd-929c-7efdf3b6ae05", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ecd4a6-e3bd-455b-b3d3-3e9a2600f0b3", "sighting_of_ref": "indicator--c7ce0b92-bb1a-4c1b-a31a-fe2ec5f098cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ab1fdb-1ae0-41aa-978b-7065749d0c83", "sighting_of_ref": "indicator--a1f8b15a-42d9-4579-8969-7edf5ff6ce2b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6b0345-21ab-4bf0-aac8-12df43ea06e2", "sighting_of_ref": "indicator--a1f8b15a-42d9-4579-8969-7edf5ff6ce2b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba53eba-aaac-4dde-9816-465f6c051f69", "sighting_of_ref": "indicator--659e3a6d-c84d-4c81-ad96-e4ed95b71a9d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92cb6f8f-c3db-4886-b5f3-6f92e5fdf547", "sighting_of_ref": "indicator--eec03dd3-e391-455a-bc4a-aef0bcbaaec3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--971cb6b0-d88b-45cb-8d28-b5a5d5a45a7f", "sighting_of_ref": "indicator--27ac9737-fa60-4f39-968f-2f8822c4a87c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--206b6003-2f9e-4e3b-9593-2ddb79c30342", "sighting_of_ref": "indicator--8fdea7a6-98ca-47b8-afab-abf1627ababd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40af1ef6-a870-4f5d-86d9-3f5786e7095e", "sighting_of_ref": "indicator--8d5f0362-b6d3-4b2e-a24f-d9fa2a653a8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1f45cb-d324-48b2-b443-30d4bebe265a", "sighting_of_ref": "indicator--8c420835-ecc5-41f5-8082-766d7931b26b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4333e05d-9e3b-426b-b474-71a6c153ddbb", "sighting_of_ref": "indicator--8c420835-ecc5-41f5-8082-766d7931b26b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf29c4e3-490c-4cdc-b19a-f1ab5e28d1cf", "sighting_of_ref": "indicator--8c420835-ecc5-41f5-8082-766d7931b26b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3494f90-6124-422c-a867-3e2e651539d5", "sighting_of_ref": "indicator--f3671fc2-9d88-4b22-b857-08618867cbe3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c899d67-62a9-45f8-9b56-e18740d2b916", "sighting_of_ref": "indicator--f3671fc2-9d88-4b22-b857-08618867cbe3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f78c013-31b4-4582-9d08-c28d0feef1e3", "sighting_of_ref": "indicator--9f13b4b9-8cf2-4104-a394-e5c7b6315605", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7765701-0a04-42ce-8673-dfe90917c8c0", "sighting_of_ref": "indicator--9f13b4b9-8cf2-4104-a394-e5c7b6315605", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb0f829-047f-4fb2-b5ad-49310ca07aea", "sighting_of_ref": "indicator--9d485c51-9fe8-44a9-aa82-2c889dccffb7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4225a3-a674-4434-842b-124c17ff2157", "sighting_of_ref": "indicator--8bdc40b7-4ebb-4691-acc2-e941d261f7d0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a189db2-eb7a-4279-a506-02990b58b4d9", "sighting_of_ref": "indicator--7ff26e9f-e236-4c6b-8986-45da72cee29f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d5f9d2-e4bd-4422-a8e3-ef4843904700", "sighting_of_ref": "indicator--7ff26e9f-e236-4c6b-8986-45da72cee29f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c4542f-ea1f-43d3-a559-1cb14e847744", "sighting_of_ref": "indicator--5aff5402-0ad1-40f4-89f1-1c2a0ea47cbb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9facafad-f946-4385-a31b-985e106de098", "sighting_of_ref": "indicator--5aff5402-0ad1-40f4-89f1-1c2a0ea47cbb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1051ffc2-7ab3-4cb4-a3be-72e752b9c570", "sighting_of_ref": "indicator--e73d05ba-eff1-4055-8938-af3e15c4b132", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b821eee-a953-45ed-a192-6102734d96a4", "sighting_of_ref": "indicator--c00b66ce-63b5-4420-98be-893cba6081b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a2ec12a-e83f-4250-86ea-b9c3a5c32926", "sighting_of_ref": "indicator--881270a8-6f5c-4739-94b8-f282936db381", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27cd5a54-90a8-4555-a444-75d280e8989c", "sighting_of_ref": "indicator--881270a8-6f5c-4739-94b8-f282936db381", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5262a542-c1f1-4775-8f32-c584c669124c", "sighting_of_ref": "indicator--89aeec6d-4e2e-482c-a4d7-37cb1ee6ec69", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a369c2b-c0d6-4298-893b-9e66f31ca41b", "sighting_of_ref": "indicator--1cb0ec00-ac01-4eb6-bc2a-ef6a45271fa8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0223a1c5-e268-462a-b28b-e41a9fd36bd2", "sighting_of_ref": "indicator--1cb0ec00-ac01-4eb6-bc2a-ef6a45271fa8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307d7df4-612c-4b9c-9c45-3175cd5b1f7d", "sighting_of_ref": "indicator--0e2b1a07-76e5-46c0-a483-8b2c67b7667b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9b5eb5-a947-48ed-9ee7-56692caf9dde", "sighting_of_ref": "indicator--34f4e15b-8f8a-40b0-9ba1-7d7e94f5dd16", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3206f431-bff7-4810-9758-d55a9b50f4ad", "sighting_of_ref": "indicator--521bfd6c-1490-43b6-b068-798e85dfdfd6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ec17fa-a2e7-4a5d-93fa-a012289c117b", "sighting_of_ref": "indicator--62c9192d-4d98-4d8b-9c95-c83a6fea06d6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de8b249-c2c7-4c71-8ef2-5b1d684a0e41", "sighting_of_ref": "indicator--cb67ec12-05d4-483a-9607-a50fe70405d3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87adbeb-d552-4b74-952f-9e82f9a5b30c", "sighting_of_ref": "indicator--35a0652d-07f8-4a62-89e3-3a4c7df1e0fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ac912f-feca-4ae8-820f-9333917f4314", "sighting_of_ref": "indicator--f40ba5d7-1ca0-4c49-bb85-137954ccddc0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f26d6db-93c6-4af5-8e70-a981d8148985", "sighting_of_ref": "indicator--c89cdf3e-d4cf-4ff0-90cb-f79bd58c4edc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e7da72-8db4-405f-9661-dd388a141f16", "sighting_of_ref": "indicator--18411c0f-b239-4c09-8825-b5195dc11256", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4886a3f-e554-47f3-9b8d-e3d39a4c472e", "sighting_of_ref": "indicator--18411c0f-b239-4c09-8825-b5195dc11256", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bebd30d-7893-4799-a0a5-9b3d44f391ab", "sighting_of_ref": "indicator--f838ba7d-8db2-4544-91e6-edfe37fbc097", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d00d329-7dd7-4dbe-95c0-d5cfd00904b4", "sighting_of_ref": "indicator--7d394a8d-6a3e-43f6-9ccd-d54071a33c09", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91126f1e-cf11-43af-94be-9dc6daf4c530", "sighting_of_ref": "indicator--7d394a8d-6a3e-43f6-9ccd-d54071a33c09", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54685080-a671-486b-9bdf-f080006af328", "sighting_of_ref": "indicator--726daa61-1e92-444e-93a9-a50e3d4badb0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e7e94e-ecf7-4481-830d-6ca2ac33ae4e", "sighting_of_ref": "indicator--216ecd8c-d300-4745-b2c3-1059f2b53d2b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11747f17-edd5-4297-99f4-2bb182cf6761", "sighting_of_ref": "indicator--216ecd8c-d300-4745-b2c3-1059f2b53d2b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--539a3ba7-f0db-4540-ae18-48baac6d0f79", "sighting_of_ref": "indicator--6dddba00-5922-4a9e-a79c-40e8b0b19da3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2f252e-8341-45bf-9fe8-26e5bf6fdef9", "sighting_of_ref": "indicator--6dcbca45-63f4-49b3-b669-f521767afb85", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8714420f-0865-4198-bae8-2ca3b24f1ac0", "sighting_of_ref": "indicator--6dcbca45-63f4-49b3-b669-f521767afb85", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16ccd546-74bb-4fe4-ad30-c0fecb3ca017", "sighting_of_ref": "indicator--c54e9baa-b593-4cd9-9f6f-8b1ef4efc728", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08651f9b-fd5e-4e5c-bf35-e6051af625e9", "sighting_of_ref": "indicator--15c2f52f-3157-4488-8e99-9cd40e0e9836", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f11a200-14d7-4438-b85e-5e5c373e832e", "sighting_of_ref": "indicator--9de77022-4a71-4c38-be0a-1e9efbf6668a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55a2bf2-0d05-45bb-afd5-5ebdafc7de4a", "sighting_of_ref": "indicator--9e018451-cd21-417a-b1e3-68f97213fbc3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ae7b5b-d597-4c90-aa45-1c7520776cb1", "sighting_of_ref": "indicator--deaeb4b9-254c-486e-9e70-c94ef69e020b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c245822-17e8-4d84-9b61-b1b52f9fdd67", "sighting_of_ref": "indicator--04cb7cba-1215-4ca6-af97-b268f6154b00", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b731ec32-1657-4a44-904e-0e1cb2ac7d31", "sighting_of_ref": "indicator--04cb7cba-1215-4ca6-af97-b268f6154b00", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017bf189-467f-46f6-ab22-0208eb9bac64", "sighting_of_ref": "indicator--f966f1c2-da92-4b1f-bf56-1cc3e0d923fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6641a6d9-1b23-4c11-affc-8a0d8d96b298", "sighting_of_ref": "indicator--74749587-4683-4589-9efb-eebe8d91c458", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481200dc-e965-4fdd-901d-b3ad2a070c3f", "sighting_of_ref": "indicator--0b1aa2ba-1848-4dac-aaa0-6b7a224c8774", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ec7c4d-db62-4792-a233-3f5e3b60b43a", "sighting_of_ref": "indicator--0b1aa2ba-1848-4dac-aaa0-6b7a224c8774", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0edf47b-b3c8-487c-b659-0c1ab5db05d5", "sighting_of_ref": "indicator--28c2f455-9963-4c8d-9cc7-dfa99f6c24cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c377ce-8365-4971-a915-38e1228792e7", "sighting_of_ref": "indicator--6c0006c0-6555-4262-a48d-b236cbba64bd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b388eb57-c0ad-4131-8e18-e6fa35363349", "sighting_of_ref": "indicator--7edce46d-d616-4909-be95-b6e6fa4d0956", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eddbf35-a0c5-4136-8505-5ad234bf37ba", "sighting_of_ref": "indicator--7edce46d-d616-4909-be95-b6e6fa4d0956", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393249b2-9245-4990-87d0-01153799db49", "sighting_of_ref": "indicator--05f1135f-f789-45ed-b3db-523b9cbb138f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3458909a-b5eb-4f2b-8933-07d64e89626f", "sighting_of_ref": "indicator--314d56b3-f6ec-4429-99e9-62716e682e36", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d7fc42-6597-40ca-8e31-888bf6512930", "sighting_of_ref": "indicator--4665f7a4-8167-48de-a27f-50ed659e5a09", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4342e838-348b-4027-8e33-234546cad579", "sighting_of_ref": "indicator--6c3e5d12-2219-4307-a974-f09795edb9fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf54b0d-40c9-4005-a4bc-7a110da230fa", "sighting_of_ref": "indicator--6a9e5b09-63b0-4be8-9f11-d268acbd133d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ffe78e-5822-467b-bc5a-cf1a9bc8a571", "sighting_of_ref": "indicator--6a9e5b09-63b0-4be8-9f11-d268acbd133d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4cd799-f8cd-40ec-9730-46766da8c5bc", "sighting_of_ref": "indicator--251b2c06-778a-4d4e-86ae-64f2e48273c2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e45a22-6305-4158-9120-353455b5bb1b", "sighting_of_ref": "indicator--36259520-d57b-48e5-88ae-a431ab7df2c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dadfb220-d7ec-4383-a04e-b4bd1c5d428a", "sighting_of_ref": "indicator--36259520-d57b-48e5-88ae-a431ab7df2c6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84924e23-211b-478a-a196-ba9c377261c4", "sighting_of_ref": "indicator--5b2ea7e9-b6c4-4b8d-99ad-94af8fa5e321", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96a828b-69f9-4c85-b1aa-da36fa990c8b", "sighting_of_ref": "indicator--2b34261b-e3f9-4d4c-9ba1-52a13ea14e19", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98cfb40-4ff6-4b56-8283-15771869538f", "sighting_of_ref": "indicator--308040e5-1a14-4bb2-b4c5-e9d2692ceccd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--373d9a5f-8e91-49dd-8bca-6b59728fa561", "sighting_of_ref": "indicator--308040e5-1a14-4bb2-b4c5-e9d2692ceccd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3cb0e6-fa3e-4f81-8d55-67d9bd6e7897", "sighting_of_ref": "indicator--97795740-6859-4e41-b07f-da932f3b1a51", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0237e7-68db-4cdb-93a8-5df6edf71e26", "sighting_of_ref": "indicator--92ddb4d1-b234-4254-bc51-359aedbd49f1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ac881c-36ae-4be9-a97c-cfbf414b91e1", "sighting_of_ref": "indicator--a7a6c47e-7fed-4881-8dda-1faf22cc44fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265d1763-abce-4d23-b3b7-b935593abee9", "sighting_of_ref": "indicator--8aa1331f-bb58-4a97-a639-8581b1e190dc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb99ed2d-9682-477a-a6e0-cf3e51d61bfc", "sighting_of_ref": "indicator--819fc7a6-d91c-43cd-9985-80a082ff5ff1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93981d96-0330-42c4-88bf-589edcc8392d", "sighting_of_ref": "indicator--819fc7a6-d91c-43cd-9985-80a082ff5ff1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae16213f-d826-4705-9d2f-ab51f040d0eb", "sighting_of_ref": "indicator--b30b0726-8505-4013-bb87-8d8a0d9a1fbb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd41410-3c6d-4adb-98d0-5f744ceb1328", "sighting_of_ref": "indicator--b0cf956c-1811-4e44-9c5b-18709aa6fd4a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e52ec15-91cf-4f80-8e48-30e4b740d8d9", "sighting_of_ref": "indicator--5b901a59-8b83-44de-867d-e64ecd80c06b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63da0cf3-cd3f-4bee-a394-ccb01fd5ee7a", "sighting_of_ref": "indicator--d8efa820-fb7f-43a4-9945-7d89f384ec6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436acd8a-4a7b-4209-abb0-a22efb00d593", "sighting_of_ref": "indicator--d8efa820-fb7f-43a4-9945-7d89f384ec6b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c33714cc-17b5-4c46-9938-dc295b4930c1", "sighting_of_ref": "indicator--5b143351-8c66-41db-9e19-774cba8a412e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a6da55-1f00-42e5-b681-0152d8eab4d9", "sighting_of_ref": "indicator--5b143351-8c66-41db-9e19-774cba8a412e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d69a97c-e83c-4ac0-bd7b-c8cb23703efa", "sighting_of_ref": "indicator--d5c67882-1019-4fd5-9bed-862bac649847", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d22f7d-0471-4848-af9c-d217f6b2d195", "sighting_of_ref": "indicator--594d8727-b996-4998-ac38-cec055164482", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb768d6-6b74-4ff9-9f9b-1fcec9cde394", "sighting_of_ref": "indicator--594d8727-b996-4998-ac38-cec055164482", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0dfd132-57e9-4cfa-b567-033b3b4fed9c", "sighting_of_ref": "indicator--28968ea9-7b8a-4919-88fa-36c47fc2ba06", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6ba228-b143-4fd7-b9c6-91ada69a8a1f", "sighting_of_ref": "indicator--b9331b48-76e7-49da-8c0c-4b574da16aa0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399a456d-198a-4862-9f88-4530b09c73f2", "sighting_of_ref": "indicator--5cc07329-8aee-4ebd-9976-0639932f6728", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a12fcf-3796-4982-b24e-3af2c0a3eaf3", "sighting_of_ref": "indicator--5cc07329-8aee-4ebd-9976-0639932f6728", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8457ca59-9b2b-4502-adf9-94409aa43bd1", "sighting_of_ref": "indicator--48e7b1a0-90b0-4984-b23b-d3e6ea6754f0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da80fda-ac82-4e66-907d-f25fe7bfea9b", "sighting_of_ref": "indicator--b7bd5ebb-4de2-4524-af66-89eba4312583", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795873fe-c298-42f4-b7f3-e7806e3b2b36", "sighting_of_ref": "indicator--a9fe6b49-1268-4b90-90ca-72933969249e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb0149f-72b9-4d9a-8fd3-a4af3d14afc6", "sighting_of_ref": "indicator--ff5c2a72-ac74-47a1-8687-5b8ce4dea001", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36885312-cee9-480d-bdbd-39729bf62b1a", "sighting_of_ref": "indicator--e93e1815-d534-42b7-8d0c-f10324f09a7e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ceeb370-95cc-44c6-a8ad-bde58800a0f5", "sighting_of_ref": "indicator--460fb8dc-2c38-4efe-92b6-ab042d62d11f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f02cf9db-14c2-479a-9bc8-456f08f917e2", "sighting_of_ref": "indicator--460fb8dc-2c38-4efe-92b6-ab042d62d11f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b9878f-647e-44ec-8d3b-2d35b84777fb", "sighting_of_ref": "indicator--2920f2b0-bb96-4d42-9b6d-55b9207267e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890545c5-918a-4b28-82d0-942e6bf02927", "sighting_of_ref": "indicator--a2f6389a-17c8-458e-9c92-c847d85ab289", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d7e244-bf5b-423b-8d69-06e9b226ace9", "sighting_of_ref": "indicator--51485855-3679-41a4-b34c-3f87bdf33843", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02141458-66e8-41b8-ac39-bf720bca50c7", "sighting_of_ref": "indicator--c2443a36-a4d5-4eb9-94a8-b68db5640805", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9612c2f-15d4-46c3-86ec-edddf6199da0", "sighting_of_ref": "indicator--25711b9a-ba5b-4662-bb14-36f7618bf37c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deca952-d4b2-442e-b3e5-ade8112d34e3", "sighting_of_ref": "indicator--e8211bbf-1fb4-4f9b-8987-be672b81575f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dc655d-de93-421c-8aed-a1907f278c1b", "sighting_of_ref": "indicator--feffea76-7e6f-444e-bc2a-302b549e7d8e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6d33bd-c86b-4908-8d06-be217dd77b80", "sighting_of_ref": "indicator--8372a130-1bbb-4be0-a5b4-b3239519dc63", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213f6588-cba4-41ef-a6ff-45736b8dafa2", "sighting_of_ref": "indicator--cdb6855a-2464-4f89-bb84-ac3469eee3e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d368368-ac7e-472a-ab50-ac7589945892", "sighting_of_ref": "indicator--2bb9b6fd-5d4a-46e8-8049-0a43492bf37f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460dae2c-e337-488f-b30e-7e952e13a372", "sighting_of_ref": "indicator--0a745223-92b6-4f0f-a1a1-6af2ff6b096c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--125e68c3-ee84-44f6-a7db-988b6cd7c9d6", "sighting_of_ref": "indicator--26c5b077-5e74-470b-b8bb-ed866ad23ca1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c953118b-8474-4249-b07f-4b10cea80e4e", "sighting_of_ref": "indicator--fbfbf08a-8f67-41a7-a249-2b2426a708fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73514f58-0962-4cee-b453-67940be814d2", "sighting_of_ref": "indicator--1233cc53-9f79-4b61-bbef-7413f9b2c431", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d764eb8-258d-4a1a-8fe4-cfe4b97876ae", "sighting_of_ref": "indicator--7921a6dc-c577-41d3-845d-006448cb0641", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9d5a42-65c9-48f6-81a5-a3f154294e1b", "sighting_of_ref": "indicator--7921a6dc-c577-41d3-845d-006448cb0641", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad972df-6872-466f-bac1-d1b503e1e6b3", "sighting_of_ref": "indicator--e971eb8a-af33-41f3-a0cf-ade08f7ed7e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6e5ba5-e0ac-4c04-9289-308a3a001978", "sighting_of_ref": "indicator--e971eb8a-af33-41f3-a0cf-ade08f7ed7e5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4404276-06e0-4c11-b1a0-f1dc6d96c16d", "sighting_of_ref": "indicator--c4419588-d9b1-441d-aad6-e49112d151d7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e831ca65-0ff4-4f02-848c-3a8e5631eb7c", "sighting_of_ref": "indicator--57414446-9105-45de-be65-906a9dd923e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b79355b5-4304-4cca-910a-ee9b6c429df2", "sighting_of_ref": "indicator--e32dfb36-48cc-4d5c-9a95-75d71b579971", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b64e9000-a7b6-4635-8e83-403dc9cc80c4", "sighting_of_ref": "indicator--5c017234-1a71-4715-8130-691c08b30411", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2461774f-95d1-4920-9d4f-b5c0ecae5776", "sighting_of_ref": "indicator--83c11451-d5b7-49f6-b136-9da9e8d007f1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093eead5-f7e1-4ed2-966e-993e16676fe3", "sighting_of_ref": "indicator--0b6ca78e-5c6a-44bb-8825-8831072465d7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80db6dc7-dca0-4531-b723-b51cedfb9538", "sighting_of_ref": "indicator--ef852fa3-a1ad-493b-936c-05a4ae46a5de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22382e47-0743-4e1c-8e0a-0701df182a58", "sighting_of_ref": "indicator--58973755-36a4-4168-85ab-651a8f917983", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1250406c-2066-4345-ba03-fdb44aa5b7ea", "sighting_of_ref": "indicator--a350acec-92ef-4a41-9228-c11335f0e489", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d5109c0-7303-4e18-8215-61c8d680dc54", "sighting_of_ref": "indicator--579620b3-30d6-472f-a075-a7bb4acf18da", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78bcaeeb-7616-4309-ad47-175744090020", "sighting_of_ref": "indicator--5191df8a-6765-439d-a4a7-a142d8ec00f1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a744b4a2-6308-429f-80a4-15a574360d1b", "sighting_of_ref": "indicator--d9a8ca1f-5f60-4853-a93a-ed5968fd24d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bbc945-d897-47fe-8fbe-00c3fde78c62", "sighting_of_ref": "indicator--73e0e978-4f38-461c-b9ca-da4be6f7c769", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84226c79-9ceb-4845-be7f-01b015ca0f05", "sighting_of_ref": "indicator--b3046165-d04b-4312-b73f-6c6447fe16e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6262011-2b37-4ae1-bc50-2d19f934d453", "sighting_of_ref": "indicator--d45b7936-b85f-4aca-a049-91e813b43888", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7cbe3c-8c3d-4ff3-b12d-fe9528b72bce", "sighting_of_ref": "indicator--9d72165b-cc15-4117-b51a-da465102ea48", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c569d57c-cd10-473f-b140-1d6ff54d1545", "sighting_of_ref": "indicator--2401e54c-9777-496e-9439-99d6420716ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28d3492-dd08-4407-8c91-a630f789a630", "sighting_of_ref": "indicator--54f7712c-fe9a-4a7b-a615-15fda96bffdb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300840f0-30c1-49ad-bb48-c165369359cb", "sighting_of_ref": "indicator--3d30f395-4794-4875-816d-51aa04ac67ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079546e9-d5cd-4430-8fc2-3a86503a2004", "sighting_of_ref": "indicator--ae35e2b5-c505-43b1-ae2b-56be034904a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b920637d-e224-406f-b0f7-7df71ceb9166", "sighting_of_ref": "indicator--70b0884d-241a-4bb3-926f-b0f536000353", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15566a0-30c1-4175-b108-b0772047eb63", "sighting_of_ref": "indicator--06142e99-7788-4e37-9d53-fa541eff632c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091b2809-86fc-4141-b5dc-34e185f7ac42", "sighting_of_ref": "indicator--27be43c4-967a-4c5b-adc4-34325f9a7791", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9af2b520-a5ec-44da-8c13-7443bd7dd44b", "sighting_of_ref": "indicator--4c53d626-7614-463d-9449-1bbf10b40b25", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636bebe0-4dc5-45f6-9b06-6d22d115d9b7", "sighting_of_ref": "indicator--67b8f118-a456-454d-ab33-e9963c0fe9dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb615568-3dee-4e39-80ad-97f7487d4b2c", "sighting_of_ref": "indicator--2294987e-be94-4359-869f-553800e82953", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74c612b-4e6e-46e0-ab11-3bb23fc563c4", "sighting_of_ref": "indicator--2294987e-be94-4359-869f-553800e82953", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde5d29b-a081-4ff6-ab94-f36ff3739b1d", "sighting_of_ref": "indicator--0217298b-018c-40cc-88ff-440a6219a53a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dbc838-d8c9-4026-b2d8-1609e6319bca", "sighting_of_ref": "indicator--0217298b-018c-40cc-88ff-440a6219a53a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a42acae-c805-4b9c-adec-91bf977e36e5", "sighting_of_ref": "indicator--60444454-0439-4c2b-9479-216a4c1d39d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8cef9c-5f67-401d-b339-074990496eef", "sighting_of_ref": "indicator--60444454-0439-4c2b-9479-216a4c1d39d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247b65d6-1535-4ca7-b372-f8d07cdf18ca", "sighting_of_ref": "indicator--bbd63983-88fc-4902-8003-98179208d81e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ea7d4d-1917-403a-9238-3df9b94d6389", "sighting_of_ref": "indicator--bbd63983-88fc-4902-8003-98179208d81e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fee4e02-86a8-44eb-b722-8926f3e6f21d", "sighting_of_ref": "indicator--8aadcbfe-7f6d-4eef-8a81-6e5367efb854", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4492d9b7-6990-4a44-b6ab-2caa0ecd8e7d", "sighting_of_ref": "indicator--8aadcbfe-7f6d-4eef-8a81-6e5367efb854", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c64580-f1f7-4e24-a1ca-1793a08f4d29", "sighting_of_ref": "indicator--ab2ab473-5148-4a2e-ab41-ed35a0e46b7b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b70e9a2-c25f-4d5e-a9e8-05237c104392", "sighting_of_ref": "indicator--74a1a8c3-d286-4df0-9082-43234f83fb99", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d8f350-5720-4e91-be47-c4b44732a670", "sighting_of_ref": "indicator--74a1a8c3-d286-4df0-9082-43234f83fb99", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc1ad57-717c-4a68-8030-89c30a384e0e", "sighting_of_ref": "indicator--f87f23d3-d1a7-4829-9235-39798c564102", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd862c8e-4e22-4991-9a55-59a21f7a693d", "sighting_of_ref": "indicator--1ad31e58-d244-4f03-bc6c-ddddad05a148", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb52f6a-b69c-4d26-9b79-6e156ca38266", "sighting_of_ref": "indicator--17f76e45-ff00-44d8-b8bf-4fea7d8dc3eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceba9a82-2af6-48f3-8f9b-95dc73c3dcf3", "sighting_of_ref": "indicator--863df56d-cc37-41c7-a4f7-d62d1a121571", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a825295-01cd-4152-8959-cb6873113f3d", "sighting_of_ref": "indicator--037fb77c-31ff-498a-91ae-64d5e9fa581e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9d0a9d-f36b-4d02-8042-ea99ec8bfa6b", "sighting_of_ref": "indicator--1904c5c3-ff18-4db1-ab7f-b73cb85bd68e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825c65eb-0892-4b40-8699-e860eb287eb2", "sighting_of_ref": "indicator--834f23e4-bf1b-4508-ba61-cc6d83b31fa7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecafddad-c798-4793-8e9d-95b14f2d1b1f", "sighting_of_ref": "indicator--3054badf-4c8c-4451-b3d0-2c74ae384d6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b84973a-7df7-4c26-968a-44ed6f445f55", "sighting_of_ref": "indicator--4f812081-96ce-4cca-85d6-72cfc8ccd406", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375f1917-1391-48b0-ba19-fa923cd44839", "sighting_of_ref": "indicator--b16c6cbd-5930-4296-9203-99eb73525191", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a9df83-69c7-42b9-9b55-042c28402514", "sighting_of_ref": "indicator--20c3f8e1-67c6-4b79-b211-3578c118e756", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cc72133-3029-43e3-93af-18d4d75d80f7", "sighting_of_ref": "indicator--20c3f8e1-67c6-4b79-b211-3578c118e756", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0d33c2-0f9c-4910-82b7-bce1254b8312", "sighting_of_ref": "indicator--6ff71703-1751-475b-9541-01b47c3d1d92", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44e77cc8-1be6-496d-8efa-a69196b9d233", "sighting_of_ref": "indicator--6ff71703-1751-475b-9541-01b47c3d1d92", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac01cc9-e847-4b1b-b158-d19538f06d53", "sighting_of_ref": "indicator--55c3ca63-32b9-41e1-8c47-b4ff4a5e2d8e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2474d36-ba41-491c-b8b5-f3de89f4c35f", "sighting_of_ref": "indicator--a0d88173-b7ae-4c1a-a6bd-f45a84738552", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f8ce18-9849-4fa5-a0bc-dffd71ddf2f6", "sighting_of_ref": "indicator--a0d88173-b7ae-4c1a-a6bd-f45a84738552", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0bb31f-7d38-4341-88df-2836dde5f3b4", "sighting_of_ref": "indicator--67a63ac5-30c2-4bf5-a695-68f4ed7385de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--146ca32d-0cc7-4c1b-a63f-41decf923043", "sighting_of_ref": "indicator--67a63ac5-30c2-4bf5-a695-68f4ed7385de", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53c8793-27e8-4710-83af-8d75765baa91", "sighting_of_ref": "indicator--9f4e261b-7bfd-4e56-9151-38c8386667d0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a5994b-1375-459f-8602-0b2bb1dd2ebe", "sighting_of_ref": "indicator--9f4e261b-7bfd-4e56-9151-38c8386667d0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0101246c-8930-4ac0-b1a9-44b9804a8ebc", "sighting_of_ref": "indicator--6a6332da-6de2-4d79-ab36-85da713f1dbf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946d536a-75d7-4eab-a63e-d1246ed0b3f3", "sighting_of_ref": "indicator--6a6332da-6de2-4d79-ab36-85da713f1dbf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e993e8a9-9814-4e37-8c20-7e5fcbceace1", "sighting_of_ref": "indicator--33b1404e-f96e-49d5-bf3b-6a7ba292e139", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58ab206-3266-4da9-b3f6-e363eee02bbc", "sighting_of_ref": "indicator--12bee3e6-2d52-4df8-b6ca-358ca3903f5d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6baf6a1b-0edd-4556-846f-82860a144fdc", "sighting_of_ref": "indicator--2814d8ee-9480-4578-8d60-91c2561bbfd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba62ae1-7873-4319-bf5e-5ff0a6224d71", "sighting_of_ref": "indicator--2814d8ee-9480-4578-8d60-91c2561bbfd7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab2b89c-3786-4c3c-9b38-942fbab8e711", "sighting_of_ref": "indicator--3729f2d9-ff6e-401e-bee1-84d0386cf645", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63dfe87-bd7c-417a-b8fc-4e72c74bbb21", "sighting_of_ref": "indicator--c17541c3-aff3-44f1-8ce0-9defd8f5e263", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d00033c4-795e-4865-a424-4a93a08a5bd9", "sighting_of_ref": "indicator--fb501900-1ed9-4e09-99a3-3360e1c0933a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29795c49-5f5b-4167-8d32-920a8c0e8e77", "sighting_of_ref": "indicator--0e0d1272-d102-47c8-8b4d-03edc24a267a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7915bc7f-2282-4fe3-b9a5-443dbd4d2a4c", "sighting_of_ref": "indicator--faaed463-2508-4438-880d-9a5311808d7a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a47b5d9-e2d6-42e5-9177-fe875c47a934", "sighting_of_ref": "indicator--faaed463-2508-4438-880d-9a5311808d7a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3189d6cb-512c-49d6-8014-0683a9348523", "sighting_of_ref": "indicator--d3c12846-3f2c-4741-9d23-ce49befc57ac", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25e92c0-03dd-42b0-8955-95beb31ad233", "sighting_of_ref": "indicator--608a3e73-f4e1-4554-812a-04c9832db454", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460f84b7-8e78-48fe-8b51-72c830fcc863", "sighting_of_ref": "indicator--ad3f33a5-5e40-46de-852a-1f7bb7aa14ee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bfbed97-3c30-433c-a52f-158d718fd7dd", "sighting_of_ref": "indicator--69332c78-73a0-40d8-9699-e16375b98058", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18e578a-4038-4413-9e52-0cefd188e414", "sighting_of_ref": "indicator--8ca40ec8-5cb9-4fe0-9174-32f3e06e6920", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a615226-5697-4a9f-9636-9fb459cc4f3b", "sighting_of_ref": "indicator--d0f71cea-b01b-4c85-81c9-4a18d01e894e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77adc21c-b334-4134-a11d-0158bfaf7e69", "sighting_of_ref": "indicator--a91f09b6-70bd-40e5-bc5e-82d5235c407d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f0ad39-9e89-473c-9d08-4aae980ea4e9", "sighting_of_ref": "indicator--9fe2710b-658b-4730-ac54-847d57e9e312", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee0a51d-c24d-446d-9291-43ab289e586d", "sighting_of_ref": "indicator--c7d3f6a0-4749-4b35-a84d-79b7f7582fad", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d3a743-2391-4a92-8816-ea64c89e2d72", "sighting_of_ref": "indicator--96d66997-ca42-48cf-910f-68f70116193a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a4eb389-2970-4ba3-b244-6baac9ea68d4", "sighting_of_ref": "indicator--03f33896-290a-47b8-baf2-62de313757c1", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602d4e0d-59c5-4606-a393-bbee503c5589", "sighting_of_ref": "indicator--e8c22c7f-a74e-41da-a747-3b8f0faa7343", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd370080-a5e2-445a-82c5-cf093ba3446b", "sighting_of_ref": "indicator--ae5b1011-7578-4cf5-bc01-5f2d10868d3b", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5a7f9c-ca5d-4b18-a7d2-aa7801c01fac", "sighting_of_ref": "indicator--4cda3489-ed47-463d-9c3c-7e48c613ba44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8107b220-88b2-4000-a760-944e1152c41c", "sighting_of_ref": "indicator--fab6078d-f669-4290-8748-b3ae71806628", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71cecb36-4f62-4097-bdca-d812856d7df0", "sighting_of_ref": "indicator--5257fdb1-e7b7-43e8-9dba-6435e0157d0d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76c6669-7ac6-49c4-8d11-e8e303e4335b", "sighting_of_ref": "indicator--d939307a-870c-4ff6-b7b1-ac9a2922961f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0039d52-141a-4413-9576-5db3c05ed935", "sighting_of_ref": "indicator--c6773d10-46fc-47c4-90c5-def0859e734e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b163569f-3db6-4582-a79d-9820d67e8128", "sighting_of_ref": "indicator--82738a94-9ec6-4677-a0db-649d4d32c82d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f7c603-e6b5-4425-b80c-d254fb0dc409", "sighting_of_ref": "indicator--82738a94-9ec6-4677-a0db-649d4d32c82d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dafba24-5272-440d-a11f-ceec1ed8c034", "sighting_of_ref": "indicator--ba0cd58e-1ed9-4ffb-8bab-e069a3f62c74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8add41f6-6eab-4344-8255-183636171067", "sighting_of_ref": "indicator--eb68aa9a-45ea-4158-a9d8-9127195fc017", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dff2a3-84a4-4491-9dcc-260cb9cf3689", "sighting_of_ref": "indicator--98085b23-ef09-404e-8f08-c4e1afbd5fb3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a6a9ba-3115-4f79-bb53-06e3895e1ddf", "sighting_of_ref": "indicator--05999800-34ed-4f35-aaf1-4a1c1961861d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011737aa-5a5d-44da-b333-0954d61497b2", "sighting_of_ref": "indicator--9a994f83-3f45-4ac7-8113-10f0c1cabf98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d6f10e-ae45-40ba-9ca8-95622c78db2c", "sighting_of_ref": "indicator--9a994f83-3f45-4ac7-8113-10f0c1cabf98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f82927-14ed-485c-aeb7-03cf8bc1e58f", "sighting_of_ref": "indicator--34fdd998-d50b-40ca-b227-8ca922f12677", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cbfaf6-5f70-4b4d-b494-64f368f8d5f1", "sighting_of_ref": "indicator--ea666600-527f-4e18-8b1f-8e37a3b2f5ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f7cd41-698c-46b3-9b9c-741421376cfc", "sighting_of_ref": "indicator--1663b7e4-eab3-411f-8930-b6ca5a17603a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d7475f-5991-4a57-b7a5-52724ef0a4a0", "sighting_of_ref": "indicator--1663b7e4-eab3-411f-8930-b6ca5a17603a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad44197-b745-4afd-99c7-cd77c8cfdaf5", "sighting_of_ref": "indicator--08c7500f-4ea6-4e79-a564-4895e6704a44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc1d8df-9c3c-44df-af95-7070ef4df1da", "sighting_of_ref": "indicator--5149a7e9-cacb-4292-b752-f4f3a6a0175c", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48b038c-3fdd-48e2-bd32-0e878e100b41", "sighting_of_ref": "indicator--5149a7e9-cacb-4292-b752-f4f3a6a0175c", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1a052a-fbb6-4517-9166-75e5727ca5c4", "sighting_of_ref": "indicator--5149a7e9-cacb-4292-b752-f4f3a6a0175c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c9ff71-1f8a-486b-b76f-df5e0484ed52", "sighting_of_ref": "indicator--5149a7e9-cacb-4292-b752-f4f3a6a0175c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475179ab-f9c7-4189-938d-4b6bfdb7629e", "sighting_of_ref": "indicator--5149a7e9-cacb-4292-b752-f4f3a6a0175c", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc71d55-7f96-4324-9270-f5f56975ed1d", "sighting_of_ref": "indicator--4674d6c3-aa12-49f4-8f52-6f659642ac58", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c2c7ca-2018-4401-a384-a34d91b86484", "sighting_of_ref": "indicator--1ef024bb-8b8e-47a9-a4de-83165c4d82b3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c397e5e6-0ee5-4654-9625-5e9ead1491e5", "sighting_of_ref": "indicator--905f7af6-6358-4f62-8e1a-c511c3fd9746", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0473284-700c-4a4b-ae25-37ad453a2a0d", "sighting_of_ref": "indicator--ef87b5b0-b9a1-4d9c-89c1-57df6d84abb1", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5db686-f69f-4ed1-be50-95863486c769", "sighting_of_ref": "indicator--ccc8da82-484c-4a17-803d-7a980b1c5aa2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b55e8e9-8aeb-4ab5-99b0-33867ada2d2c", "sighting_of_ref": "indicator--c3d9e11e-4b3f-4d25-9d36-376dfa95ea71", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a2752ce-14db-4db0-a268-7f87c852bd20", "sighting_of_ref": "indicator--0875ab2f-4464-4fc6-9b61-8570e7f1534a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2abe315-c1e5-406d-a520-c4b243f796da", "sighting_of_ref": "indicator--15c23c77-52e3-4961-b511-1f7fc4b1f59b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c934097b-3a41-4274-beb6-f2811ac9809d", "sighting_of_ref": "indicator--1d9f3eb6-d764-4b9d-bed7-805c11a7d036", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30368e6c-1113-4cb3-9937-50c989e94a64", "sighting_of_ref": "indicator--56e1d8e9-ca01-4967-ad3c-a39ccd2b1eb6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f53959-88e0-4ce0-bc79-108b24c16577", "sighting_of_ref": "indicator--682de883-a9c9-4bc5-b91f-4aba0543ab6a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e534055-48ce-486a-a257-b8e1ee06e50a", "sighting_of_ref": "indicator--682de883-a9c9-4bc5-b91f-4aba0543ab6a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fea0111-5e46-4da7-9aa6-47da420a65e3", "sighting_of_ref": "indicator--ab9e57b4-cc39-4187-a91c-9ba794dfb2db", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9547bf39-72f9-4c36-b521-cf077f45e421", "sighting_of_ref": "indicator--4d3344ce-5a60-419f-94b2-57df12fd15ab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c60fdc1-24ec-4a5d-ad14-68809f9fd960", "sighting_of_ref": "indicator--ad34de40-bd15-4f18-ae31-91d199ea3fd1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c9c800-29e4-40f1-8ebf-e82130f61856", "sighting_of_ref": "indicator--8cd937d6-6c16-45be-af09-2425607853fe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5698b577-56f6-4bb6-a605-ca4773bc558b", "sighting_of_ref": "indicator--47593be0-929e-4986-8afb-3cb48b78d61d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550f99dc-476f-4da2-b787-8cb03dda5f7f", "sighting_of_ref": "indicator--47593be0-929e-4986-8afb-3cb48b78d61d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5068f1ca-e6a7-4fdd-a877-6c0b846dc1d5", "sighting_of_ref": "indicator--f7d62eec-c93b-4a12-9598-949d3c662798", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e652d8-d0dd-4f68-aa88-b6a22a388f18", "sighting_of_ref": "indicator--3b038851-045b-4746-9f07-6616e7a89386", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fdcdb66-fff5-4aaa-9950-2cf5660b3cbe", "sighting_of_ref": "indicator--29688c6c-5975-467b-9213-7d967a20b180", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a60e08-e13e-4b35-8538-6ab4760e62b8", "sighting_of_ref": "indicator--147efb01-7439-4aeb-8327-8c4b32a30b20", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cdce090-ecf0-42c1-b08b-b85003050d43", "sighting_of_ref": "indicator--444b0ca1-84f2-44ee-a7e8-82d15dbf0a80", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4bf4b5-8fb6-482a-801f-c12da2c358a6", "sighting_of_ref": "indicator--254708ae-084c-4682-92b6-77a8c4170250", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ea1497-8154-4ef3-8a38-a8881be9f2ff", "sighting_of_ref": "indicator--54faa637-bbc0-43a0-b0fd-192e50f30bdc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5849ef-2cb9-41de-9922-04c55f38b561", "sighting_of_ref": "indicator--38508584-749a-4459-bd54-94502ec04e16", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574a6b81-670a-4faa-ae1c-5c906d1ad710", "sighting_of_ref": "indicator--84fc4ea1-df5f-4c04-ae41-5dd6a3b3b0f1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab633ae-2ee3-4819-9260-b3c7585e6f97", "sighting_of_ref": "indicator--2dee1d3d-968b-428d-b6b9-5477b82c4037", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34c2f32-0a83-458c-9fe5-150833508d86", "sighting_of_ref": "indicator--2dee1d3d-968b-428d-b6b9-5477b82c4037", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf2c29bb-8945-4585-bf6d-3cb00dca1653", "sighting_of_ref": "indicator--3b99fb48-a79e-4d3a-9f4f-30e4d8b82bc8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3c00ccb-96b2-476b-a925-87cbdbd8b9b7", "sighting_of_ref": "indicator--afbc2e78-8869-4612-887e-deead684dfea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07458ff-611b-41d6-a92c-d342ff9cbb4b", "sighting_of_ref": "indicator--d3f85360-49e2-4a8d-9eeb-e80bdfd4ff5e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72b71583-f5e4-4e36-b76e-72e5b018ae1a", "sighting_of_ref": "indicator--522b3027-383f-4ad1-ae48-d930b1d9a35e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97b1dfe6-1b55-4a77-ba9d-80aab81025e8", "sighting_of_ref": "indicator--e1e0b0db-85c0-445a-89e0-280dba8c5820", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84640b4-ff0b-4457-bfda-6525a59443c4", "sighting_of_ref": "indicator--70d931c9-25de-437b-8fc4-f95518ef2c70", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f45243c5-45ae-4a92-b91b-bf678be84b69", "sighting_of_ref": "indicator--ef5739cc-cbf0-4443-9e98-68ef41fc6056", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55117e8f-c9fd-468f-a78a-b66b6db0e11e", "sighting_of_ref": "indicator--e2cc16f6-cb6a-4188-aef2-3fd3b2700441", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9dccb3-6fdb-43ed-911f-cc792639d16c", "sighting_of_ref": "indicator--428698e0-9909-4901-abcf-44874b928bfe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca409e03-3b7c-42f0-b6ec-606824d2d69f", "sighting_of_ref": "indicator--4fec31a7-4d15-4f5e-be25-b26b180a297c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccfebc8-d4a2-4476-89e2-33d4d54e7777", "sighting_of_ref": "indicator--18d390a4-2f50-4642-ad37-a06f7454e89a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19849f6a-7c63-498c-b9c3-228694263722", "sighting_of_ref": "indicator--66bccaa0-8aa0-44e6-8241-14525dcd0564", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf97d9f-8905-4d07-801c-f3283c9b72a2", "sighting_of_ref": "indicator--7c100e41-3b49-4613-b0ce-73a463e98116", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915b095f-702b-4483-9bbf-c95b60644675", "sighting_of_ref": "indicator--8d5afe29-bada-408a-ac31-04f137a7a694", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a01f4ad-3f55-43cb-8f8c-2e8f9fcd6432", "sighting_of_ref": "indicator--48627cce-60a8-4b8a-95d4-0852ce6eed47", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17a9cdaf-cb5e-4d29-8332-98fa97df4930", "sighting_of_ref": "indicator--315c0d0f-ca40-4cbf-9574-d217a237e810", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dceb3c5-25de-4712-bd8c-1a8787a3ffd6", "sighting_of_ref": "indicator--4591fd57-f3d5-4c08-8145-e62dafdece50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446db933-4237-4324-b8b5-1a0272bb0a32", "sighting_of_ref": "indicator--28814e36-4718-414e-86c3-e5c1d92151c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9386a262-1e89-40a8-a7cf-66623cc562d3", "sighting_of_ref": "indicator--28814e36-4718-414e-86c3-e5c1d92151c8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38d3722-c171-49b8-9301-377158f01471", "sighting_of_ref": "indicator--30fd626a-323a-424b-855f-a589e039922a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56c6893-c4ad-47e5-83b5-4fd2fd64b576", "sighting_of_ref": "indicator--35e7ec35-d817-4cb3-ac87-5b536f13d547", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94483258-cc52-4c6e-a330-f7c71bc642c5", "sighting_of_ref": "indicator--35e7ec35-d817-4cb3-ac87-5b536f13d547", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df758d65-4c0d-4893-8b03-312f7d7114d3", "sighting_of_ref": "indicator--bf49b1cf-7f20-478a-9926-4d4555c6344b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a003c17-5e47-4470-ab0c-eaee658179bb", "sighting_of_ref": "indicator--3d942f98-30f2-4602-8170-7b46c9e9350d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489b6802-58ee-45e6-a4c3-d9184fb2fb1e", "sighting_of_ref": "indicator--e66e6a75-4cd2-4c1a-bcfd-b0c24eb34693", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843fdfc2-7d46-4c3a-95b0-f4960379d7c2", "sighting_of_ref": "indicator--f25ba759-b58e-40a9-b65c-7e225d50c786", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a36f24-2f9a-4535-a2c1-c7faf5e52cda", "sighting_of_ref": "indicator--841ed508-988e-4476-ae4a-2517b111e16a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c381844b-1592-4756-b08e-a2d05af27283", "sighting_of_ref": "indicator--a8d1cbc8-e4eb-4fbd-8f9e-b8e10bb8ef23", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb6026f-5c72-4fc1-b5e9-9af60ec9e34d", "sighting_of_ref": "indicator--b95fe69e-635f-43f4-8777-f73181f4511e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2239b3-0fd4-4b39-99f5-8dddfc61eba0", "sighting_of_ref": "indicator--b95fe69e-635f-43f4-8777-f73181f4511e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c871243-56c2-45f0-8d26-ebc692a25aea", "sighting_of_ref": "indicator--43638df6-f440-41a9-a5a6-93686f725ad0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40381b77-924b-4808-b3be-548398e9d69a", "sighting_of_ref": "indicator--3463fbd9-8e23-48fc-86cb-4331f976b20f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0cdabee-a582-492b-ab6d-719cb35c8022", "sighting_of_ref": "indicator--efdb9bc8-ca1f-4624-b037-7c18f537f2d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f4346fc-b582-4435-9eac-376e0c71b73f", "sighting_of_ref": "indicator--efdb9bc8-ca1f-4624-b037-7c18f537f2d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae664ff-3ba0-435b-9a6e-7febe79ffafa", "sighting_of_ref": "indicator--298146a6-2c0d-4b7e-9430-9158e8b1bcc1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9754eab2-4a87-46df-b579-2c105b41b383", "sighting_of_ref": "indicator--d9058a6b-7851-4fda-adaf-a1fe4c7ce56d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3969d5eb-d5f3-48d5-968c-1db0c04dd2d5", "sighting_of_ref": "indicator--2b40f999-f082-4871-8bad-d6506a1ce3bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a9e9a0-f38c-4748-a96a-78a1b6e26ae9", "sighting_of_ref": "indicator--2b40f999-f082-4871-8bad-d6506a1ce3bd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea164a8-4ce9-481b-8d64-09dc9bdc804e", "sighting_of_ref": "indicator--aee1498a-86fc-4429-98eb-0fd92202e5d5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911b1b68-7a1a-466a-986f-d4744470e17c", "sighting_of_ref": "indicator--aee1498a-86fc-4429-98eb-0fd92202e5d5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd539140-32e4-4d5a-bd36-fde3e81e3c4c", "sighting_of_ref": "indicator--f082fb19-491d-4ebf-94d9-ac425f7486b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af831f15-9967-4120-be41-1544f4b2197e", "sighting_of_ref": "indicator--a8c2f1da-09f0-4e28-bfcf-5d9c753ee50a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc5a1c3e-cb3a-40aa-a2c1-b4ecb584c5af", "sighting_of_ref": "indicator--377bc481-4f79-4e88-8d77-b5c33e45ec18", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a97818-83ce-488e-8b6b-021173b03562", "sighting_of_ref": "indicator--a69485fa-ba6d-40e1-8e4e-68029d89d246", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2665ab7-b6ee-49a0-bb2e-3046d790f681", "sighting_of_ref": "indicator--a69485fa-ba6d-40e1-8e4e-68029d89d246", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb899a7-cf4a-4891-95ad-48eea5cf93e5", "sighting_of_ref": "indicator--6fbea5a4-6f45-4103-b575-edf506a917b4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53773e8b-8b3d-4a45-9d52-7fb362b87bad", "sighting_of_ref": "indicator--8779b7b5-42b7-4269-ac20-0e4524186c5b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc935ba1-b800-485c-9459-6409d342bd64", "sighting_of_ref": "indicator--8779b7b5-42b7-4269-ac20-0e4524186c5b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeec31f9-a119-482f-973a-0dbfeac63b70", "sighting_of_ref": "indicator--f58f47c4-0806-42c1-816f-7121dfcb1a68", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810f295d-abc3-4094-a2ae-d8faa658a5d0", "sighting_of_ref": "indicator--fb9de106-88be-42a3-bd61-d466dd4f5591", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f455b1da-1fbb-4535-82ae-7efa62db863a", "sighting_of_ref": "indicator--b708576f-5822-4d1b-933a-b5a0cededb9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28303ae9-bd09-46fe-a97e-c20925fd604f", "sighting_of_ref": "indicator--991bc305-eaf8-4aa8-b521-26b4e6839a88", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec587dd8-7317-4062-bd3a-dc1f7464328e", "sighting_of_ref": "indicator--7b09d681-8c08-43cf-9d6d-adf4eac6534d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71fbfcce-1bbe-4c49-9161-41df6084a308", "sighting_of_ref": "indicator--2c962661-87c2-4912-acb9-714bca1f7b53", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc49e9d-1b52-47b2-96eb-d409f113ba31", "sighting_of_ref": "indicator--2c962661-87c2-4912-acb9-714bca1f7b53", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2031ca48-bb2e-4286-9141-935cb043f8e1", "sighting_of_ref": "indicator--72568f87-f096-46f0-94ad-8769efdc4d82", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d78563b-61d2-4d12-9bf5-f5d963afa601", "sighting_of_ref": "indicator--5ad92243-c7b5-441c-969c-1902d633c1cb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ab2ccf-4c14-4198-9ba0-4639cdb3a95f", "sighting_of_ref": "indicator--2550c4ad-8c7f-4683-a517-564469e5c10f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d050f993-d317-41c5-a649-8501bbb37332", "sighting_of_ref": "indicator--727c944e-3cbf-4dc1-9fd3-4b5e9b5dd972", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c93cf96e-86c8-499f-8cd6-db0e398efcad", "sighting_of_ref": "indicator--e83cd8f9-a558-4948-ae5f-4a10f35718af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e21fcd-6341-4185-8e08-f84ec55a9617", "sighting_of_ref": "indicator--af947e1d-fdb2-41b8-9e97-2b87344d363a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ebc219f-9ac1-47df-bcbd-d0de96355ede", "sighting_of_ref": "indicator--af947e1d-fdb2-41b8-9e97-2b87344d363a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b3ee9d1-dd00-408d-921a-9300b784b4a7", "sighting_of_ref": "indicator--4173a15e-607e-4b40-b990-27f353e3eac8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b523280a-7bfc-4b2e-aa05-afd633c733ad", "sighting_of_ref": "indicator--a3a8ebc0-faaf-4766-bec8-6eac670de00f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ccff0b5-13ae-48e1-88d5-5e5d046e19b4", "sighting_of_ref": "indicator--f5ee65b2-b0ba-446e-b8e4-e76ba40ce2ad", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1720e7-254f-4357-80ee-b8f74abc72e3", "sighting_of_ref": "indicator--acbd926d-43b2-46f4-9bf6-3186af1e0a35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3d6136-01ac-4f4c-b7b9-94aad93b6913", "sighting_of_ref": "indicator--5609b167-5225-4cf8-ac64-fd8b43e70e17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef7d68c-2574-4caf-87be-32ec8767cbaf", "sighting_of_ref": "indicator--5609b167-5225-4cf8-ac64-fd8b43e70e17", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffff272f-f519-4675-a299-4a5f00a267cc", "sighting_of_ref": "indicator--d0f66d6e-5861-4ed0-814e-7c7ebea78c86", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22286d50-a3bb-4c74-b10b-8d8b37716fb0", "sighting_of_ref": "indicator--e60345ee-a0d2-4532-8714-a1ccce5ed475", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8250ce4f-5da1-493c-b2b2-fbeb257e2c14", "sighting_of_ref": "indicator--c2b47ca9-b834-4131-802f-deeb54dcb475", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea0b8c7-f82d-4431-a27c-5beacada1359", "sighting_of_ref": "indicator--b6397f56-2ef9-4fbf-bc6c-e33d2d919184", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17bf63cb-763a-4f76-96c7-71a70cfde8e0", "sighting_of_ref": "indicator--6f93347f-573a-42f9-a840-5a18db181a1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cab32fe-3dd3-4880-9e77-ed6d13acba2f", "sighting_of_ref": "indicator--afdc3627-c4c5-42da-8db1-8d9400c6f078", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01cecd14-0a0c-4049-878a-4eb5edee7413", "sighting_of_ref": "indicator--a2894299-d4ef-40ab-9d53-b03aae51cdc4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796cf456-0147-4b62-b3f9-f87293e4f8aa", "sighting_of_ref": "indicator--605dbead-47dc-4c3d-b683-621b9931a7a9", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc061cf4-6933-4528-b5b1-450fdbc86299", "sighting_of_ref": "indicator--c280ad29-5555-4917-9992-93ef8328a598", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd11f317-2fa9-4cdd-91cc-4c9a0fdd53df", "sighting_of_ref": "indicator--5afc73aa-3fbe-42aa-b561-d53a832f1ca6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfff8352-3162-4ba0-8481-8032adf951aa", "sighting_of_ref": "indicator--275182ae-8f7b-4c6e-ac62-78ee8527a9c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fde138-3c9a-4c11-a277-41b577ed871f", "sighting_of_ref": "indicator--0aad73bc-67b3-4f38-911c-11e6fe0cf525", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d213da94-4a45-483d-b4e5-46756546649c", "sighting_of_ref": "indicator--0aad73bc-67b3-4f38-911c-11e6fe0cf525", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a9eda3-c093-4a29-ae05-e4b4041c13c9", "sighting_of_ref": "indicator--e8f86b4c-9356-442b-913f-1562a6beb8cd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364e98ab-1ff8-4775-865a-cd3b12c8e072", "sighting_of_ref": "indicator--c246b64f-90a6-4f32-bffd-cef29455515f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4d0d05-7fb1-439d-ba8e-89cb6d3528f0", "sighting_of_ref": "indicator--e80b5672-e110-4829-9c07-fef2d141550f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a865fa4e-eabd-44ff-ac62-d984556b32b7", "sighting_of_ref": "indicator--f22d5b27-8544-4eb2-972a-2ddc0cbfe2c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388fb614-16e8-427e-bba4-9b440524448c", "sighting_of_ref": "indicator--80120f22-a1b0-488c-b131-1fa8f4d77aea", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2d77f4-affa-4483-a990-ae08ebfba12b", "sighting_of_ref": "indicator--b731f901-7112-45ec-be60-7c2fec3fd2e6", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee76de9c-7e11-499f-aeb4-467763febbd2", "sighting_of_ref": "indicator--92fd7a28-e0bc-4c24-aefd-a575dfcad3ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a999e149-df3c-4a7c-95bb-c27ac07bb9fd", "sighting_of_ref": "indicator--28c2b3a6-3472-4de8-afea-046bf7591fe2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--083cefcf-71b0-4424-a66b-db2f34299e84", "sighting_of_ref": "indicator--6d2a07fb-cdb1-4844-894f-94f7dab2b0f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3172cb3f-c6f8-4f1e-845f-87e5a659e122", "sighting_of_ref": "indicator--3c8bfa0d-4787-4502-9f06-1b81bc63e7ec", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088f5c86-4e90-4cba-a0b3-762ec21d4fa1", "sighting_of_ref": "indicator--837458a7-6822-4202-98c2-7f7b9ae142d4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9a36e5-f5ca-4e35-ab18-d2193345d399", "sighting_of_ref": "indicator--ddf02feb-4e3e-48ea-941c-f86586a5cf39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a8ab4d-b4d5-4bfa-99f7-283dbb2e0dc8", "sighting_of_ref": "indicator--065dc0d3-e572-40ef-9201-c09709e3b220", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a165a10-8534-4858-9929-73d9abaade81", "sighting_of_ref": "indicator--cbbe2096-5360-45f3-9c00-7e3fd0ba9f3e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b12ed2-e89a-4853-881b-0ed1ea986641", "sighting_of_ref": "indicator--c04bf3f0-3679-4bd4-87f7-573cd30b9e9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969bae66-13d2-4514-8c6c-395dcb9e3233", "sighting_of_ref": "indicator--3803ad12-6b5f-44fa-b58f-cd5aafa9c83f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d38377fa-c4b3-475c-a960-d9860847de11", "sighting_of_ref": "indicator--a9762075-c17f-4fb5-be60-7861f2c4e8eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173220a6-c73f-40e1-b496-ac614e21be02", "sighting_of_ref": "indicator--80859fea-4f85-44ce-b2b0-8cb2b6d1b69b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb1ef900-3df3-40eb-a1be-13913e3c0d98", "sighting_of_ref": "indicator--079a1e5a-3b5b-4a43-a9b8-9786eb9a992f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8551a53-9668-411e-8086-b8471fd4f76b", "sighting_of_ref": "indicator--fbc0c89c-c3ab-44c6-ad6c-8f1673266d0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da993375-757f-4d8a-8994-80362f60c22a", "sighting_of_ref": "indicator--3c195c4f-3ad5-4a33-af65-82c1264fd34e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa6655f-0fce-4ca0-b8e2-79b2677e6ba7", "sighting_of_ref": "indicator--9d62ffbe-c5e4-4fe9-9fac-75a88f5d5361", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b77351-1e11-48f4-b693-dc89dd4c859a", "sighting_of_ref": "indicator--6ad9cc0b-4a3f-4f58-b9c4-6dfaec0bf68b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76492dbe-368a-46f6-82b9-fa171849dd78", "sighting_of_ref": "indicator--aefbf5e6-21d7-4064-8a86-bf223a606335", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f418c02-1735-4f73-899e-1a0e97d1c9e7", "sighting_of_ref": "indicator--751f902a-1b12-494e-8f63-a7f34e15981d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--958a4f92-c0ed-4075-b968-a02e52668ae4", "sighting_of_ref": "indicator--5a862ba6-25ed-4345-9ce4-a742cc4215c8", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fbbcf8-ea9c-4850-8c34-a2773647596e", "sighting_of_ref": "indicator--990bc495-ad7b-4cd1-b1a6-fc7219ff8892", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96b106e-d1de-4860-89e9-87e1db47a92c", "sighting_of_ref": "indicator--990bc495-ad7b-4cd1-b1a6-fc7219ff8892", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da41b03-9d75-4c83-b956-47a27cd4e18b", "sighting_of_ref": "indicator--6becdcc3-1406-408d-9c65-0aa0b91fd592", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f0a0e2-b559-4d2c-83e7-6943a881a1ea", "sighting_of_ref": "indicator--dce2e457-916c-4b9e-a373-2b741c1e8e17", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f577ea9-a8ef-4cf0-8475-edf217c8a080", "sighting_of_ref": "indicator--a884c7e4-2f7c-432d-bdbe-af5ebbed45f6", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695304a9-3bd6-4775-baa7-8449f0bd1d58", "sighting_of_ref": "indicator--fdd897cf-b3e2-42ee-9648-9194dc1d7bfd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9cef5bf-100b-484d-8c82-47c25b34a5e5", "sighting_of_ref": "indicator--f3180d60-341f-4b87-9250-e53343fc9b95", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac517d3-ada2-4caa-9b40-b5c7ad5c1594", "sighting_of_ref": "indicator--f5bb6e4c-854e-45d0-a375-b256552173b8", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbe2498-067f-4db2-b19f-0eaeb580e074", "sighting_of_ref": "indicator--79757afd-aabc-43c6-b34a-76cab8cbc536", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68bea66-dd2d-488c-aff8-a59c7829aa07", "sighting_of_ref": "indicator--e4185e71-3ce5-44cb-8323-b157d7a04e63", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f73d9b3a-dd40-40b2-a7eb-c73c92540678", "sighting_of_ref": "indicator--99797dcc-e80e-4741-927e-4044cc9de609", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6fb23b-8513-43eb-902d-9b1c1085f735", "sighting_of_ref": "indicator--5d973214-2629-4c23-9e35-6452552c9044", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e973b2-63cc-4455-a110-bd3bb464795a", "sighting_of_ref": "indicator--93c9bbea-baf3-4e13-8c31-919bff3b254d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e8b33fd-4634-4dbc-a5a4-acfd9c5168a5", "sighting_of_ref": "indicator--3b6efb31-8dc8-41b7-a6b2-673e8c35675e", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6465a711-ff89-41e1-ab9b-a06fa5a65da3", "sighting_of_ref": "indicator--aa8ca465-caca-4ce8-9f92-5c94d8e39896", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--593b9151-9909-4edb-8589-bf387b5b3d4d", "sighting_of_ref": "indicator--3a5add28-5133-401f-b951-5e3d31509900", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aab45f74-c197-4a64-9695-ecc529ec4a37", "sighting_of_ref": "indicator--2267e8d3-ba7f-4b6a-b994-fbaa2c3a239f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e613e11-a285-4b9c-98a4-da2547276ae8", "sighting_of_ref": "indicator--8387208e-509c-4e95-a838-482f635a1a8e", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e202ea1-3284-466f-a15f-4dc402435849", "sighting_of_ref": "indicator--08cb8ce1-8797-4d0b-9803-2076af4fb36d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc96d093-c978-4231-90e2-98e43d81aa9d", "sighting_of_ref": "indicator--a79f73f2-12b8-48e0-aedc-fbad5dae75ad", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9231cd5d-afbf-4b9e-ac1b-df8458ad82b2", "sighting_of_ref": "indicator--02a05987-46b9-42e4-9694-86657e9d6f56", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab2bad7-c913-4e0b-99e9-13428a2cf988", "sighting_of_ref": "indicator--708e3d7b-6adc-42ab-b7a7-427a9f0dca05", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d738fc-153b-4f05-8eed-719de03eb7a1", "sighting_of_ref": "indicator--6100548b-1060-4792-b9b4-624ae7a9c145", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47aa3958-aa74-43ee-b24c-f1a7dc874048", "sighting_of_ref": "indicator--c814e6c7-bda2-40c7-9430-7581d51c57a0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c333aa5-ed9f-4e18-8607-bc3fee6b72ba", "sighting_of_ref": "indicator--8f2053a7-dd87-4755-bfd0-e880af2e5c36", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb65e38f-8c55-42bc-a755-e340ec761cec", "sighting_of_ref": "indicator--049281f1-e118-4031-98ac-5920fd4af4d3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd47b02-0ac2-4f97-b998-07953d585e4d", "sighting_of_ref": "indicator--dcafe437-3117-4dae-8c5f-3110f3b8f355", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38325692-f063-40b3-a74a-193bab6b9e96", "sighting_of_ref": "indicator--01a38c17-56a5-4719-a37a-9e814aeba680", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd09036e-5846-4012-b1c0-c9b6c6c67c99", "sighting_of_ref": "indicator--4edecedd-5810-4bc7-b665-57654d02f7cb", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d7fd13-2566-4498-a4d0-3fe1e9b2e777", "sighting_of_ref": "indicator--f572672f-f6d6-4308-b0f3-b8358249f814", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26e2f98-1097-4dd3-b4de-bf253eea2583", "sighting_of_ref": "indicator--aa48f961-b6d5-4bce-9798-20d0dd3a4f9e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf63e8c-094b-43d9-9dbc-6f60b6ea6a23", "sighting_of_ref": "indicator--cdd20268-0181-4c5c-9071-5d92ef540952", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d87ec55-0e2f-4c62-9d3a-073a54dd09f3", "sighting_of_ref": "indicator--2d583b61-7e0a-42ba-ab5c-15972173df1b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f875b241-1c49-46aa-9d32-0390f74313b6", "sighting_of_ref": "indicator--c5c1255f-a351-48a4-ad76-72060b5c2c69", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e564f463-780c-4784-8c41-e46ce1d39aa0", "sighting_of_ref": "indicator--bc5d8a02-5280-4ab1-885a-078a34e71af1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba847ba-8cfe-4a0a-b013-4d5bcf6f6de0", "sighting_of_ref": "indicator--35e8dbdd-ce6a-403b-a0d4-198f9b4b3a72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9b78c7-03f2-4822-a675-a02f04e32560", "sighting_of_ref": "indicator--52a15cd4-0719-4d17-a651-44479e615c00", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46013a46-2f35-4d38-a03a-1f812adc2adf", "sighting_of_ref": "indicator--52a15cd4-0719-4d17-a651-44479e615c00", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37eaac7e-fb9a-435b-84ed-7b5f0845200a", "sighting_of_ref": "indicator--a5245328-e874-4b33-9b35-309e992bffd4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe90cc97-73d0-4320-8ebf-7d519fbb5756", "sighting_of_ref": "indicator--a5245328-e874-4b33-9b35-309e992bffd4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549283e2-9732-4972-a4af-8e90b6378f53", "sighting_of_ref": "indicator--a3dfa531-1ef4-44b1-8e66-f1444f6ec516", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d764fd-1712-4c90-b8fd-026762f16a46", "sighting_of_ref": "indicator--473a5797-d863-475e-acbb-eaf7530e5f3c", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c6e15e-b543-45d3-93d6-f18a31a243b6", "sighting_of_ref": "indicator--3c0e0b08-8f65-478d-8a74-929c31b35920", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c1450f-f679-4d15-863d-b4b15dbd39ee", "sighting_of_ref": "indicator--3c0e0b08-8f65-478d-8a74-929c31b35920", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee56cfc-7a55-4c50-84a6-796b8d10eb3a", "sighting_of_ref": "indicator--a4dab73a-ce6c-4e0f-8f27-a3edf7176ba9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a7d79f-d3ba-47eb-bc2d-a63c607b0277", "sighting_of_ref": "indicator--a4dab73a-ce6c-4e0f-8f27-a3edf7176ba9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9ebca8-1612-4741-ba2d-5f3b4e62d27a", "sighting_of_ref": "indicator--b699bf84-af1c-4c64-9b9f-bf1ba35b65de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c141f89e-9ee9-4e93-bd56-fc456a108bb2", "sighting_of_ref": "indicator--a0264e3f-2ebd-4ca4-a8dc-4f3b42787ad0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a72f54-cc8b-4d35-88b4-95f373165082", "sighting_of_ref": "indicator--dc0d8909-06b9-46e6-9aef-f42ebf83921a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eff472d-edf8-4e97-9112-e64f1066abc2", "sighting_of_ref": "indicator--1b94e3c9-8e35-4833-82d8-26d6b4fc3aec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225aef10-c75a-42d5-9a4a-fad980213e0b", "sighting_of_ref": "indicator--1b94e3c9-8e35-4833-82d8-26d6b4fc3aec", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a59da6-ebe0-4a44-838b-159f9a9b196d", "sighting_of_ref": "indicator--8946dbad-1978-4ba1-aac0-8d44b97ed182", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23e2258-26d9-400b-a26d-a279b652afa0", "sighting_of_ref": "indicator--e4fc3b55-1c44-446d-8901-865ca39265e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730f0e7f-9b51-4fa5-a4f9-fb1db780bbfa", "sighting_of_ref": "indicator--637027e9-de89-48e3-b5b9-b5d18d35f0a0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be696312-5d87-4867-899d-c9417bf58848", "sighting_of_ref": "indicator--9bc0d01a-71d3-4709-a638-314623cfa4e5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321f6250-8bb8-4506-baf8-f07b2443aaf5", "sighting_of_ref": "indicator--a1080493-442c-4c6e-884b-fc6637a9eefe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d87d2c99-f117-4a7f-b092-0a6a09cb5e2a", "sighting_of_ref": "indicator--9240c710-b18d-4f46-ab14-7e164aebe7b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c68271-53b3-4184-bf37-1024cc1121f3", "sighting_of_ref": "indicator--3daa1202-51bb-4a54-88a6-cc7f9b917333", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7600791f-57a3-4a6e-a08e-a37bb7b05ab2", "sighting_of_ref": "indicator--a903c44e-6702-4215-8b3b-d9a138deb4fa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d252a9d9-a49c-427e-8e9e-6945258c8ebd", "sighting_of_ref": "indicator--ba8a0af3-4428-43bb-9a00-f1bacada40e3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac487392-95c6-4181-9ede-334cd540d5d2", "sighting_of_ref": "indicator--d43255a1-03ce-403a-807e-70f6f981c9ac", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe27a81-7c98-4a16-8101-caa234a3ab69", "sighting_of_ref": "indicator--8aab9766-f94a-4c37-a82d-af5601590e5f", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3974c0f7-0a4c-48fd-a864-7a84c20de1b5", "sighting_of_ref": "indicator--8aab9766-f94a-4c37-a82d-af5601590e5f", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5512a33a-9cf5-4024-838e-870e783fd77b", "sighting_of_ref": "indicator--06a2c544-2fd9-4353-a498-3d789e1193db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6264f157-1423-4e96-abf4-addde60e4ca6", "sighting_of_ref": "indicator--5cc264a1-efeb-4cc8-8b4f-b79b401c2916", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8031ec7e-9805-48e8-aee4-9bc986b7e4e7", "sighting_of_ref": "indicator--579bb51b-f76e-4788-9df3-c48245e481bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a695ea16-64cf-41b3-b694-df352c92ec8c", "sighting_of_ref": "indicator--2f15893d-e113-41e9-8cc6-c3e564d3a76c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e20a3b1a-bb3a-4a28-b287-4c7ca79b327b", "sighting_of_ref": "indicator--a16dbb12-4d7e-4875-9ccf-620059e589bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--573e66aa-4085-4daa-b406-dc63f5d7b747", "sighting_of_ref": "indicator--a16dbb12-4d7e-4875-9ccf-620059e589bf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc899f3-d8f4-422c-a494-3f856e520f5d", "sighting_of_ref": "indicator--76e3ffd5-a599-4aac-9ffc-d9240a110f9b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf4b77f-7948-4441-a60a-2860c1de34f8", "sighting_of_ref": "indicator--76e3ffd5-a599-4aac-9ffc-d9240a110f9b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5de28f-1200-4ee9-b3ee-b0647724ab33", "sighting_of_ref": "indicator--25cd203c-9738-4409-941b-943867bdb1b0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2cc060-f8ab-4a38-b231-3fbf8d8d6970", "sighting_of_ref": "indicator--8d7964cb-a198-4d37-9113-7390ac542dfb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374af0c1-5411-4d69-bdd7-24c6b9807f57", "sighting_of_ref": "indicator--dc4c28e5-c9c1-451c-812b-5c81ea3a39ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d623ee6-0cc9-477a-acd2-aa8fe304899c", "sighting_of_ref": "indicator--62cbb9b9-0d9e-4e9e-ab12-4e53c4f9b18f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a44c558-2b59-4acc-9b4f-32d8896ac032", "sighting_of_ref": "indicator--3ebcbb65-abda-4e5e-a07b-820d2c1ee924", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fd62ab-3ae4-4602-b320-5f907d817ab6", "sighting_of_ref": "indicator--bd88650d-faae-4dd3-9030-00303fb80ee8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1871c3fe-62dd-4070-9dc8-11bfe32951b3", "sighting_of_ref": "indicator--a7b8115c-d7ef-413f-9ddf-027a2ebe3907", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203fcbd8-55c8-4400-aa7f-8c468344f411", "sighting_of_ref": "indicator--06189a2f-b080-4dc8-857e-eb63b335a877", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d722bdb-ff5e-4a55-b3f8-177066f0682f", "sighting_of_ref": "indicator--3ec6a27c-97cb-4e11-a617-57cd7407d200", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3536df-7390-450b-94e9-61e23e0607d1", "sighting_of_ref": "indicator--e98cd8cc-8010-4a52-b02c-cbb356e7c13e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63bb833-123e-4d76-91b4-9c67d30fc5c4", "sighting_of_ref": "indicator--e98cd8cc-8010-4a52-b02c-cbb356e7c13e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4e30b5-034e-4ef9-9c47-728763e53f76", "sighting_of_ref": "indicator--fa119b30-9817-4e6c-a474-6e8a3d36a379", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eb2fcf-fa3b-4866-8aa4-83e50dcc0900", "sighting_of_ref": "indicator--13b69aa3-1758-44a6-b2b5-c64d7409babe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd468b18-8593-4033-8688-27e13ba3462b", "sighting_of_ref": "indicator--2e99ead2-33a7-4441-a421-3af229d14785", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ef468a1-e86f-4295-88c5-a7ca6082c17b", "sighting_of_ref": "indicator--e9c459ed-1b8d-4cee-8956-db6527a33173", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a12fe0aa-2b47-46a6-9478-6dbed6617eb4", "sighting_of_ref": "indicator--335ab3bf-f673-4302-b6d7-0176a42ec017", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bcffb9f-17a9-465d-8a2b-10fc07f4fe6e", "sighting_of_ref": "indicator--743b2486-3993-44a4-855a-a7559cfe2255", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f062f43f-d6f3-4bf0-923b-12eff7f370e4", "sighting_of_ref": "indicator--3b5fa133-a35f-4cc8-87a1-43bdec670c53", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9052f3f-e6c2-4596-9605-43442653b876", "sighting_of_ref": "indicator--4a013c6f-e691-4b8a-b166-28a670b2cec4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0351b4-8d39-40ab-ac78-72faa665486d", "sighting_of_ref": "indicator--570891c7-1f16-4c28-bea5-822abdc15b35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cf7b74e-29ba-4010-ba96-88e5d642c626", "sighting_of_ref": "indicator--fd61f804-e2d9-4efe-b305-63a3cbe84868", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a404044-51b1-4f69-98bd-49f4432265e5", "sighting_of_ref": "indicator--a0ad6b6f-01ba-413f-b62e-212dacdb0cb8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1893824f-f2c0-4979-ac20-eec9742f412b", "sighting_of_ref": "indicator--370cb574-0415-4683-8146-6f9fbd594e9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b735f9fd-2fde-44cd-a877-18b04b81abf7", "sighting_of_ref": "indicator--21d3945a-9ee7-402a-ab2c-2620631cc192", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef47e4f6-63f1-4d36-90f7-8213268c0400", "sighting_of_ref": "indicator--87f45974-121b-406c-9b01-07a942f79c15", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66423277-1050-4d4f-93ef-9fc915dd38c8", "sighting_of_ref": "indicator--00af9f2c-45d9-476d-b2e3-11f4388099d3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3755fa5-d26d-4a4c-824c-f328ae2012f7", "sighting_of_ref": "indicator--1303b8c8-10cc-451a-a678-dfaecbce1d90", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84717e65-6df7-4fa7-a972-e36165f85dfe", "sighting_of_ref": "indicator--b715af92-5b6d-4dd0-82bd-937f71661238", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3d5839-5e45-4865-b538-bbfe6d9e746b", "sighting_of_ref": "indicator--b715af92-5b6d-4dd0-82bd-937f71661238", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b0eab2-f857-4ffc-a571-38c927898988", "sighting_of_ref": "indicator--44f5f3ae-0c9f-47f0-a035-831c0c2fcda9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e81337c-9766-47e6-9f2b-e28d7f02ea63", "sighting_of_ref": "indicator--fd52e550-eab9-441a-baef-62d2876b205b", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a1cb7e-1786-4a40-97e8-30eb40b599f5", "sighting_of_ref": "indicator--2917f747-6bbc-4f0a-98aa-59d9ac22ef6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af68e541-7b85-471f-8d5c-36ee3006a91b", "sighting_of_ref": "indicator--c7ba4fe2-916f-4763-8b26-9d8131b961d4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997c46fd-7e79-43c1-bf04-e140332cbde1", "sighting_of_ref": "indicator--fb4604ef-9214-44e4-8462-849f115ebd74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bfb7c9d-053c-4d8c-a199-7b83aa6a0db1", "sighting_of_ref": "indicator--fb4604ef-9214-44e4-8462-849f115ebd74", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--421376ee-56c9-4149-bb6d-7484759b9ffc", "sighting_of_ref": "indicator--36455c87-3967-4538-84da-2f3248168832", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40531c4f-c87d-43fa-bb91-c402d7e4c855", "sighting_of_ref": "indicator--31fc134f-7216-4730-b102-71f5042f13eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7be35b5-c5e8-427e-886d-eaf961a85535", "sighting_of_ref": "indicator--249e90c3-0b23-4be9-ad17-7f589167eccb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b774cffc-485d-495e-a0c2-6b41492d36d4", "sighting_of_ref": "indicator--fd91cafc-e97f-4fe3-bf1c-4dcab347edc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b962312-473e-4388-aa8b-f037f638899e", "sighting_of_ref": "indicator--b24d866a-d44d-4aa0-984c-7bea38735162", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7975a909-330a-4960-8207-5b0d61c3e0fb", "sighting_of_ref": "indicator--27264d95-fa4b-4202-814c-fee6b52205d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dad561-da8b-42d4-9bcd-eb53e4a09776", "sighting_of_ref": "indicator--024858a3-613d-4f35-b43c-0498c0488969", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198e4edd-4229-4e6c-9ad8-72a06a1d236b", "sighting_of_ref": "indicator--024858a3-613d-4f35-b43c-0498c0488969", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c01482-0e53-4b25-9549-0030b26d1f2a", "sighting_of_ref": "indicator--99878931-e7c2-418d-8f59-1e0a73d5bee9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dad673-baaf-4976-950c-eb433417166f", "sighting_of_ref": "indicator--ab0af7cd-fec9-4860-859c-f67016348bdb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a5f118-11cf-4e49-84b8-958a490fa57f", "sighting_of_ref": "indicator--26f7dd99-1dfb-43d0-9d78-75918af22f65", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1531b48a-e0a8-4632-82f2-93c8e3c1722e", "sighting_of_ref": "indicator--26f7dd99-1dfb-43d0-9d78-75918af22f65", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64778ce1-c49c-447b-8cc5-eb7995f4136d", "sighting_of_ref": "indicator--51c00898-83c7-4d3f-bae6-e9c72779cfde", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbfbc46-4181-45e1-83bf-364afa3038bc", "sighting_of_ref": "indicator--51c00898-83c7-4d3f-bae6-e9c72779cfde", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18edd60-ca53-4bdf-85e6-aa6ea99bfe22", "sighting_of_ref": "indicator--0ad2f53c-2e72-44d2-95f4-6e357542766e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8713bc8-9834-42ff-b71a-46f20c472d7a", "sighting_of_ref": "indicator--ca66f8bd-6382-49c7-868e-b12b0c3897e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7389349d-51c3-4416-ac75-f679b9b409fe", "sighting_of_ref": "indicator--7f1d9e1d-3223-432f-8cc2-b80dc8d7704d", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb655c4-b7e8-48f9-b733-1dde0eaebc9a", "sighting_of_ref": "indicator--7e3a25bb-3b01-4a78-b768-ff258a30bdd4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d40187f-d34e-4ac0-a1ca-3c0f160fbdcc", "sighting_of_ref": "indicator--fb341b53-4969-4423-9b5d-76d476bc18fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2b3e68-535e-45f9-a7c7-2acdcf3f9117", "sighting_of_ref": "indicator--b6625c0d-fa74-44e5-a4be-d0e66ac541e0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983e49b6-41bf-4a17-be37-57f713d01033", "sighting_of_ref": "indicator--b6625c0d-fa74-44e5-a4be-d0e66ac541e0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527c5a4f-815c-4f05-be96-d55328194a3b", "sighting_of_ref": "indicator--ccaddef7-0d09-467d-84a5-7e2a8721e589", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53d3115-5dbe-4483-83a3-189b991c34c7", "sighting_of_ref": "indicator--1019ed74-9cf8-4feb-ad39-3eeaf1cb2556", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d83318b-f04a-40e8-a948-646e4884dae5", "sighting_of_ref": "indicator--1019ed74-9cf8-4feb-ad39-3eeaf1cb2556", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c84821-a5d8-43e2-98ad-b0837de8ac84", "sighting_of_ref": "indicator--42832cce-f4db-4c0b-ab77-2dead84ae13f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b950020-bfa8-4ffb-836c-06484dce329a", "sighting_of_ref": "indicator--127deb94-463a-483a-b815-99492243af56", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6899e19-b136-4183-b763-1d6b5f5dc947", "sighting_of_ref": "indicator--230b01e2-43b3-430e-bfc5-3e6ca5e7c4b9", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a99ad6-4d44-42d0-83f5-678ba4b04cda", "sighting_of_ref": "indicator--7c92b6fa-5336-4362-8dbd-de19d5c415a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4f11af-ce19-44f7-bab1-428c6baac4b7", "sighting_of_ref": "indicator--8f8b8a29-97e6-406d-9c68-2ec43b9a47c2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc38e975-6c46-4f8c-99eb-ba4a46eae0bc", "sighting_of_ref": "indicator--bb80a484-9b6c-4354-b233-faf2045770a2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1e284a-3f20-487b-b332-1ff1c6ebe0e8", "sighting_of_ref": "indicator--bb80a484-9b6c-4354-b233-faf2045770a2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fa53b0-358d-4190-a331-14e54e7498ea", "sighting_of_ref": "indicator--237c9ffc-0091-43e6-b127-2b42f6f21451", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5de2abac-fbef-40c5-bd9c-9fe21758e559", "sighting_of_ref": "indicator--237c9ffc-0091-43e6-b127-2b42f6f21451", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3ea112-111e-4495-a2e3-81dbf85637a4", "sighting_of_ref": "indicator--73bf466c-8873-4ef8-ab95-c605816d5d49", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e0c7b4-2414-40f2-accf-0bb4696b2fc3", "sighting_of_ref": "indicator--e37a02d6-818d-4242-a28f-8e2643ad3294", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730c5a5d-5435-4a11-b1d5-96e2160de21d", "sighting_of_ref": "indicator--e37a02d6-818d-4242-a28f-8e2643ad3294", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce292f10-0e03-488c-affb-8ccccc2594a2", "sighting_of_ref": "indicator--cdb1eab7-191c-493a-8e96-0bfbf83c5f49", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6351e92-e9e7-4130-83e0-7a742c7e2407", "sighting_of_ref": "indicator--cdb1eab7-191c-493a-8e96-0bfbf83c5f49", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de9af6e-2383-42d1-9418-7dd620f49b20", "sighting_of_ref": "indicator--4dda9e68-6b65-4a14-86d6-f701d5a2bc74", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068e2e6e-63aa-4e08-96dd-541be8f64d57", "sighting_of_ref": "indicator--af2f1eb1-a179-41ba-8bcc-3a364b4b2a54", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537f7bf5-870e-4cc6-8a09-a6eae602fd1b", "sighting_of_ref": "indicator--d0e2065c-78e2-489b-a531-76a63d4b85f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8f7fe8-0f2d-40e1-a1ab-40a442ace669", "sighting_of_ref": "indicator--3bd3d148-2b99-40eb-b910-f9ef4714612e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf018cc-48b8-48fa-bd12-07b335047f1d", "sighting_of_ref": "indicator--3d248c6a-312c-4551-b272-1d76b0f4e800", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c206f761-d605-4ab3-a732-125533fb6642", "sighting_of_ref": "indicator--243910de-dd18-4d80-bffe-de81c22dc520", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83cc545-d3f3-4963-83bc-784e58af8f3f", "sighting_of_ref": "indicator--243910de-dd18-4d80-bffe-de81c22dc520", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b98334-7b27-4c5d-8054-2a7f966b8be2", "sighting_of_ref": "indicator--774618e5-8828-45ad-b028-b81004d24ac4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75bf1d5-372a-4b7b-ab40-ed48ca18f5aa", "sighting_of_ref": "indicator--d6011216-69ee-47b0-8bd8-a408f8930a79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fcb4fef-f2e2-4633-9586-212eecc3eb57", "sighting_of_ref": "indicator--d6011216-69ee-47b0-8bd8-a408f8930a79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97de337c-ea46-4d0e-a45c-9f8624236f02", "sighting_of_ref": "indicator--fcc8bff0-15eb-426c-b75a-6f93f5c94574", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--354bc9fd-d5ef-4cdc-892e-e822f4b17c3a", "sighting_of_ref": "indicator--fcc8bff0-15eb-426c-b75a-6f93f5c94574", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc973b0f-9408-457a-b9dd-60d62d2088a0", "sighting_of_ref": "indicator--303f2b78-c6f2-4d80-bd1d-7add34381637", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cac0a3-e625-46dd-82af-365d5272f08c", "sighting_of_ref": "indicator--303f2b78-c6f2-4d80-bd1d-7add34381637", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad134d95-2e56-4413-8106-7f97c41b00b1", "sighting_of_ref": "indicator--2ed742ab-7e97-42b9-be20-8f573f60950f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189343fa-20f4-4da9-adee-684542cdb5bc", "sighting_of_ref": "indicator--842fe344-7ba7-4abe-80b5-7df5eedcbf32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044a83d2-7039-4d7b-9772-c86e1c2b252d", "sighting_of_ref": "indicator--842fe344-7ba7-4abe-80b5-7df5eedcbf32", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3734854-e923-42e1-a754-fd17cb8012bd", "sighting_of_ref": "indicator--6f9649d8-d8da-40ef-a31b-2e3ba8501f29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fa145a-00df-439d-ac80-95338cd21a76", "sighting_of_ref": "indicator--219e0797-3052-46f7-a121-cb09eed58660", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5795871c-c5db-43f4-8f6c-cdc9b30da185", "sighting_of_ref": "indicator--219e0797-3052-46f7-a121-cb09eed58660", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c66980-30f0-456b-aa6d-75bff73361c1", "sighting_of_ref": "indicator--a4cc58f7-38c7-49e8-97cd-f65cab2b445a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b968ed88-f2f5-475e-86ed-c4a07e53fe19", "sighting_of_ref": "indicator--a4cc58f7-38c7-49e8-97cd-f65cab2b445a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641f2498-9963-45eb-b04f-abfcc74e7428", "sighting_of_ref": "indicator--52e68385-456e-430d-93ed-968fd2266585", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67be27e0-8d6b-4db1-9021-02b73b7957cc", "sighting_of_ref": "indicator--81f4ff86-55df-4b2f-9285-e357e4621d9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c212b4-c335-4cb6-9eb0-92c6dec0e37a", "sighting_of_ref": "indicator--77c8616e-ba8d-44e4-9c4b-2942d463aa48", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17329602-ca33-49b3-8240-4e266bddcab6", "sighting_of_ref": "indicator--4e589444-d30d-4357-9bb9-dad6573645f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b72e2b-b127-471f-85c2-07815632b338", "sighting_of_ref": "indicator--11683f7a-4218-44ca-b784-e1e4bc7f88ad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac02cd4-8066-43f7-9dea-a4fd88469c92", "sighting_of_ref": "indicator--d1c8eabe-4bc7-4f58-b2f9-8e9e5cf6ad53", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--458abc00-f8ca-450d-9ae5-cf005995a49e", "sighting_of_ref": "indicator--d1c8eabe-4bc7-4f58-b2f9-8e9e5cf6ad53", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--242ac827-67b9-407c-bf31-ca4d52b37dd8", "sighting_of_ref": "indicator--8b506164-75c7-4729-85de-835cb46d5d02", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d344e8f7-8cec-4428-becf-268f29ddec8d", "sighting_of_ref": "indicator--01c46381-f4f0-4772-b33a-f7a044b0eeea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525c83e4-0fc3-4118-8de9-39fecc540878", "sighting_of_ref": "indicator--01c46381-f4f0-4772-b33a-f7a044b0eeea", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d75aa3b-199e-4270-873a-98c732a087b7", "sighting_of_ref": "indicator--571cda03-3de7-4174-9b63-d55ee6d82378", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e59c357-b902-4777-9a05-e6cddfacb67e", "sighting_of_ref": "indicator--a6b921b0-9ae2-459e-b162-ac5ab46f18ed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52149870-4d5c-4c81-9f19-60c6d235ce7f", "sighting_of_ref": "indicator--90e4ed37-4898-4e63-a5fe-e25819993a78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e270186b-cf4f-4dcb-90c8-a79901468e80", "sighting_of_ref": "indicator--b84fc534-37ce-45eb-8e07-c331b8c40216", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189d1069-9b56-475e-8a5b-797ad09d1ae4", "sighting_of_ref": "indicator--7e67d9da-02ca-4e06-9498-d303e92404df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b20ea4-2647-4fe7-92a6-94c79c88b918", "sighting_of_ref": "indicator--beb59b38-a2aa-4cc8-a0ce-b966dfd3a974", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5474e1f4-420a-4df9-9080-11a59986a79b", "sighting_of_ref": "indicator--beb59b38-a2aa-4cc8-a0ce-b966dfd3a974", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a474401b-9d76-436a-945f-80d0b14f2086", "sighting_of_ref": "indicator--03485bc8-8be8-4460-afb3-a647acac7611", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839e75c6-f53d-4d22-ae85-5d6d534c241d", "sighting_of_ref": "indicator--1573012a-5948-462e-8b63-76442f656009", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab12959a-a9f5-4934-a597-a68f96745383", "sighting_of_ref": "indicator--9ad54634-65f4-4bd3-81e6-0ecd650d0608", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c9e791-fc47-4bc5-9a7b-eb5202206591", "sighting_of_ref": "indicator--2a8f1e93-9242-4708-8b43-7da7a5ec2f79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee53f71-b587-4d9a-872c-8a123201a86c", "sighting_of_ref": "indicator--2a8f1e93-9242-4708-8b43-7da7a5ec2f79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea304d62-27fc-4278-a706-451621dbc583", "sighting_of_ref": "indicator--31b7b7e3-0203-4d68-8930-9adcdeb9fa28", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44876502-8331-42b3-ac28-c7d92b969037", "sighting_of_ref": "indicator--0203b23c-249b-44e3-8243-01ff4e0bc030", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f214c4-45f7-423a-8bdb-e909d636e3fc", "sighting_of_ref": "indicator--0203b23c-249b-44e3-8243-01ff4e0bc030", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--769e972c-d04f-4531-9f1d-5d268e526314", "sighting_of_ref": "indicator--7c174bc9-e04a-436a-8cef-59c9a5c983d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de976fa-ba54-4e9e-9ffa-aa3d935e737d", "sighting_of_ref": "indicator--294783de-d2f5-46d3-901d-a27cdd487b95", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6cb66cf-f7f1-4a45-9d67-6631689d4bff", "sighting_of_ref": "indicator--86d7a544-27cd-4142-9be8-57b66275d48c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47c5358-5830-419f-8940-5544bd9f8657", "sighting_of_ref": "indicator--521e6fe8-fe19-407f-9260-b221baaf7f4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e94f067-4629-4e1d-97d3-4a9039069864", "sighting_of_ref": "indicator--521e6fe8-fe19-407f-9260-b221baaf7f4f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b2573e-f45c-43b5-859d-e39893b9c5f6", "sighting_of_ref": "indicator--e11c66c7-6ff8-4927-8926-a43b6135d1a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3310705-ceb5-4809-9cf8-72a999d8bc70", "sighting_of_ref": "indicator--c860238b-eb66-41f7-b727-9f1b968d46ca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6a44f6-72cd-4405-a106-e4ef7138ecea", "sighting_of_ref": "indicator--137928f3-67bd-4824-b9ec-45809b1f687c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a8facc-0449-41f8-ad46-1fe2ad9e35c9", "sighting_of_ref": "indicator--fa8469b6-c8c3-436f-8c59-3e0a787db484", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62289afc-023c-482e-91a7-add499747fd2", "sighting_of_ref": "indicator--fa8469b6-c8c3-436f-8c59-3e0a787db484", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb734b9-8f7f-430b-9344-25724c7f9efb", "sighting_of_ref": "indicator--4c422c37-3167-412e-a331-4ed587bf35eb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b1c0e5d-a750-4e5f-871b-83d2c911a835", "sighting_of_ref": "indicator--6a190e61-78fd-4008-9eb9-5aecdf8b7bd5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdcccae-c92c-4a23-b730-03128e4982f3", "sighting_of_ref": "indicator--c719b7f7-d176-4501-9a1b-a2222546e6d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143b67d8-8fe8-47d4-9adb-e159a056037a", "sighting_of_ref": "indicator--1deab8c1-83ab-491b-a325-e324ab7cc547", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094464f5-0b02-4d4b-8bde-928c08224c9f", "sighting_of_ref": "indicator--da49d28a-1047-4be1-8088-08759eae91fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d5ba76b-017f-46c9-9bde-73748ed8236e", "sighting_of_ref": "indicator--da49d28a-1047-4be1-8088-08759eae91fd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803f251e-d93d-47b8-ae7d-2c3f2ed4dfb0", "sighting_of_ref": "indicator--c92c343a-248f-42e2-b6c5-6c4657e2f2f1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fee78775-60d2-4c7d-aaf6-a987e1693c69", "sighting_of_ref": "indicator--c325c3e0-a3e6-42cd-87b3-566680bdbbb1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb437e17-4519-4369-8999-4ccc2507f4d2", "sighting_of_ref": "indicator--0d9d34e2-f30b-4d47-81f2-3d04c6685e6f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e58f16-82a7-4ac6-ac5e-9042f8d03722", "sighting_of_ref": "indicator--cd603c44-cd24-4609-9549-507cc79a1d60", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517d0ce3-cc10-47ca-adce-3a85dea50e7c", "sighting_of_ref": "indicator--0ccd9e86-9a19-43ba-9319-549d08f207ab", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794ba237-e6ca-4c42-a7e3-1ff2fa217a21", "sighting_of_ref": "indicator--6a9deddf-2a54-4a0e-8fdf-a9abde8756e4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a76988-15dd-49a9-810a-f89bcfdac6e2", "sighting_of_ref": "indicator--3eeb3aa2-f2b1-4392-945d-ce77a57d7ea1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bc76bb-93b5-4565-873f-4d674bcaa5d1", "sighting_of_ref": "indicator--3eeb3aa2-f2b1-4392-945d-ce77a57d7ea1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc66de94-a81a-4c0f-a3bd-1a473658d5c8", "sighting_of_ref": "indicator--b3899fa1-f6d1-4292-a5c0-72076936c2aa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ce9212-327f-4da4-b3e7-cbbd7c50f0b6", "sighting_of_ref": "indicator--e95055a9-c51d-4efe-9581-d70ac3bae665", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3af6af-5064-4788-aa30-97dd890e4d1c", "sighting_of_ref": "indicator--45323fab-5492-4b30-84a2-4fc73e3bffef", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cac266b-8d88-41af-84a2-7578b74c1a66", "sighting_of_ref": "indicator--74fd970f-975b-4de6-8357-3369dbc407a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35c173a6-8485-436f-87b2-5c4fe05e7992", "sighting_of_ref": "indicator--96035ac5-a072-4322-aba8-f78be3a9c4b6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696fea3b-4c0f-4bed-98be-9485d277097f", "sighting_of_ref": "indicator--4da14374-bc7d-48b5-baf4-a1c9300b2e5c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf9dbd3-e447-469b-8afa-0e670ca1444d", "sighting_of_ref": "indicator--4da14374-bc7d-48b5-baf4-a1c9300b2e5c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83f2cb5-61e3-4c9d-8814-a221ffcb5bf7", "sighting_of_ref": "indicator--e6ca81db-654c-4121-a26f-1c8c0946580f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8770507-d1e0-44a9-9af5-4feef1ce9dbc", "sighting_of_ref": "indicator--dd01df1d-a015-4f7e-8c62-a62a6bdfc365", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc96479f-75bd-4d40-9364-54a9ca523ffb", "sighting_of_ref": "indicator--c3b122cf-4389-4a75-926e-fbe2e5e92b9f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05207bfa-1529-4fe7-afc8-02ea9af9282a", "sighting_of_ref": "indicator--38a55ecb-da33-46f4-b42f-0e32b07c437f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac57a1c-a3b3-42d8-b082-ef64904e5d96", "sighting_of_ref": "indicator--3b3258c9-45ca-4002-9b34-9a1b61e4b328", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3fc3634-49f2-4884-8c52-22b92e4feec1", "sighting_of_ref": "indicator--1fb3cfa6-a5ba-42a0-9a2b-600a4feabc30", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9ce0ce-8a7a-4ffb-94f1-ab5d8035941a", "sighting_of_ref": "indicator--434112b3-aa6d-4e8f-ad9e-d95c71e93f04", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9aaf536-369d-420f-bf49-b0907f433234", "sighting_of_ref": "indicator--962a84e4-51d1-47dc-b780-20f793e9d424", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb11e4b-4f40-4c66-bb1b-67aabbd0683a", "sighting_of_ref": "indicator--e8510b47-a633-47da-985f-5619e8fdbb45", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfad537-ba46-47d3-b7d2-bb7dcdb4d7fc", "sighting_of_ref": "indicator--cd774a34-fb89-4de0-ab7c-04c8ec83aa62", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f26952-5458-4e13-b8b4-5d81ec8e58de", "sighting_of_ref": "indicator--44c0796b-3b87-4218-bca6-62dbf544ee92", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41cea0bc-cbcc-4c19-8584-3c7e8e997b28", "sighting_of_ref": "indicator--dde29282-c55a-4073-a3a8-bd4219eb8014", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f70e51d6-3184-43c4-99be-42a34a356bf2", "sighting_of_ref": "indicator--113d8892-da55-49d7-8ae9-1d852f9db98b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23c070c-a83b-4b44-9d66-28f7a798a06c", "sighting_of_ref": "indicator--71d547ef-786a-414b-a0fd-76c8ff13770c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b18cab7-c91b-481f-8df2-753d4ab2bb16", "sighting_of_ref": "indicator--18386e59-5896-40fe-925b-b45088fb8f55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf2956b-e8d7-4353-9b0a-8718a8994ff8", "sighting_of_ref": "indicator--f374fb06-b746-43c6-af86-04a5d4e85db5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8f48af-0cdf-4ec9-b80c-f5dcbf95fee3", "sighting_of_ref": "indicator--c05b3413-1242-44fc-97b1-87134ae1e2d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bd7d5f-c10c-4048-b496-268ce943af1d", "sighting_of_ref": "indicator--a44a07fb-7f9a-4b81-a38a-3ecad3d74112", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6223956b-c9b4-4d70-8cf0-2515bd393efe", "sighting_of_ref": "indicator--de4c9f8e-57d6-490a-bcb1-3f8b7e2f40bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7c0f73-bf50-496d-b69e-3ba2032a5302", "sighting_of_ref": "indicator--568d2089-3d51-449e-90d6-abcd1c7e4dcd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47fc3470-484f-442f-bee1-062b5f0c74a3", "sighting_of_ref": "indicator--f851423d-b81f-4c0f-bb40-56a14f00581a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c6b323-e657-4b86-94c8-edf4104e19ce", "sighting_of_ref": "indicator--fabf2954-ddce-47c7-8f0c-4b7b0f500098", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89435309-9d27-48cf-822a-e90c889eadea", "sighting_of_ref": "indicator--4abf28f3-4f4f-4c48-8daa-8e8e1704c77b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f458138-f926-4292-8b92-f8d63fb12113", "sighting_of_ref": "indicator--4abf28f3-4f4f-4c48-8daa-8e8e1704c77b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff8f5e0-b1d1-458d-bf8f-18f6c24e218c", "sighting_of_ref": "indicator--76e31232-8fe9-49c6-a7e5-b4c983a84dae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c945de8f-2c01-442d-b3bc-2f5ef25a2f31", "sighting_of_ref": "indicator--5c2a6c42-c043-4046-a4b8-6463e8f0d823", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59e9d1c-759d-4324-9c58-25ad00a92b00", "sighting_of_ref": "indicator--d14f47dc-fdb6-47a2-87ee-6989e14a91c7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f9d16a-7bc0-48d6-8a11-3258fa5d74b4", "sighting_of_ref": "indicator--ee447ecf-71e2-447c-9723-bf4d92314195", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776815e7-351c-41df-83dc-42b27be95fb7", "sighting_of_ref": "indicator--9743b94c-4743-440f-bfb3-9949ded18634", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53914634-4ac3-457e-bae8-f084284a3c90", "sighting_of_ref": "indicator--b450b2e9-053b-4f90-80d8-61948970b3ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f702e54-166a-4a5f-b78c-3baa7ce29f1c", "sighting_of_ref": "indicator--e3abce7a-4013-4cca-9f23-96cbab6008d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07abc06-90c2-4b58-a7ce-4d2314f9056e", "sighting_of_ref": "indicator--e3abce7a-4013-4cca-9f23-96cbab6008d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f5eb04-b687-4037-9166-90ec025e6764", "sighting_of_ref": "indicator--a27edca3-878a-48d4-881f-b518f7773ede", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3051c20-1172-44d9-bc80-0afc2bbaa47d", "sighting_of_ref": "indicator--a27edca3-878a-48d4-881f-b518f7773ede", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f223b8e-aba8-4a06-a2d1-7b2adb2e94d1", "sighting_of_ref": "indicator--36de4dfc-8579-42bf-a27c-a5ecabcaec37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba019ed-5b7b-463e-a842-0d6420a305f2", "sighting_of_ref": "indicator--36de4dfc-8579-42bf-a27c-a5ecabcaec37", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6863e4d0-465b-462d-afca-20030cc78dc7", "sighting_of_ref": "indicator--15a213fe-a0f9-425b-88ba-3bc41728dd35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f392fbb3-f8b5-4fde-8d97-0ee95c0add2a", "sighting_of_ref": "indicator--0a844be6-c4fc-4fa4-98b6-0d444fde1f1d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c15259fe-707d-47ee-85de-f9d77cf7d3fe", "sighting_of_ref": "indicator--0a844be6-c4fc-4fa4-98b6-0d444fde1f1d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388525f2-d0ae-42de-89ff-9f838da5ed91", "sighting_of_ref": "indicator--f4b0b82c-8257-47d0-b558-0ce8825db8a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fd8599-fdac-477d-ab67-420b51e34732", "sighting_of_ref": "indicator--1b72e095-a338-4973-a683-0096f601a1c2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd69503e-d954-4183-aeb1-cafd5b3578d5", "sighting_of_ref": "indicator--6ad26ef4-267f-4c67-9855-250b5b7fbe98", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aedaccb-4c92-414f-be02-9e615c89eaf3", "sighting_of_ref": "indicator--6ad26ef4-267f-4c67-9855-250b5b7fbe98", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b52b7bb-332d-4d31-9167-5a4c5873f9a4", "sighting_of_ref": "indicator--9355401a-566b-47d0-9064-9be5b7cd49b1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e3ac8e-300c-455e-9a3c-e7f82e10220a", "sighting_of_ref": "indicator--ee249768-1ae2-467b-b79b-f8653344da9b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f968e251-9949-4861-a0c8-bea99a0e7d25", "sighting_of_ref": "indicator--ee3fe677-4f88-42b0-9dae-9008d9a294e6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36097e40-8ba9-4c64-9bd3-4d9e30832b52", "sighting_of_ref": "indicator--0139a860-5a78-419d-80ff-b44dadb653e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c89c91b-b188-4d6e-91cc-4da151523183", "sighting_of_ref": "indicator--a99d1d4a-e24f-4ff8-8ad7-c91f697bafff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1bc7135-a82a-4f9f-97e9-0c1ac8c41f7d", "sighting_of_ref": "indicator--03441040-b5f9-47e0-8eb6-b0f9c80b23a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7171544-2d25-4a99-9829-036861cea1bf", "sighting_of_ref": "indicator--5bfeeac6-9ee2-4613-8344-2682e185bf2f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25be804d-00dc-45f6-9c50-f44e6896ce6c", "sighting_of_ref": "indicator--67ebb86f-7b70-48b3-9b5c-7f8e52b4c496", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e18d0b-1dc0-4d2f-8650-82897edeb60f", "sighting_of_ref": "indicator--e83a284d-42e3-4459-8044-dab0d4df5272", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b35dff9-53ca-434a-a578-5f6fd743174d", "sighting_of_ref": "indicator--e97b0699-13c4-45ea-9788-458c7086db3a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bf36fd4-634f-419f-87bc-a0e87e2b2dc7", "sighting_of_ref": "indicator--e97b0699-13c4-45ea-9788-458c7086db3a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--554b373d-603c-428b-b6e0-e1516f203a64", "sighting_of_ref": "indicator--d90914a2-3997-4da4-af30-a75191a37aa8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da55d1a3-ab99-4b63-ad73-854ac45c7552", "sighting_of_ref": "indicator--e91c970b-d089-4548-a5ab-e3d112713c9d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024b723a-dc21-4905-bc74-2ea47877dc30", "sighting_of_ref": "indicator--e91c970b-d089-4548-a5ab-e3d112713c9d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d819347-11ee-4f48-a4ec-33d8eebf08a0", "sighting_of_ref": "indicator--c63eabfd-439c-4433-bf5d-f1cb28c8d5a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001b0245-335c-409a-8787-7688555fa539", "sighting_of_ref": "indicator--6adadf23-5bc1-44ff-b834-d4848e86a77f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98adaec5-c79f-4b1c-8a6a-934e7c462da9", "sighting_of_ref": "indicator--6adadf23-5bc1-44ff-b834-d4848e86a77f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefb7d81-18f6-4a1d-9f97-0d4031073f11", "sighting_of_ref": "indicator--4f99e327-c6fb-4f9a-878b-4c1eda7cd363", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69673558-c9d1-48ab-b002-5d2218c9e729", "sighting_of_ref": "indicator--e9f8f2ff-ab22-4777-9f5e-18fc26dd19aa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951eaa16-021f-461d-9e97-2ccfe84bade6", "sighting_of_ref": "indicator--8aadc4ea-a798-42ac-bb1c-9ec8ab3d8710", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e5e7f6a-6f75-46a3-8633-a968de0e4c03", "sighting_of_ref": "indicator--c5ed7da0-6c92-4523-bec2-1dc071343306", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a37540-3d35-4d2f-8b36-a0d612ac4f35", "sighting_of_ref": "indicator--6838fdf4-02cb-4066-a692-cb8e7cd23b44", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5656253-fa59-4113-aaba-9b4e423e29c7", "sighting_of_ref": "indicator--74a23757-1849-4963-8710-75d4a62102a1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e8e5eb-9df5-4ad6-b675-bde432698207", "sighting_of_ref": "indicator--4b25004c-2e7c-4cd8-b6df-d10550fe6555", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8561f761-9a1f-483a-b48a-469a7efdf7ff", "sighting_of_ref": "indicator--f284e39a-1473-4be2-a868-c35b5be2a792", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b9a1dc-7653-43cf-9215-13e108f7d598", "sighting_of_ref": "indicator--04abf7fa-6881-47d0-b70c-81b26d057f72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29235f8c-534a-4d93-b18c-817eeda36026", "sighting_of_ref": "indicator--1f3e3581-20d4-46d8-bc87-bf1fca533dc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b07aff97-ffa9-4eaa-85f3-ff691234512e", "sighting_of_ref": "indicator--1f3e3581-20d4-46d8-bc87-bf1fca533dc5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707ba1dc-1c20-4dd0-8b5f-bb2795a79166", "sighting_of_ref": "indicator--37164083-6b30-4516-8940-f184d6204791", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0566bde1-03e5-4808-af00-eec79ad3b61d", "sighting_of_ref": "indicator--37164083-6b30-4516-8940-f184d6204791", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395651a3-759a-4860-a874-633a8342830c", "sighting_of_ref": "indicator--34028623-0dbc-4cce-a945-a46cd8b57fcf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7549a12c-12b5-4c50-80e2-774fba8da0a0", "sighting_of_ref": "indicator--0e196069-1721-453f-85c2-8c84ff188f7a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27323a9-4727-45dd-b91f-d22bcb32faf4", "sighting_of_ref": "indicator--24c91f72-d451-4250-a18e-4b9badac5206", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66c54cd-d9f8-4166-b729-e5b1137ddc4f", "sighting_of_ref": "indicator--35be4f6d-6c8f-4f0d-b247-38aff43345c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891b8c77-cf03-4e8c-94cf-7f29cd5079c5", "sighting_of_ref": "indicator--4e53fd0d-fb85-49e4-8430-d3e58e197f32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef48b9ac-6d08-43ed-9b3c-8e6b4f06533e", "sighting_of_ref": "indicator--c399a9fb-487a-4aca-b84f-57e3aa47be00", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca39054-d216-43eb-8b58-dda9eeb2eee9", "sighting_of_ref": "indicator--2f4d078d-9289-4cb2-9cd1-a78234dd83f7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfa3042-5e18-48bd-90e1-31df4025c961", "sighting_of_ref": "indicator--2f4d078d-9289-4cb2-9cd1-a78234dd83f7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f120ec9-8aaf-4c1b-9779-696a90261f7c", "sighting_of_ref": "indicator--645a0d6d-8e69-4f97-9c03-545fbef920a4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b74b1749-4690-41c8-8715-340a30d00039", "sighting_of_ref": "indicator--84dbd5d4-2a7c-41e6-9dba-3595ec49a1e7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a0962c5-a03a-46e1-9bc4-4caf5f1085fc", "sighting_of_ref": "indicator--1c4c084f-f79e-430f-aaa5-0f1793fe4eea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e284bbb8-ac71-4687-9e58-e8678832a105", "sighting_of_ref": "indicator--2cc47680-7a87-48df-93a8-20279c9f4729", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d8fc91-de99-437e-abd6-60991a94fc49", "sighting_of_ref": "indicator--f47c7f1d-246b-47b1-86e1-6ee2d22c54b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34000929-ba30-457a-a340-2f23d70f7046", "sighting_of_ref": "indicator--f47c7f1d-246b-47b1-86e1-6ee2d22c54b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--331e3964-f27a-4e7a-bb90-49140ab2a1ce", "sighting_of_ref": "indicator--9c7d3f4a-0e64-4af9-96c8-d5ea991dfcd9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7426cf16-c64a-4181-9063-f9a60fc12c53", "sighting_of_ref": "indicator--9c7d3f4a-0e64-4af9-96c8-d5ea991dfcd9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974b513a-208a-4b62-bf66-53ac63cc2a54", "sighting_of_ref": "indicator--048a2b81-f53a-4758-b535-c9d466e63fe3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602306ba-b60a-40ca-a855-1cb50d5a0fc5", "sighting_of_ref": "indicator--d29c5c87-9dd9-48bf-a173-df042ad78da0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c82186-1bbf-45ea-85c4-b8f211aebce2", "sighting_of_ref": "indicator--d29c5c87-9dd9-48bf-a173-df042ad78da0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac76a771-f3e7-4221-8c26-8bc3fce8554f", "sighting_of_ref": "indicator--ab769629-c199-4b92-90ad-6a52b35d2411", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f17a2a6-0def-49cf-9540-abe16c3af55b", "sighting_of_ref": "indicator--284e6755-d369-4713-abd4-233faef1a6a3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c207181-3f0f-467a-ad7e-dd4bfc3dbd58", "sighting_of_ref": "indicator--0e337a0c-6821-45da-8f5a-0b79824ed67a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d8400d9-7edd-428c-8ae3-d600fb82b36e", "sighting_of_ref": "indicator--c0fe8026-088a-47ac-9588-5d207e8919da", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017ef09b-9d61-4b46-b06a-d823c4df5ca4", "sighting_of_ref": "indicator--8b2bd4ea-9a3f-4b96-bbac-027176a557f1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b657145-0728-427e-bee4-c521b2a5c6fc", "sighting_of_ref": "indicator--fa57e478-47f4-4d83-aaa9-29436578f9a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc215a64-3cb3-4096-95ae-f099f748e01d", "sighting_of_ref": "indicator--50a28e78-c733-447e-b9c7-cf6ef0fea2cc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a0f0e7-bc67-4d04-b4a5-6e45342562e6", "sighting_of_ref": "indicator--d5b12d14-577d-4602-88ca-51247a22e51a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86289f8-2f61-49b5-a509-8b2b43e1235a", "sighting_of_ref": "indicator--32d6c374-3c12-4c3b-bfbe-9e79846ef670", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0bd01e-aba5-43d9-97d8-3050485468ba", "sighting_of_ref": "indicator--ba9d6d8b-02c7-42f9-b837-b6fff52e7a34", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e509b6fd-716e-4f0c-9a4f-39a908cf58a4", "sighting_of_ref": "indicator--2c20afaf-2a2e-4c71-aa3e-7c874171d48e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47aa254-e8f6-4660-a398-156a66132b5f", "sighting_of_ref": "indicator--10cb054f-ca8f-4a5a-a1f5-ef6e79a83f7d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ed5ca7-1491-4f95-8abe-da80e5d53006", "sighting_of_ref": "indicator--c6ae7d90-e3f6-44b2-97b2-4748cd480654", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c738e6c0-5778-486d-85d3-9452c37ec38d", "sighting_of_ref": "indicator--2a7602e1-cf18-4240-9612-fc064cc45f07", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d5a2dc-399e-4559-96e9-51f40c4b94e5", "sighting_of_ref": "indicator--2a7602e1-cf18-4240-9612-fc064cc45f07", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c591951-5b97-4970-9a77-132cc671597b", "sighting_of_ref": "indicator--3435a650-d480-4616-bf08-55dec6fe0488", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1d8b72-4dd2-4505-9cb0-b27230c69e93", "sighting_of_ref": "indicator--216c44dc-722b-4631-aba8-8688ad1e1216", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd45929-3bf2-41b4-9e76-7a92f4d55212", "sighting_of_ref": "indicator--a6a508d9-cf56-4816-8c44-79a21e422efd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548da31b-d48d-47ec-9e56-f9e0d81336c4", "sighting_of_ref": "indicator--c478955b-c897-489f-9e87-e9fd494830f2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760c969b-ba82-4155-a4ee-7032bcb40d1b", "sighting_of_ref": "indicator--17f62cc7-d773-4379-8d1d-9be3e30d206a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f5e354-804c-4581-bade-69514d4b1e80", "sighting_of_ref": "indicator--04cdc3ee-72f3-42d2-bd10-3af8494e3d2b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c7a077-1d11-4e17-8a42-2490fa1643a5", "sighting_of_ref": "indicator--003774f3-2026-467d-9b6d-d5ced29cd976", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c9ea5f-ca47-4465-b489-482d1b7d1ad6", "sighting_of_ref": "indicator--d5b5791c-991e-4ce0-b817-e6eeb43289fa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0327b452-7acd-4ce8-a091-85165125a07f", "sighting_of_ref": "indicator--b93c33fc-40c1-45b0-8235-5e8433f6802f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03047d6b-41ee-40a3-b9fd-0e0827b3ff7c", "sighting_of_ref": "indicator--73768a1f-8f87-45b1-b199-dd5e51cda68e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80409de3-934c-47a1-9054-7499a9097126", "sighting_of_ref": "indicator--93e4cb6d-dc6c-4f03-83d3-c309de03e49c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08386ee2-42f7-4de3-9a4e-8c94231cef01", "sighting_of_ref": "indicator--584390e1-09eb-4102-8aea-193289d831c2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e1c947-c9a6-42f1-8014-e2e615d4f6b0", "sighting_of_ref": "indicator--ec225b99-be93-4025-96f0-47b2bfe419a2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25717abb-abc3-4699-b99c-7cf8d3851412", "sighting_of_ref": "indicator--1bb93706-517b-4f70-9954-30857fcfa490", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2722bdaf-4802-4810-a544-040ee8506cca", "sighting_of_ref": "indicator--083771eb-43f2-4082-ae6c-12bf970c289f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cb6847-4380-4f73-b66e-cfb41f45a0be", "sighting_of_ref": "indicator--083771eb-43f2-4082-ae6c-12bf970c289f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea759ff5-8e69-4a07-8cbb-cbe14751b625", "sighting_of_ref": "indicator--5ca19650-ad28-4130-b5e2-75dd33ceb8d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f69ddee2-cb23-4a1d-93c0-d9730591002e", "sighting_of_ref": "indicator--fad0b6fa-c663-4ccf-9fd9-b2f4517be748", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6763ea-b750-46c7-8ba7-86ed0f3ebe88", "sighting_of_ref": "indicator--72643abc-073d-4145-928c-054d4136dfdc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d386cd46-3330-4160-9b46-882f6d0ed24a", "sighting_of_ref": "indicator--c3146b7f-1de7-4472-a377-659425b303b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbe5b7be-efae-4426-a264-595ef989ab1f", "sighting_of_ref": "indicator--367a4529-62d7-4e23-81b0-8c76a10931e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced63358-4259-4b32-9a69-e4030cdb9e38", "sighting_of_ref": "indicator--a3f2e884-d74e-46e1-9b91-b1acb66d513a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbabe36-f297-47fd-b72a-aa80c5ed858d", "sighting_of_ref": "indicator--96466fb0-ba10-4325-a7ab-db6fd1273294", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82abf22d-fa0c-43ec-9059-8676fef1d136", "sighting_of_ref": "indicator--deb57558-e532-46bc-ae5b-514aaffcf1f2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb88d910-9305-468a-a1b2-a8cabd8b7c7c", "sighting_of_ref": "indicator--7a49156a-2285-49a3-b4a9-c10def5f19c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3895f4d8-cd20-4a5a-88d9-63ff75b70dd5", "sighting_of_ref": "indicator--64a2185c-7e2f-47f4-b33b-df04ec071668", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a700dc-f652-4db6-8f5b-361dd548125c", "sighting_of_ref": "indicator--f6a7e232-97cb-4c63-95da-915993b93b9f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfe9fd6-e2fa-43ea-9ee5-2bb3def19392", "sighting_of_ref": "indicator--c00800fb-afc7-4c64-ad1e-2a578297b5bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bce241-57ec-4347-ae1c-90bbdf20fdc8", "sighting_of_ref": "indicator--28b1ec00-6754-4b7e-bf64-76aa76dd742f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c2c0f8-2535-43fa-8ef7-e4eaf7d2dbb8", "sighting_of_ref": "indicator--28b1ec00-6754-4b7e-bf64-76aa76dd742f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4ac56b-1da7-4fa4-86c6-a90735858549", "sighting_of_ref": "indicator--ae2c1838-dc05-4693-a7eb-a202eb01941b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd02bc6c-f973-460c-98de-7c0086f03b64", "sighting_of_ref": "indicator--ae2c1838-dc05-4693-a7eb-a202eb01941b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e9bd6c-5e50-43de-abf5-77337e477fad", "sighting_of_ref": "indicator--b6b9a3d9-8c43-407d-91b6-c61c50783feb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b97717b-3023-48b3-890c-47ae74a47fe5", "sighting_of_ref": "indicator--94179947-7376-43ce-9ae7-92a6c310aa02", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37e9236-bda2-452c-bd0e-ca87f0f1ab64", "sighting_of_ref": "indicator--8bc2e90e-dfc6-4f2f-bdd7-38fb9f6d17ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93dc5008-b18a-4ca7-bc79-c0ef15b22a66", "sighting_of_ref": "indicator--4801a301-e1d4-4ee4-8acb-8e51e7d46ff9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266e4cad-9f9f-4abf-87fa-37870b3d9e23", "sighting_of_ref": "indicator--307a0d6c-6890-41cb-a072-cce3a203dedf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c6e975-0fd6-4a7f-9082-b6a5fc1d1957", "sighting_of_ref": "indicator--4b380b9b-33b1-47fd-a853-0b697bbee54f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6352396-f1b8-49dd-b20f-a3fd159d809e", "sighting_of_ref": "indicator--789ede54-9783-48e5-9c6e-d6285119594c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc8bd75-c1e2-4865-abf9-d48cd13806b5", "sighting_of_ref": "indicator--be8206ef-5554-4242-a59a-4336e40d129d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4736a7e2-a21b-40a4-a060-be53b1581ea2", "sighting_of_ref": "indicator--c0674c0a-5fb0-45c1-877f-a276316ae020", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16010276-5891-4631-a790-d276aba64e2a", "sighting_of_ref": "indicator--c0674c0a-5fb0-45c1-877f-a276316ae020", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3940fb3-bd6e-434d-afc7-edb473e797ed", "sighting_of_ref": "indicator--3661f23c-17d8-487e-bf53-ff625cb3e154", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b0c9b3-a3d6-49e6-9bf5-2ab5f04874b0", "sighting_of_ref": "indicator--3661f23c-17d8-487e-bf53-ff625cb3e154", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7104af4-bc1a-4bf6-9136-502428e753a7", "sighting_of_ref": "indicator--df7cc055-bf39-434a-9b01-16d555b686c0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db37c313-275e-4307-a7b5-d7f01dca4a22", "sighting_of_ref": "indicator--ea5ad64c-d7e9-4c3e-bfd5-b6cd1cd3f24b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9349ba50-870d-470c-a0c9-58697bf9d1d0", "sighting_of_ref": "indicator--80be90ab-6875-4ba0-89f9-1eb1f226765d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0fc344b-b9ac-4348-839f-e137fb0c1860", "sighting_of_ref": "indicator--2dfce4d2-a74d-4ce5-8d1c-cde3d58ba172", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20a6d67-543f-45e2-8b99-b6ccf86bbc7d", "sighting_of_ref": "indicator--b3880f90-f759-49a6-b965-9fc7c25adcae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f878e00-c496-4513-9b21-c2f7db330439", "sighting_of_ref": "indicator--5d90c453-b2e8-4cc7-85f6-94ca191a2812", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9be5b01-b48c-4c57-b05b-1a4bcce201fd", "sighting_of_ref": "indicator--94824845-bf1d-4452-b6b4-de84e2fb3db5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc90fce9-42fe-451f-b2aa-0446b3db877a", "sighting_of_ref": "indicator--b4d9b5fb-51fe-4269-a6bf-fee4ee253eca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec35ab7-a20c-4713-b2d4-7abe9441ecb6", "sighting_of_ref": "indicator--fb6210f7-8301-4011-bfbb-f7655f511a29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a23047-b7f6-4d7f-a9d0-b3ae22cded6a", "sighting_of_ref": "indicator--bb887dd4-98a6-4bec-bcfa-91ce74de30f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366c5dc2-486f-4ac5-b1db-fb2067975a38", "sighting_of_ref": "indicator--bb887dd4-98a6-4bec-bcfa-91ce74de30f8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d32eee3-cc13-4a26-b315-6d50ac81920a", "sighting_of_ref": "indicator--25338015-708d-4c36-8f11-b36ca64838f6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2473e660-7fcd-4287-98bc-2dd8a8e9f057", "sighting_of_ref": "indicator--c8ed7cdb-ced2-4c91-9b99-10e12e723263", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595d9f19-a5aa-4615-9e0d-b324f56ae508", "sighting_of_ref": "indicator--45f0d150-7b23-40dd-a3e5-27ebbcec2fcc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e809293-99ca-439e-9bf6-ecbe9f9b517d", "sighting_of_ref": "indicator--d2c6df7b-8aa5-4eda-9426-731f1a2c9ea8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17946d8-0460-412c-8400-ae4fc4f3f2de", "sighting_of_ref": "indicator--7aae478f-c829-4158-be1d-27269d31f2ec", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91bd16a8-4039-4efc-9d2c-0799173814cb", "sighting_of_ref": "indicator--abf6b46c-250c-49ce-80f8-2a4f0ee5133e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a316b2a-ce8b-4d6f-a2e5-c3da841aec38", "sighting_of_ref": "indicator--abf6b46c-250c-49ce-80f8-2a4f0ee5133e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a636b642-668e-4f2d-a72c-587ede89f46e", "sighting_of_ref": "indicator--f7625f62-52c0-4f75-9b2d-1fc3b644be80", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ddc42aa-eed6-49e0-8124-077444bb001e", "sighting_of_ref": "indicator--b12e7220-2ded-498c-8e5b-ea6fa6561b98", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc15a7e-1f0f-4864-b1bf-0c1eb395a7d4", "sighting_of_ref": "indicator--193f5bc4-361a-48a0-81f4-c79ba01c61f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508d36c8-5ca9-46fd-b982-e3e79948751b", "sighting_of_ref": "indicator--198fcb3b-37fc-4e08-864a-09d3791c6da8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fbbc733-be69-444e-8369-794e3fb838ee", "sighting_of_ref": "indicator--c410ee67-ac11-4d7f-913d-e870e2217f90", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc64c53-b196-4f57-a2a4-5c88e470f6c9", "sighting_of_ref": "indicator--c410ee67-ac11-4d7f-913d-e870e2217f90", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb46e72-56a5-4db1-b0eb-22cec82fecdd", "sighting_of_ref": "indicator--76e816d8-56f5-46ac-8537-13d1b9ba2e50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11a44bb9-d092-4bd9-bd49-bb80afa1c203", "sighting_of_ref": "indicator--76e816d8-56f5-46ac-8537-13d1b9ba2e50", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c37d839c-e6bf-445b-8eca-c62bf9a4f2bb", "sighting_of_ref": "indicator--b538db06-de61-4743-91aa-82c365ddae93", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03f0d74-f392-478f-8cda-1efddc42f095", "sighting_of_ref": "indicator--b538db06-de61-4743-91aa-82c365ddae93", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc84cc7f-35f8-4808-acab-944b3a9a4c78", "sighting_of_ref": "indicator--f9b72629-95af-40e1-9b9d-2a1c01492eb3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c220d77-b962-4ad4-894b-c91b8d4203a5", "sighting_of_ref": "indicator--f9b72629-95af-40e1-9b9d-2a1c01492eb3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f32573-c7cb-4a55-b6f0-c4bac7cc961c", "sighting_of_ref": "indicator--f4645fc5-34b5-4f3b-8a67-aeef89807389", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b69cbde-590b-4507-9c21-f7fb4fd1cb2c", "sighting_of_ref": "indicator--9c6b4d73-6714-425e-9078-5b383f42725c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b31773-1beb-41c6-b5ba-8b07bf68b2d1", "sighting_of_ref": "indicator--9c6b4d73-6714-425e-9078-5b383f42725c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb927df-2776-48a9-8647-053591d43ad9", "sighting_of_ref": "indicator--cb16499c-fc02-49c0-9ed4-54f3dbc2b4ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec084773-2c54-4c7d-b317-35a430b77dcc", "sighting_of_ref": "indicator--eaa880e7-2861-488e-b91c-2d76dd229b6b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86ecd34-d96d-4eea-88c1-5fd15143e540", "sighting_of_ref": "indicator--f10e3566-e60a-47fe-97f3-3563fa853343", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a5fecf-d514-4111-9a53-3f404991c7e5", "sighting_of_ref": "indicator--4248cd0c-d242-4f6b-9628-fa3b8b54824b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567c3268-a72e-4060-b76f-b996351a3924", "sighting_of_ref": "indicator--c11ebc34-a5de-4294-9220-d1a352362c00", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3173af9-6e83-4d6e-b5b1-a5266ed97312", "sighting_of_ref": "indicator--2456ee1d-8472-49a6-bf1b-0efd32901eb6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d04ac2-0409-44f4-997a-ec54376faf68", "sighting_of_ref": "indicator--ce6308c9-4bbc-484a-8d52-a7915292d98e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf159d9-1620-4e7f-8a5f-ac05820c3f74", "sighting_of_ref": "indicator--708f9dbb-6715-4a43-a2e3-71b7e8738961", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdf4535-40c1-46a0-bf6f-6e369d7b773c", "sighting_of_ref": "indicator--53dc4451-805a-4cf5-8008-940c88c86289", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7543b0a-7313-4671-8dfc-7957647d8684", "sighting_of_ref": "indicator--86db5f01-a157-4d53-a49d-8676a73a3eb7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7ba567-0ecd-4dc2-8d05-31e9406a3348", "sighting_of_ref": "indicator--f7559fe7-d2f3-4afb-9d3f-35187a1ae97f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68543b4a-5609-40cf-bb05-a296ff630902", "sighting_of_ref": "indicator--0d447905-e3db-4967-9bdb-b72f299ac850", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9d7560-26a1-484b-88a2-7efc873271f0", "sighting_of_ref": "indicator--55a178e7-e6b7-4ff7-a6c9-eb22c6e35db3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e27beb-84af-43d8-92cd-d6cd914c1809", "sighting_of_ref": "indicator--2622556a-7812-4783-bc74-a25256ac5608", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedd17b8-7f0d-4d88-80cf-c34272e21cc0", "sighting_of_ref": "indicator--24ada1f2-ff4c-442b-90d4-0b373fd0d44f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3ebe61-0940-4bad-95a1-e19551f231e0", "sighting_of_ref": "indicator--dbe764ca-68df-476d-98c1-88296ca16c14", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f26b171-a2b6-45ef-ae72-001869957d97", "sighting_of_ref": "indicator--6baaf925-687f-42f8-915b-41c46bc1402f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a162140a-1254-4e7a-a661-2a9d5fa4a881", "sighting_of_ref": "indicator--3c95b0ae-50f5-4a3a-acaa-30916257f82d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7a508f-0302-4a1f-904a-955a3ee2b736", "sighting_of_ref": "indicator--3c95b0ae-50f5-4a3a-acaa-30916257f82d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89ddc1d-bff1-4153-b2c1-32f86cfa184b", "sighting_of_ref": "indicator--e03df53b-238e-45dc-99d4-db2af3eb970e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e898e071-0f52-4782-b242-3d8f8bd2c85c", "sighting_of_ref": "indicator--1cce6d51-4675-487a-832d-9021dc6fc0f0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c39f788-bcd9-47fd-8e28-c250cac1d696", "sighting_of_ref": "indicator--201a256f-2792-441c-b18f-be602d423960", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5874446-63e4-4bce-ac0b-c8a62bc62162", "sighting_of_ref": "indicator--af4eec18-feb8-411a-83d6-3c37c74009ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6939898e-2d00-44c0-a09c-cab15f9b4d9e", "sighting_of_ref": "indicator--af4eec18-feb8-411a-83d6-3c37c74009ac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--515cd0a6-0d45-4692-bef7-2b6f7bc56612", "sighting_of_ref": "indicator--ff0fa13f-d0c0-4384-b711-3169d5c67385", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9070dc11-b9a9-4e4a-9174-597003e0f7b6", "sighting_of_ref": "indicator--7edca973-0bcc-4b28-a1be-f09e288c1d71", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecaface3-605c-44f5-97cf-f129b8810c3d", "sighting_of_ref": "indicator--5ba99837-ec58-4d86-8de4-156681796d1f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--219b3623-1b4a-46db-9f79-c9c6c1caeddf", "sighting_of_ref": "indicator--310da1c6-5b01-4327-8c6d-1db1c6355217", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90407c8b-e66b-4355-84c7-9bcd78a6cf36", "sighting_of_ref": "indicator--d22be357-0c58-4308-a88d-701bed4d4a28", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd8fe97-06ff-497a-b89e-ecd59bd76209", "sighting_of_ref": "indicator--e42a300a-0874-4f9f-8cb4-7182ed96309a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd08adf3-fec1-497d-98eb-2e48d7b501db", "sighting_of_ref": "indicator--324b2990-75f1-4c12-945a-91d6f1c1d567", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2735c2df-4248-4f71-af51-eabad0c61954", "sighting_of_ref": "indicator--cdf0d760-e24d-4da8-be70-b316783ca195", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29edf133-63fd-4c0b-99e1-01f92d5daa76", "sighting_of_ref": "indicator--3abe7276-8c87-4607-8a9d-df66df26701e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8048a0c-611d-49bc-8478-c3ad350e0f31", "sighting_of_ref": "indicator--adf23dc0-b030-45e3-9b59-1739608fa8a3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe68f79-bf2d-4d7f-8bb5-f5ab7fd9e358", "sighting_of_ref": "indicator--82ae9db3-75cb-42a1-a66f-591c055145e9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a3687d-3456-462b-82e7-ce4c26140a6f", "sighting_of_ref": "indicator--b43ed0c0-44b5-44cc-908e-6e12666c4097", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd99aa5-0d38-4354-8239-91d4452683a1", "sighting_of_ref": "indicator--e35ada11-fac1-4556-a0dc-8f1a64f687e9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a14840-7fb7-47d6-8f44-b9baf2cda979", "sighting_of_ref": "indicator--3668ae31-f146-497e-8f14-db114335f4b4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb7aa32-4f14-4150-ab50-10dfe5f5a2a4", "sighting_of_ref": "indicator--c57617d7-1bab-43bc-b77a-bbe9ec7e1219", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dacb990-7380-44f7-a7f8-5d0f4dca604a", "sighting_of_ref": "indicator--3271e2d9-2a7d-4c60-a5fe-914166dff5a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--209ef458-9aa5-4ba7-bdc2-48c8db844ef5", "sighting_of_ref": "indicator--dd3385b2-cd21-493b-a83d-50e8adaa9e1e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67196e13-80d7-42e0-a0ef-8aa9b98b9d1c", "sighting_of_ref": "indicator--dd3385b2-cd21-493b-a83d-50e8adaa9e1e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fb9f4a-8ce5-4c21-b020-5e3a3d8b7435", "sighting_of_ref": "indicator--62ce0d2d-9f43-470c-bf64-66bc96b1c959", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a89e80-6e50-4d28-bc53-71c7e6b2ad81", "sighting_of_ref": "indicator--9717077b-c927-4e12-b8a1-e7451d75061a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58e95c2-ec65-46f7-a88b-0548731cea81", "sighting_of_ref": "indicator--6ecb27b6-143e-4018-99c7-716bfb5fa016", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b08d97-6bad-4491-875f-2743202d94c3", "sighting_of_ref": "indicator--6ecb27b6-143e-4018-99c7-716bfb5fa016", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc4a690-0d91-4bc6-a911-dd2e9ef433a5", "sighting_of_ref": "indicator--df2fc745-c808-4672-a9fd-115e5a21d2be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e40a43cc-b0dc-4e1a-a34c-791925c583f2", "sighting_of_ref": "indicator--dcfa3dcb-772e-4693-8ca9-f16e11840b68", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f259b0-da86-4240-b370-54d0106e47fc", "sighting_of_ref": "indicator--e230daf4-54c2-409d-aed3-ac5ab8b8ca96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c002b72c-ce2e-4540-94f2-612c5e475643", "sighting_of_ref": "indicator--5c307fb7-1dee-4b1c-9852-2c03d5e23b1c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51a6ca7-a828-4e27-8cbf-10bb813c9806", "sighting_of_ref": "indicator--7469028d-e7a6-4a3e-9161-56f4f1410c30", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7904dd-01d8-4ba6-ac0e-36e5ce13ff8f", "sighting_of_ref": "indicator--d80b98bb-c050-44d5-a9c8-2bf1fd8e9501", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76f5ea0-a499-44c9-b0f7-c89def7e3cfd", "sighting_of_ref": "indicator--19159a62-6fb7-44e9-9b34-a6da20620238", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a80c968-d3a2-4918-b470-03a5be03d670", "sighting_of_ref": "indicator--60baff2f-6221-421b-a7e7-d328ce76a8db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edba12e0-68e3-4059-ae11-05fcdf13a580", "sighting_of_ref": "indicator--613802e0-83e2-444b-a043-b581a451b7e0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac0be35-5d6f-4529-99c9-63a8ad0ed7ad", "sighting_of_ref": "indicator--fe18264a-1459-4e64-ad59-7be153183271", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c78bccd-580d-40ab-b568-2f95eb71a6fc", "sighting_of_ref": "indicator--32227b21-a119-441a-8ddd-f949188c6d0b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3742e8c-889d-4e4c-bbc7-2139c4010f8f", "sighting_of_ref": "indicator--658c0708-63af-4360-b8e9-fce0af247c19", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fde262b-9382-44d7-bd66-f466657e2e48", "sighting_of_ref": "indicator--6a35b09b-33d8-4d35-a9ec-ee2ef03dfb37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561a043c-68ce-470d-8855-f82dd57248c1", "sighting_of_ref": "indicator--6a35b09b-33d8-4d35-a9ec-ee2ef03dfb37", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2bc488d-86d2-4da6-a5da-bf5a07c4c43e", "sighting_of_ref": "indicator--e5032d64-fd1b-4211-bb32-04975e832455", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e57c02d0-5c8c-443d-8b14-0eccb2879b52", "sighting_of_ref": "indicator--948a957a-553a-4a94-8f60-2baff514122d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32daa2e4-437f-4418-bc4b-0d4cd1669fb1", "sighting_of_ref": "indicator--6046d750-11fc-46b1-9c21-43c7d1632062", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8927b081-5645-408f-84aa-7e06c4fb27eb", "sighting_of_ref": "indicator--6046d750-11fc-46b1-9c21-43c7d1632062", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9135a409-0593-427a-9c85-ffc8751a09b5", "sighting_of_ref": "indicator--fcec2765-c9b9-4f6d-aafa-91f57bd7a2a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c83d5b-057b-4536-80dc-93df038c4180", "sighting_of_ref": "indicator--1698f7d0-31bf-417e-8b99-199e8d763003", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18d95f09-c778-4dcb-bfee-da0092ef108e", "sighting_of_ref": "indicator--ca914489-2c9c-4123-a664-cf08f4cdc88f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63b12152-395e-4d2b-b31b-c6ef292b95e6", "sighting_of_ref": "indicator--ca914489-2c9c-4123-a664-cf08f4cdc88f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb56a02-ed63-499e-abb2-a9ca1048a22a", "sighting_of_ref": "indicator--788f8b8b-eae1-464d-abf9-0687d2c245a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c8f2923-670d-4f9d-b1b0-a0cddcb85f7d", "sighting_of_ref": "indicator--82ec9fba-6995-410c-9c53-b8dbf3c284e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ab9e42-16ce-4973-8b1b-205f39abd990", "sighting_of_ref": "indicator--82ec9fba-6995-410c-9c53-b8dbf3c284e3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a789469-ded6-4d4b-9ef1-462f8d2862a7", "sighting_of_ref": "indicator--7a5ba878-fe2b-4f75-8d00-abbf1e23fc7a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5cb1080-ce19-4183-89e0-267c30e1f600", "sighting_of_ref": "indicator--f7adc4e0-75b9-444b-83cd-4c2692a71306", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6de0de0-2af8-4843-982c-8f7bfefe1bdc", "sighting_of_ref": "indicator--1d8076a9-c03e-4cd9-8fd4-05d8105d0537", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b78b9b3f-affc-44b8-9c15-0d0672f200da", "sighting_of_ref": "indicator--1d8076a9-c03e-4cd9-8fd4-05d8105d0537", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32d593fb-4eea-4fad-86e7-5ff0087e3b50", "sighting_of_ref": "indicator--175513ea-5bf1-4447-9f4b-0a3dd05cd3d6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d56a128-1b31-4ce0-8d74-eaee37795169", "sighting_of_ref": "indicator--e8480aa9-b28a-4c7e-a6bc-d77da22b4821", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb0b3f3-908b-478d-af27-23083380dd37", "sighting_of_ref": "indicator--3c2fa5f0-5bee-4ea8-9935-4b898ceb9214", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11dd04a3-a675-4373-8c10-c53f36655bd8", "sighting_of_ref": "indicator--d0499a1a-c135-4f98-8d69-316839933271", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ff717a9-f6f5-4c79-9b06-8a6ea12e96c7", "sighting_of_ref": "indicator--b7b51224-e0ed-4c00-9feb-0ef1dd2cd995", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158e40ab-1572-4190-8b0c-5317f7b4c8bf", "sighting_of_ref": "indicator--8a37595b-880b-4a1a-865f-5d5418ac6c3d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6180965-60e0-4242-9d3b-005b30b74f9b", "sighting_of_ref": "indicator--8a37595b-880b-4a1a-865f-5d5418ac6c3d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d5236b-fb22-4f78-a629-27e6a38be43f", "sighting_of_ref": "indicator--b2f71d7c-06d3-4e89-b93a-95192193f1c1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e0e583-9214-496d-9282-c9ffe684df5f", "sighting_of_ref": "indicator--7e36318b-b844-4a84-b55d-8cc2777e98bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a4d460-e70d-43e7-a497-b143a96de774", "sighting_of_ref": "indicator--d7c394bd-7e4c-4e22-b110-b95683b9f6cb", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7efbf12-b1df-4e10-abe5-158efe9f37bd", "sighting_of_ref": "indicator--e75d08e4-3630-4ad4-af99-d283e27d44d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed03a23-a3b9-49d9-afb9-1c22efb34194", "sighting_of_ref": "indicator--5223b6a5-7788-4d8b-9854-055d25a13ec5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bac534-a5ae-46c0-8f19-052d5f17c934", "sighting_of_ref": "indicator--da808470-6889-4d30-9904-012c0fe237dc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49adb487-f158-4bfa-8adb-4d0aabe94863", "sighting_of_ref": "indicator--98bf7664-4f73-41d4-b983-a065b9b6e5b1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f4a08e3-3396-4ebd-9c73-031ae5321a36", "sighting_of_ref": "indicator--1ac18dde-4e46-4747-b38d-a4f1ea4dbca1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be80313-7be2-472d-9d7a-98a9f7ee2015", "sighting_of_ref": "indicator--938305f0-a33a-4e85-ad43-7760d4ea0785", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc47e66-d326-451c-ab17-92a9edcd68df", "sighting_of_ref": "indicator--94b3c001-638a-4601-b8e2-2fdcbf861360", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f76f4b40-6fee-49bf-a1d2-f8e6a57a0833", "sighting_of_ref": "indicator--2a65c278-eff6-43bb-9304-6d8588cf2ae8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417daed8-f7a1-49a3-ace0-06ff90d0b1ca", "sighting_of_ref": "indicator--41d75edf-67b7-4b45-8997-7ba4a7126457", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f16e540f-443c-4417-88a8-6486eba14e02", "sighting_of_ref": "indicator--ffceabdf-5e54-4373-96e7-2c80e33e9744", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0ea80b-5e8c-4a89-bd59-dc9d47015565", "sighting_of_ref": "indicator--616057c5-c90a-4489-9ad7-fdb98abd4714", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e1c3e6-635a-4ff7-b094-005a9bde6f1a", "sighting_of_ref": "indicator--616057c5-c90a-4489-9ad7-fdb98abd4714", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cacacd-131e-43d2-8725-7a87008a99a1", "sighting_of_ref": "indicator--3e9b0b9d-fa7c-46dc-b66d-389ba19c97eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d48ce5c-6c8c-4a69-bf51-192a068e83cb", "sighting_of_ref": "indicator--9b98a397-906d-407a-9b8c-e2b52d2e9f35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95d0d93-73ab-4cc8-a3ff-49b1b60271e8", "sighting_of_ref": "indicator--a7fc4bfd-d259-4ab8-8e06-6ccb5af556ef", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8e310e2-5153-42d5-8536-9ea1694eb85d", "sighting_of_ref": "indicator--09f7ee4b-692e-46f0-b003-0d4f61bb456c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40ed870b-4ab4-4086-95dc-429a284dcae3", "sighting_of_ref": "indicator--e07eb3dc-529e-40ba-be94-e553f4282e4c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3b404c-ea27-47a0-b453-5cb44e5fe49a", "sighting_of_ref": "indicator--97dde666-f7cf-4064-8a5d-946938a045d4", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5900fd44-586a-43ea-9b10-f70e8a6094b5", "sighting_of_ref": "indicator--afdbff93-0d20-4d35-855a-0aa99db56dc9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a78d1a-f846-4fed-802e-83d3fe20b95e", "sighting_of_ref": "indicator--f8c95844-403b-4e36-890d-9d57b46f59d4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ce92afd-d729-44e0-a0ad-314427c3011d", "sighting_of_ref": "indicator--b717d560-5310-4f42-865a-635ed8dbb2cc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9db4f0-b830-4206-baa0-37110e90eae3", "sighting_of_ref": "indicator--4f36c87b-77f1-42fc-8ab2-d329d82298c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7bf550-522b-48f7-9dc6-091c899fcba1", "sighting_of_ref": "indicator--4f36c87b-77f1-42fc-8ab2-d329d82298c8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f725a3e3-dfcb-4433-ad80-f8d7b6c9e4e5", "sighting_of_ref": "indicator--0c58e768-b16c-4642-8ee6-0d3e17ad6335", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee767dc-b13f-43db-af3a-3595e9b13da3", "sighting_of_ref": "indicator--57b5d96d-810f-41e4-ab8f-c045344c534b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7412c2a-1876-4914-8aff-0ad54ff518e4", "sighting_of_ref": "indicator--6ff36fde-afd9-4b74-aaff-557e2c4d6654", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440f2935-725b-4be9-929b-0883314c5277", "sighting_of_ref": "indicator--e7d66b67-bb3d-4378-ad6b-0beb0aa581a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7ce388-f7b7-48ad-9fdc-e029b2f51c47", "sighting_of_ref": "indicator--226d8797-d5ff-4e99-b829-404b7f30a0e8", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233e3b53-6152-4590-9026-f7d291074680", "sighting_of_ref": "indicator--8b488c60-ba1c-46c9-91df-2e083995f978", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7090eab1-f803-456b-b9db-18fb388c71dc", "sighting_of_ref": "indicator--ba5b65c8-58fc-47cb-83f1-8fadbdc1917e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b2451a-e017-41bc-9fa0-8fd29d35a377", "sighting_of_ref": "indicator--98aea9e4-0faa-413c-ac26-de15357babcb", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5949fba3-22bb-4097-a73b-51b092fa707e", "sighting_of_ref": "indicator--b7cf191a-f5ad-4b2d-adf8-423258059c42", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b278bf38-4080-4523-98ab-60f695b50232", "sighting_of_ref": "indicator--45fc2bf2-3025-4d1b-8707-f4635dffe776", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ba2d966-59db-4b6a-9657-37cd4d67dbc9", "sighting_of_ref": "indicator--3bd2ce5d-6a47-4f41-bbf6-52ef54cffc6e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bfd6a2b-33a9-456d-b2c3-8b0e06b7a2ba", "sighting_of_ref": "indicator--8734877e-8883-41e8-a750-bf1eee04b1cf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b701cae-54ab-48b6-b23e-868e726a34d1", "sighting_of_ref": "indicator--7d135e09-326c-4fc2-917b-07e35c5b6c15", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5c9e62-a0a4-4339-b846-57c428b3669d", "sighting_of_ref": "indicator--d4857e1d-7c20-474e-8233-66de9db47a4c", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd70205c-c79b-46b6-b56d-2a0e72a3b31b", "sighting_of_ref": "indicator--ff036a8d-d56c-4ea5-b035-9c516a6164b8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9a4299-c238-47e1-b05c-fe4ed342fc06", "sighting_of_ref": "indicator--295f7094-a12c-4489-8063-020d6c13a9b3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--968bfe4e-18f5-416f-a191-5153e7221857", "sighting_of_ref": "indicator--cb47e1ee-865e-4570-9ebc-9bbddce3e0d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae96840c-2b5c-43a4-8f1d-a090a6fb38de", "sighting_of_ref": "indicator--f3812bc1-859e-4e5d-8c8b-b2cdfea37569", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53513bfa-6b1b-401b-b29c-e83548089353", "sighting_of_ref": "indicator--7a26877f-cf71-414f-a6cf-66e07ee3aac3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404e764f-100e-4869-b4e2-df22914792e6", "sighting_of_ref": "indicator--e1a93642-0428-42bf-a9ae-d3b33dd91176", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6549776-6ef4-48e6-a9f4-09f20c138703", "sighting_of_ref": "indicator--a8cb954c-5bee-4dc4-b993-0a1ef554290b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9e99aa-72d7-4244-8c89-d52af38339ff", "sighting_of_ref": "indicator--bb20c7d2-689a-445c-a427-fbf7123450f5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b173e542-6a32-4062-9580-44f37e0bb3a4", "sighting_of_ref": "indicator--1373aabc-cbdf-48dd-9288-649a230974fa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7927cb4a-521d-4502-a189-ea01135e573c", "sighting_of_ref": "indicator--e488ebc3-8bca-4a15-9b6f-e781dd99231f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5040c51c-3bdc-4d2e-921f-75b7f2602490", "sighting_of_ref": "indicator--ceac59a2-dac1-44d9-8796-cac339dd2084", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796c608a-ec09-4290-aa8c-480671d8679a", "sighting_of_ref": "indicator--e622ea62-9dec-4087-a011-449b6d9c7f73", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50b250b-944b-460a-a8dc-d63d880feaaa", "sighting_of_ref": "indicator--e622ea62-9dec-4087-a011-449b6d9c7f73", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700ee0cf-2724-4a74-ad9a-d4b7e4ece811", "sighting_of_ref": "indicator--d74db0e7-3de9-4748-a7a4-2c7317e448c2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838dcda7-fcff-4db1-a683-4c4351f66ed7", "sighting_of_ref": "indicator--ec9e81a5-30e3-4b0f-8461-39d6578f1c18", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a64941c-d7a6-4dd6-83a1-5535b773b06e", "sighting_of_ref": "indicator--fbd12681-6e81-4d10-8f40-43ec14a3ec20", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e86cdf3-c025-4224-8c4a-2b4e60673036", "sighting_of_ref": "indicator--64c6d050-6294-47b5-aaef-6d6e6ce70b0c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8987dc-090e-4728-af70-6e5e60dae0ad", "sighting_of_ref": "indicator--9164a6a7-8303-44ed-a358-b99ec5d9f270", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ff8c5b-3988-485e-871e-dfda941556df", "sighting_of_ref": "indicator--5af6b6c4-0c88-44e9-ba9b-7fc0cc1a8b12", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a6c85e-463e-4425-9b16-22a02c378c38", "sighting_of_ref": "indicator--c38ce369-698f-4652-8827-578898c79a31", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1e5f151-12e6-428e-88f0-5d03dcadfe8c", "sighting_of_ref": "indicator--c38ce369-698f-4652-8827-578898c79a31", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca96ac3-d38d-489f-af22-10fd585c15f5", "sighting_of_ref": "indicator--80d2d549-d656-4ac5-af9b-7d3ca6795518", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9be8fdc-b3f0-40a9-a135-9af1e9414c2e", "sighting_of_ref": "indicator--a88f15e4-9f93-4cbf-a4dd-d23a3a8821aa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44fa08a-30e8-430c-b83c-0b5f39b404b0", "sighting_of_ref": "indicator--325a8d23-a3f4-4b19-91a9-916ef04cdf55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48091434-62c4-4c0e-bcd6-1767160d8049", "sighting_of_ref": "indicator--e570157c-cb93-45ad-8d7e-5d13f6d51130", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9556a876-19de-49ae-acd8-89e27fbe0c9b", "sighting_of_ref": "indicator--4a08a538-e3e7-489e-b493-c76f6d07f4a0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363a53ad-b39a-4fde-a5c5-5af27749cb2c", "sighting_of_ref": "indicator--d04d042a-e808-4d7d-9310-db20387f675e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4fdc4c-57bd-4e70-9c72-7b3a767c52c1", "sighting_of_ref": "indicator--6a2232a6-00c7-4e4a-b40c-c53b88f52867", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83613fd-efc1-4e01-b602-96bde812ed92", "sighting_of_ref": "indicator--80b9d04b-3aa0-48c8-84b5-c68f67b5f097", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68cc478a-d90f-4910-b7f3-cfb8a297fe46", "sighting_of_ref": "indicator--cbc43cea-899f-4883-b738-c247b5770fb3", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02550fab-e690-4b62-bd12-60cd3da0e9f7", "sighting_of_ref": "indicator--32ef8aa7-b108-4929-bfab-93e07afa3732", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5e78f6-47a3-428a-8016-27262cb278f6", "sighting_of_ref": "indicator--6af1c2bc-f4b1-40bf-92c7-797ddbf9f42e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d338fd06-a2cd-40ce-80fe-2c68072729a6", "sighting_of_ref": "indicator--76767380-4823-482b-abde-c54c12e34705", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291eeb06-9428-4191-adae-d9b00e6344f3", "sighting_of_ref": "indicator--3153c1ea-7899-4ccf-8954-1f5f7b436d30", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d35fee-75a8-4879-903e-224e0151e4e4", "sighting_of_ref": "indicator--ba29ed63-f52f-429d-a14d-636d24bf68dc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46636b46-5482-454f-a831-14ef80b446b8", "sighting_of_ref": "indicator--ec5f0e9f-f54f-4a4f-a757-dfe51721a963", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee207a17-ebdd-4ec0-a1a4-5c8f22dcb1d8", "sighting_of_ref": "indicator--3831fd55-f5f2-40cb-b3d9-ca330a4db0fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3cf296a-4411-4faf-8135-ed874a6f9e33", "sighting_of_ref": "indicator--3831fd55-f5f2-40cb-b3d9-ca330a4db0fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fa0709-1e30-4c45-b164-65c161d116b7", "sighting_of_ref": "indicator--1d0c2c38-2634-4f60-8ac6-e8e01fbcd7bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9772fba6-756f-42c4-930c-82023d6588b1", "sighting_of_ref": "indicator--47cf93b5-dd66-43e5-b0cc-68f2d54b6567", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb680e77-6e13-4fe4-b597-a1362bf0b22f", "sighting_of_ref": "indicator--835a0ed6-0f8c-4739-b789-e89541135819", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f11d638e-0e78-4cc8-9b19-952d4161f1b8", "sighting_of_ref": "indicator--d994e81a-f589-440e-b402-e817a046031b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a20c83f-1fd0-4108-9e4d-946d916c3abf", "sighting_of_ref": "indicator--d1cf348a-3d2e-40c2-9391-a36265d5c320", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80edbd8-041f-48b6-abe5-0933bd72f7c9", "sighting_of_ref": "indicator--fc6523e8-5eeb-44cd-bbb8-7e799e955433", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7591e52-f308-4a3e-a47d-0260fdd7594d", "sighting_of_ref": "indicator--25c83078-521b-4e6d-ace5-e2bfe1c3d6fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ce0686-8d3b-4547-8efb-c422ac796c29", "sighting_of_ref": "indicator--a34760d8-767c-4122-a77b-71c94a031776", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98755503-09ad-41ed-b931-0c6278257344", "sighting_of_ref": "indicator--f093e11c-d913-43dc-a087-5cdcea8e45fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a821e0f-c634-4066-86bd-a21c697830be", "sighting_of_ref": "indicator--85e78635-e0a1-428d-a9c8-b1b42ef3ff79", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4d00e0-082f-4d5c-929b-f4aa603c986a", "sighting_of_ref": "indicator--55301d17-9d00-4394-b50e-1ed48b47f969", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021762ef-85dc-41e3-bcf7-0149f5c86371", "sighting_of_ref": "indicator--982ef83a-d3db-4d10-89e5-b1c6b0da90f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--becd9feb-3e2d-41de-8b31-a7d5d8bcba5d", "sighting_of_ref": "indicator--2e3cb490-faf8-4418-83a4-d2eb3cbfd4f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac6aa3a9-20dc-4802-85bb-32b8a46db9eb", "sighting_of_ref": "indicator--e26b503a-871f-4bc5-b338-a011f3522052", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0582ac35-6145-4371-9030-a140472733d2", "sighting_of_ref": "indicator--5abd6295-9eab-429e-bf68-eb97c4a4299b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d1d9ec-a5cf-44f6-8604-2280729ae69a", "sighting_of_ref": "indicator--0bc13667-9ebb-4ce6-a073-03c0c640ec6e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec06ebb-cde0-45a8-88b5-f56ada8c50d8", "sighting_of_ref": "indicator--8fe1e417-abf8-4088-bfc2-150e92442535", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab6fb8e-25ef-4ca1-b281-f6075bf27909", "sighting_of_ref": "indicator--2161da73-669d-40b3-9add-c601de5e8ee6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef42b74b-43a2-4e6d-a2c4-9bfc69233e7d", "sighting_of_ref": "indicator--99eb10b1-68f3-41a9-8e87-ba46344cc425", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63089911-e736-4ed9-bc60-b0b9a6ef6a4b", "sighting_of_ref": "indicator--4b3f084f-0537-4c54-9a49-8b13084ee14d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec7a051-ba5c-4aff-8a78-0bafeca91740", "sighting_of_ref": "indicator--522fad03-bd4c-4f94-bc0d-7134d2259c43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45966224-409d-41ef-a83e-d8d2a99dbb34", "sighting_of_ref": "indicator--5b22bb44-c15a-4615-9ffd-9cba6a39c8e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda1dfc5-d113-42ed-8523-baeabc8cd5a9", "sighting_of_ref": "indicator--fe479ecc-4551-4da9-a8f9-8f8163e8fc46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df09b9a6-8a58-468d-8eee-c31ae76703c0", "sighting_of_ref": "indicator--50b397c5-0438-43d7-a3f7-1077f6891593", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2dcfc85-16c4-4cec-bf05-6617695cc0b3", "sighting_of_ref": "indicator--c0b2058e-4a45-4eb9-8ac3-f0acd4eb2769", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a02569b-c746-4ce2-9924-fcdd7747054f", "sighting_of_ref": "indicator--ff72b319-3a65-4955-9ad9-c7168fde6b62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add2d0b2-accb-4843-8f22-c1506f3eced5", "sighting_of_ref": "indicator--8954e86b-9a2e-4f90-8b5d-aa6fa48027ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6833ce2-f9c3-406e-8e59-fe4e31411214", "sighting_of_ref": "indicator--a0d81e60-19c6-48dd-81cb-49f01aad4762", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be70f0cf-979c-4b70-baed-a162d358669d", "sighting_of_ref": "indicator--da0fcc24-f9e6-4abd-9ddc-3e9e15952322", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0e624d-c529-4685-97a5-7b3faba40bd5", "sighting_of_ref": "indicator--f5d80f34-53a6-46eb-a2ca-e8e033dfd5fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29201bbc-9860-4f69-a73b-4e9ca9718437", "sighting_of_ref": "indicator--37bf2d0c-2706-4a68-b98b-4415feed8fba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9705d5a4-0398-4210-ab87-a01860cf4720", "sighting_of_ref": "indicator--92d5cc3d-f4d2-4123-a751-bf4deef05b35", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9595b5f8-1d3b-4acc-b9e1-f25475c3a066", "sighting_of_ref": "indicator--ea878adb-c1ef-41da-bedc-8ad5e8f8b3ff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e483c8a-287c-477e-bee4-24de7b8d31c7", "sighting_of_ref": "indicator--cd14843c-cff6-4bfb-9036-2ac5ca8b6a3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5546ec2c-b497-411c-94c5-16af8a04d965", "sighting_of_ref": "indicator--e1a48ce7-bbaa-4ea6-af26-948b1df36c29", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac847f8-964d-4539-ac4a-8730a6f3e8a3", "sighting_of_ref": "indicator--d0d17692-3925-4bd5-98cf-8c8a38e04631", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6753a450-9100-4964-90e8-7326ed5c3cb0", "sighting_of_ref": "indicator--6cd0ff45-622c-45ec-846c-30229ef59593", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59918826-8754-4ac4-8ef1-b9f5154a396a", "sighting_of_ref": "indicator--6f35acbc-bf70-48d7-932e-1b72521979f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--529f649e-43b3-46be-bb5f-fc3ac1936839", "sighting_of_ref": "indicator--d82a4385-70a5-43c9-8ffc-4385b184d78b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32377c63-f458-406e-b670-29b813a53570", "sighting_of_ref": "indicator--084e5e84-8f8f-4fec-9c85-6c648e280abc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1faaeb66-77b2-4eda-b0a7-50476cfc89bf", "sighting_of_ref": "indicator--02abaf37-7d83-488e-9eb5-a88c15608a50", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1f2463-8c48-445e-8d9a-784a5c0a3091", "sighting_of_ref": "indicator--a94d775d-edf7-4311-9426-742b2b505f7b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f63e99b-f837-4b5b-a99c-cd5b4d90be4d", "sighting_of_ref": "indicator--e0e081d2-940a-421e-9513-4e3c2c2ad06f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a074fc-ffc1-42f1-b0a1-6b5012a690ec", "sighting_of_ref": "indicator--ad92b7b7-6f89-49d3-9701-687a77766a7e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e277306-5c6b-43ef-8dee-1397bfddcaa5", "sighting_of_ref": "indicator--0188f8c0-3238-4f52-80a7-6ae48fb9f4d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b58da4e-b8b7-4953-a8ee-e208cb13b452", "sighting_of_ref": "indicator--f30047cc-cde2-4918-b564-d86063a20a6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--404c4584-15ab-4c3a-88ab-4327800a8342", "sighting_of_ref": "indicator--6edf49ed-161f-40c2-b4b3-3c5951dfd9f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c6a379e-88fb-479a-9a8e-11c8367f3bcd", "sighting_of_ref": "indicator--c2eb717c-2a2a-4651-9bb3-e40c6c50bc15", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f518477-9467-4048-9d0a-a94af8fe0534", "sighting_of_ref": "indicator--2e4cc7cc-2ef7-4e6b-bd62-57b77e036508", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3907f98b-e2df-4f16-ae46-845e83e57b37", "sighting_of_ref": "indicator--b3b4caa4-a42a-4947-9649-01854876cdfd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d3de49-be81-4238-983d-c280dbd387a1", "sighting_of_ref": "indicator--20a95a3d-00bc-4bb1-adb2-d15e3b402d5c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b132e424-043e-45f8-a7fb-47eb4a7614c1", "sighting_of_ref": "indicator--d996785f-2f3d-42eb-a5c4-924e86a6a608", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb22ce98-2392-4922-95d0-747e11db6bff", "sighting_of_ref": "indicator--4d8fe543-059d-4617-9a4d-92d7c59b7294", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7a6ddb-8326-4432-a04a-32a954b9eaad", "sighting_of_ref": "indicator--84d92aa2-9fea-4909-ab82-dba4c19e1272", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53ebe8b-bf4f-4f0d-8e11-dcd05a6999e0", "sighting_of_ref": "indicator--e801d6c3-f7cd-4270-91db-ec897322fe04", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b8fc7b-f4f9-44b4-a0be-5071200c6eef", "sighting_of_ref": "indicator--6de642ed-164b-41e7-8a14-d1ae9500c192", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33dc057c-edb9-464d-82a1-924150e92e99", "sighting_of_ref": "indicator--db625ab1-2b62-463c-b542-b241f3325af4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930f57ae-d713-443b-865d-a872fbeef3c2", "sighting_of_ref": "indicator--53b30eaf-2a56-42a3-9393-d52018aa707a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4513dc-02be-4261-bd22-bc70e308678d", "sighting_of_ref": "indicator--a3f9e2a8-36f0-496a-aaf2-5b534f6da25e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8002ac90-c83a-42ff-81b5-f9dd54d33eba", "sighting_of_ref": "indicator--edf90f4e-7f7f-48c7-a232-30e4d8e66f59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72dbc927-19f2-4bff-85f7-993bf60f8470", "sighting_of_ref": "indicator--7b8226c4-f85a-43d6-8d57-a2965f532592", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d92f6f-b28c-4361-b9f1-cbc89ea6b32d", "sighting_of_ref": "indicator--30fa0498-b76f-44b2-b77e-afa9b6fd7a24", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--818be309-e0d6-4153-a2a3-acd7894a04ec", "sighting_of_ref": "indicator--3817fe77-7551-4d92-855f-a6ae4b906dc2", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4549b3db-36e0-4fc7-866b-19a63dfd0a6f", "sighting_of_ref": "indicator--5d4e379e-88ab-4381-b20e-179a16073330", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--543b5e1e-04d0-4d9e-ace0-8d8e9e54452b", "sighting_of_ref": "indicator--98c7c76f-5aaf-48fe-93e9-a3089a879de5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a879e44d-b904-40d1-a4e4-8ff882a1551a", "sighting_of_ref": "indicator--2191337c-0c2b-434f-9c0c-a03d3790e04a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58a456c-4c97-41ff-8af7-4239941ef9c0", "sighting_of_ref": "indicator--54fc1db6-c548-488c-805b-14c7f9a03fbb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed05479f-b312-4802-bb2c-552a14b1caed", "sighting_of_ref": "indicator--8a66b7f1-3f94-46f4-97dd-c9425a921ca1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a9ebdc9-8678-4635-aa15-e723338a5769", "sighting_of_ref": "indicator--0bb42fb2-132d-4ff0-be72-88e2800197f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd7af04-f384-4c98-8919-89773f356138", "sighting_of_ref": "indicator--3091493c-fc21-4718-bc5b-a211a5c7c096", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b685000-748d-4ac8-94df-eeb6b7cd584d", "sighting_of_ref": "indicator--1bce51d3-706f-426f-a01c-5f48e1d09b7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f587d440-e969-4b50-9878-75fe8bc65452", "sighting_of_ref": "indicator--0728e707-7cd9-41c1-951a-32fa919ec699", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127abc88-fcf7-4839-9047-b5b554573d70", "sighting_of_ref": "indicator--5f0715e8-5fe1-42c2-b905-af89926172b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec42724-c305-4540-871e-cb77f5f472b4", "sighting_of_ref": "indicator--3ef2e8aa-c747-4fd1-b374-d7454059c745", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb9dec7-4025-4bc4-9767-d65955e56f24", "sighting_of_ref": "indicator--637ad435-8be1-41a9-8cd7-e617560420dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c2cabdb-60f4-439e-a12e-999fab6bc1d9", "sighting_of_ref": "indicator--912d66eb-efc1-473f-8a68-c560b760ee27", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2b2f46-c826-4040-bbc9-cd3a98016136", "sighting_of_ref": "indicator--70d73df1-5d2b-4579-9566-8b9e759cfc33", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a09ca8d-e6af-4d5d-8349-425081fd6052", "sighting_of_ref": "indicator--14a8b1cf-3924-4268-9acf-be1323ed3242", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff3616f-8949-4937-a2a9-727cb37f5d16", "sighting_of_ref": "indicator--da8ed37a-f504-49e6-b4c7-2bca9dd97546", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf7374a-738e-44d0-8ca4-7eed29cd42f6", "sighting_of_ref": "indicator--0b5c5419-696e-4a31-bb8c-62c64530ff0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c002bbfa-389b-4790-83e7-35f16cc41fc0", "sighting_of_ref": "indicator--504af974-42fc-47ec-a46b-19db4e8940bc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d0d6867-b475-4612-9bc7-f7e36aa28e30", "sighting_of_ref": "indicator--0e095ffa-c9cb-4ce7-8647-0b9db10abf1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48fe132c-4714-43c4-81b6-45c673c55430", "sighting_of_ref": "indicator--422167bb-021e-4af1-a9f7-00bd3fe8dce5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b413ab-f77d-4cba-8dd5-cf3c57489f75", "sighting_of_ref": "indicator--73178258-e003-452d-a19e-ed9b5ac108bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1723ad70-4390-442f-b738-46b4b579b80e", "sighting_of_ref": "indicator--3d0a3fe1-b2d5-4f52-be3c-ed951eb1ceaa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f94e9f-0ab0-4b77-8540-d1255387afb2", "sighting_of_ref": "indicator--5dc9faca-a269-4944-9433-bcaaeb7d110c", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2c3a14-70d2-4c35-9a04-7d705b6e58d6", "sighting_of_ref": "indicator--c0807527-b4cf-4062-81c9-070e753f097d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d17488-49d5-4003-bf61-a188cbaf66df", "sighting_of_ref": "indicator--65763362-227e-48b3-b844-106eb424dd71", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0a5c72-4b7f-4157-93eb-4e023b612f37", "sighting_of_ref": "indicator--110c3ace-a3da-4d8d-8137-9c329e7c69ee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803bd5c9-d19f-463f-b16b-7c08661ddbd2", "sighting_of_ref": "indicator--53092e6f-a49b-41d7-a362-2624455552f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034fb2b8-2aa9-438d-be21-de9c4ff6ee93", "sighting_of_ref": "indicator--a6ba3863-4a3c-45df-8789-0c1147a58972", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2810cefe-3deb-44f7-b636-ef481bb8245b", "sighting_of_ref": "indicator--7c332a95-5b1d-463a-925d-c6ab3e064ec6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bdb0d3-99a0-46d8-ae27-025fd388538f", "sighting_of_ref": "indicator--b99b9dae-5dd1-4808-8311-99a665758a4a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50729db-17b6-4f75-bb01-44cb1ecddc9f", "sighting_of_ref": "indicator--17e332de-3707-4ba1-9190-b62aa14f9c3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e020d3a-682f-4766-9dce-b220ca91e6e3", "sighting_of_ref": "indicator--0ff3eab9-2495-4f12-9861-40508604b276", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d7e763-033a-449e-8235-ca442be1a1a6", "sighting_of_ref": "indicator--87f873cd-f9ca-476c-be55-7b99937beede", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e17f7b2-b2f3-43f3-b82b-cef7fa9497b8", "sighting_of_ref": "indicator--ff12d8db-7d93-4e05-86e4-cc3078afc4f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38042073-6ba5-4905-8423-a12b3e8daeb0", "sighting_of_ref": "indicator--d722600c-6528-4b84-ac98-0aaccbaeef17", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3106752f-4562-4b77-98c1-74c2b270f09b", "sighting_of_ref": "indicator--c779d8ab-a419-488d-a251-9a390dac9516", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aacd243c-bce8-473b-919b-90bbdccec252", "sighting_of_ref": "indicator--b3dd8f62-bdda-4a08-a8de-85435b27890f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23c4e7cb-c752-4687-8ab8-122435d55b2b", "sighting_of_ref": "indicator--bab79afe-502b-442d-8ce5-5938b48acf28", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a57619f-ea2a-40bd-8c4c-daedb235be43", "sighting_of_ref": "indicator--915fad72-c93b-4ed0-93f7-d61806f1d799", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e0f4ba-fcaf-4fd9-89d5-3f5e1ed8af20", "sighting_of_ref": "indicator--93f9639d-a2cf-4556-9088-0f845ac6e1be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcce4daa-9d1d-4fa8-993e-384a1be19624", "sighting_of_ref": "indicator--44591985-c2c1-4dd0-8470-de69f0a1aee3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629196f3-c763-44f5-b533-9dd34492803a", "sighting_of_ref": "indicator--0aa82454-5537-4845-8fdf-3c27f890d017", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c052072-a63b-40a1-ad2d-9a493f7e7fb2", "sighting_of_ref": "indicator--0f42facf-ccfe-468d-9ae5-32ae96ea88e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b040400b-f6a0-470c-8480-0c97dfb08286", "sighting_of_ref": "indicator--7ee1a9c1-49e8-4d17-a137-ec43d56d14d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54184da5-b922-4cc3-b920-76ea8d7b0dea", "sighting_of_ref": "indicator--54617166-aa7b-48c6-850b-f8174e9d2d4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd29f16a-1109-4e4d-9e71-daacc1a3183e", "sighting_of_ref": "indicator--54617166-aa7b-48c6-850b-f8174e9d2d4f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fd6ae5-fa21-4cfc-af33-7a3a9fd40e4f", "sighting_of_ref": "indicator--240ce53a-8492-43cd-b23e-86d9f4d0425e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde8d387-44bd-4dad-bf31-aaad150d63f4", "sighting_of_ref": "indicator--53960dbb-cdf9-4181-afe6-6a3210df8a19", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a72256-d240-4f59-a365-689d515c1f51", "sighting_of_ref": "indicator--53960dbb-cdf9-4181-afe6-6a3210df8a19", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e94b57-dac3-415a-9611-ebe7ac1f5a71", "sighting_of_ref": "indicator--a25eccdd-e9b4-428d-b96a-8c693d90bd64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e15586-0fde-404c-9ccb-25b888cb3602", "sighting_of_ref": "indicator--49cf720e-9119-4778-bab2-d337358cba4d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5142f247-acde-4dad-8efe-6f72ee9f6ba1", "sighting_of_ref": "indicator--943682c8-2243-46b6-bfb5-72ea77403563", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b292562-8004-4035-b438-025f7863a0c8", "sighting_of_ref": "indicator--402acf97-26a6-44cb-9330-02ea7e7db80c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dacf212-e87e-4e01-a7c5-d3d9d6f3897e", "sighting_of_ref": "indicator--9ccf16f0-015d-470e-b640-2fa1c872c5e6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223458ff-36c1-4656-bde8-87e5d8b68a6f", "sighting_of_ref": "indicator--bc36f7b5-698c-4977-b41d-c2ff22c0634a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c674071-0aae-4ecb-8504-cfabcf027951", "sighting_of_ref": "indicator--0ce1d5c2-6d0d-4906-b712-4ab5c5c804ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e769c07c-28e3-45c4-91ad-89a4efa19a29", "sighting_of_ref": "indicator--faec0a0d-77fe-4075-9d2a-80184a2d6a70", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44c817a7-4bd1-4077-825a-a174892d03a3", "sighting_of_ref": "indicator--b19e3a89-7e87-4838-b25d-053ff2ab2ae8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3bff81-60b8-4f2d-b573-ab1413244a13", "sighting_of_ref": "indicator--195a7d8a-d124-4dc5-9536-0121606403a1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bec8251-b626-47eb-9b66-0154634bcd8f", "sighting_of_ref": "indicator--cc3aa35e-3d93-4dfe-8da1-883b5de552c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f057e96-e7cd-43df-a01a-16c546af6229", "sighting_of_ref": "indicator--587b6026-caff-43bb-a5e6-5d4bd9c98fe7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1691609-a448-41e6-bc7c-b0ba859e61f8", "sighting_of_ref": "indicator--ecd0a917-dd52-4a2e-812f-599699c1bc44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d11b59-b26b-4e5d-a0d1-6dbd56880356", "sighting_of_ref": "indicator--eae33ec1-c22e-4add-8506-2577ef7ddec8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb899b71-0138-4474-aacb-97652e0e352f", "sighting_of_ref": "indicator--b78a2413-702f-42d5-9bd3-8e49fac9c72b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2d8233-5958-4a34-b788-58ae70dbbe2b", "sighting_of_ref": "indicator--7fbb6f45-1d64-4b6a-a46d-32b0953ece79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f312c8d0-bc54-4322-a148-65e9e042af80", "sighting_of_ref": "indicator--2a218432-e4a6-433e-a83f-d6694a2faec3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69a05e3-99b0-4c8a-a322-8e0a80efab4e", "sighting_of_ref": "indicator--653fbd9d-63e8-4dee-8639-8f6965dfd495", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ff830d-354d-42dd-9d7d-1d352838a01e", "sighting_of_ref": "indicator--91936242-715f-4b37-94e8-8db7335c076b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d051f68-8ef7-4c7e-8626-d2d903fc3a0b", "sighting_of_ref": "indicator--c174320e-18ce-42e0-b4ee-826e4a5f0e2d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d527ff95-d261-4c2c-95b2-6f0744d9c190", "sighting_of_ref": "indicator--5b2e0eaa-4d2e-492a-bed0-d77ffba6e389", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9a0b95-91f4-4968-b9e1-4c6a7876f8a7", "sighting_of_ref": "indicator--cae98d78-9bb2-4f8f-b6d1-e8c48f26fe53", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4709494d-30f5-4626-881a-0feafc7b0741", "sighting_of_ref": "indicator--07b28d88-b6d1-411d-a659-e0dff7ef6f4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11504e7-aa62-4558-b9e4-5dfddd0092a8", "sighting_of_ref": "indicator--f16e0ac8-23b4-4b97-a992-52623cbf6c0d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e694c6-ad40-49fd-b33d-b5b18aaa9bf4", "sighting_of_ref": "indicator--a16ff9b9-63e5-43bc-bda6-0418f94f9ee9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cf9b39-fd24-480f-a696-83adce50f081", "sighting_of_ref": "indicator--e4a96c18-4274-4be5-acde-78af6a0bada2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ab4825-a069-4590-9fc2-c5a63e20a193", "sighting_of_ref": "indicator--3f30fac3-42e7-4fc0-b956-dab4175ebfbb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d44fc8-e700-4423-a8f4-2ea6f39abc44", "sighting_of_ref": "indicator--66b13345-1a84-431a-83dc-070087dca238", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6b5ddb-f564-4337-8412-65e346773ab0", "sighting_of_ref": "indicator--29009ebc-f063-42fd-b044-db76ca4cacfb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86003fc8-10bc-45f4-acd7-4f02b7d01695", "sighting_of_ref": "indicator--29009ebc-f063-42fd-b044-db76ca4cacfb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce1d1c2-2773-4b85-82d0-6346d020dbb4", "sighting_of_ref": "indicator--f26cf2fd-9861-4c9f-9e26-6787e02612d5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e6006e-96be-4bc5-b5fa-1ac1ea80da33", "sighting_of_ref": "indicator--a4903c68-58aa-4757-be41-9d4346d515a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3897e85c-a090-4c76-b80f-da368c19fa1b", "sighting_of_ref": "indicator--7b794654-1728-4d2b-b789-8a2707ede9d3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e10991-971d-482a-adc7-49cbe7714422", "sighting_of_ref": "indicator--7b794654-1728-4d2b-b789-8a2707ede9d3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0758266-2c95-46d9-acee-e05687ebe9eb", "sighting_of_ref": "indicator--d6cc81ed-c904-49aa-ab09-cf510a7eb8bb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae346960-9ced-495f-81bb-c89cac51de71", "sighting_of_ref": "indicator--d6cc81ed-c904-49aa-ab09-cf510a7eb8bb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8822994-8e9e-4520-83e4-25af1d1030fc", "sighting_of_ref": "indicator--a60877a0-0051-46fa-92b0-4c4546967431", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f0b3df-5f37-417c-a122-b84fad60b3da", "sighting_of_ref": "indicator--1dbf3b8e-07fd-4281-9b06-fc05bd9b9a47", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07754e98-b689-471e-88a7-f1d7f52691bf", "sighting_of_ref": "indicator--f0989b1a-651d-4be1-a1c9-094509da1bad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb4570c-f9af-4711-86c6-7749ff657202", "sighting_of_ref": "indicator--b086ff1e-5815-46d7-af3b-64c4d557c38c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8af3ea-45be-49a6-b296-d819d5e8a6b7", "sighting_of_ref": "indicator--34d6ca8b-25ff-4fc0-a7cf-788c56d693b0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1375f4-9dd6-40f9-ba62-7721e8c87b0a", "sighting_of_ref": "indicator--49562b9f-2c05-44de-9c84-44db9844d1b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c213b864-d245-4bf6-af9c-79dc5c6a53c1", "sighting_of_ref": "indicator--2e60c3d3-e621-474b-8eb9-afcca4049290", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--872cb1c7-87d3-45fa-b744-8458020b7979", "sighting_of_ref": "indicator--2b1f1430-fc68-442e-aea1-146328df5859", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5af1b1-0939-4c0c-83f9-3fec7fead414", "sighting_of_ref": "indicator--5dfb52dc-0158-4f34-b263-5bb965505508", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c67184-7cad-4adf-abc4-a26efbfb0eff", "sighting_of_ref": "indicator--9f8c5c95-2ada-48b3-b129-85af9f3ecc33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c0dece-a8f0-4190-b29d-86bdd8340d29", "sighting_of_ref": "indicator--ad91873f-e559-454c-89b4-d545cf6ef00c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d64fd30-51f7-4fc2-b055-126b1a93dc56", "sighting_of_ref": "indicator--8c770259-65d1-4746-9f0c-a64da0e938c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b17156-bb15-4ebe-8bf1-1f40f0dc4f83", "sighting_of_ref": "indicator--87572b93-7535-46c5-a0f4-48ffe48a3e75", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f3f87b-62ba-4193-a300-7bb374001aed", "sighting_of_ref": "indicator--87572b93-7535-46c5-a0f4-48ffe48a3e75", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d4aac7-9fb6-4dc7-b76f-b4004c3ca8c3", "sighting_of_ref": "indicator--60ad8d85-b538-464f-94e7-a947f93be90d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e4dd2d-3251-4725-8224-db9c613713b3", "sighting_of_ref": "indicator--7c2fa596-dc54-4552-ae48-76cc2f643b9c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a431a00d-3036-4c08-a54a-833f808113ed", "sighting_of_ref": "indicator--de65f2d3-1660-4250-94ec-fb7d3035ac85", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8992a9e2-adfb-4e06-8669-a6c3013bf6c9", "sighting_of_ref": "indicator--ba753f5b-6004-43ee-a3c1-217f81a8c152", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30a2efd-3021-42ad-a553-8b17ad838ef1", "sighting_of_ref": "indicator--70aee0d8-685f-4b4b-b69e-d5aa48a9711e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ac9efa-bbc8-43d8-b70e-aa3928ea3ce8", "sighting_of_ref": "indicator--55a7f8cb-b4b6-4f00-a51b-c84619c66b03", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa1412c-f4c1-40da-bca6-1a1a12b55177", "sighting_of_ref": "indicator--1f18ab48-c3de-4d8e-a712-d342281955f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91aa8644-1c85-4748-9ac6-9b6aa3074b80", "sighting_of_ref": "indicator--e765dc52-1d0e-4c0c-9d98-8d45540cbcfb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f151c6e-bbd6-459d-be7f-3b9756553ccb", "sighting_of_ref": "indicator--b3ea0cb8-5a9a-47e8-a545-c63d7ad17b31", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c936912-471a-44e0-a494-fd0a39a060b0", "sighting_of_ref": "indicator--f1aab7b4-750b-4f19-a1ef-f41246d3f982", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb4b814-e5ed-4c02-94f1-c0382b856415", "sighting_of_ref": "indicator--747106ea-5fcb-4ea6-bb8c-14f74c112684", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677e8ebc-d696-41d5-8668-1cd106a87369", "sighting_of_ref": "indicator--97e292d9-1d13-4ada-98c5-d6bbdbc76ab5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04f3dfd-eb94-4244-b185-904863cf4315", "sighting_of_ref": "indicator--97e292d9-1d13-4ada-98c5-d6bbdbc76ab5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25b730f-8c3a-4653-988b-b08c9654616f", "sighting_of_ref": "indicator--7e4bcf06-40be-4d01-867d-f49f9a6556ce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a78bc64-83f8-42c1-8d4c-9bda105e09ab", "sighting_of_ref": "indicator--7e4bcf06-40be-4d01-867d-f49f9a6556ce", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--029a3d28-c6b2-4879-a8db-40d26eadbb82", "sighting_of_ref": "indicator--ab3b975e-0b2f-4ba0-a0ad-a318087057a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e448177-7edd-4efb-9b6d-4611debbb62d", "sighting_of_ref": "indicator--ab3b975e-0b2f-4ba0-a0ad-a318087057a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79f4271e-e6b1-4abd-9454-d20dbd77bca5", "sighting_of_ref": "indicator--8069136e-22c4-477d-b2a6-4dab595e9927", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394e56f2-0c5f-4475-a18e-54722c91adc4", "sighting_of_ref": "indicator--ab4f3224-84d4-49b8-a011-eb660213e477", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1adb7be7-f1cf-4d59-8256-6434b0d96104", "sighting_of_ref": "indicator--b9ba1bed-943c-45f4-9650-09e16c9d1477", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79132539-ebaf-43f5-9660-f2abdc580ec5", "sighting_of_ref": "indicator--b9ba1bed-943c-45f4-9650-09e16c9d1477", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7186c12c-8180-43aa-9122-a5d28f01fe3b", "sighting_of_ref": "indicator--1041fcde-f419-4a46-b1e1-fb045b4b62f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85292fe-11eb-452d-a69e-c7d46220b2ba", "sighting_of_ref": "indicator--1041fcde-f419-4a46-b1e1-fb045b4b62f0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165d69cb-9cca-4a67-a5d9-d43c9c02dbdb", "sighting_of_ref": "indicator--272ab16f-be54-4306-bfc8-58746bc48295", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddcae19-4bf1-48e1-81f6-409eb60223dd", "sighting_of_ref": "indicator--272ab16f-be54-4306-bfc8-58746bc48295", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d56914d-a682-4e8c-ae3f-3cbb9673f7b7", "sighting_of_ref": "indicator--e1d37c9d-5892-4459-bd55-64587c93c434", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d88b47c-8575-4250-9342-1ce03f0428de", "sighting_of_ref": "indicator--e1d37c9d-5892-4459-bd55-64587c93c434", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5460c6aa-cded-4788-940c-36a6b4a18b9c", "sighting_of_ref": "indicator--65aea1b5-6fc3-4288-bc7c-e5cc02c61138", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c6f7d5-0d52-4df0-9cc4-82d532aa7c07", "sighting_of_ref": "indicator--65aea1b5-6fc3-4288-bc7c-e5cc02c61138", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b5ffed2-feb7-47de-9a21-26c58d1a150c", "sighting_of_ref": "indicator--dfae0d8f-768b-411b-b4f9-6dee1964f950", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9ca653-1afc-4ae5-a358-e2331cb4c3ce", "sighting_of_ref": "indicator--dfae0d8f-768b-411b-b4f9-6dee1964f950", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af57cc4-4d1c-4df1-85a5-7d9a5eaf6a82", "sighting_of_ref": "indicator--bbc24834-e5ed-4b38-94ee-6a768f209f38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d89aee66-5c38-4e3f-9258-5d284c50ef91", "sighting_of_ref": "indicator--7dbe19e3-0858-4a67-acb0-4cb2b02af6ee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38430cbe-6c0b-47ea-b13f-f60fa1097656", "sighting_of_ref": "indicator--aa2ba6ad-8634-4928-984b-900c43f2b33c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f62a46-d50c-4f2e-94e1-26ecdba6cc7b", "sighting_of_ref": "indicator--aa2ba6ad-8634-4928-984b-900c43f2b33c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b628ef5f-ecff-4a5c-a7d0-1ea23b9201ad", "sighting_of_ref": "indicator--15df2721-5a64-4d1f-ac6c-7807b68ff663", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ec08133-201a-46ce-ac66-779ce8aebb44", "sighting_of_ref": "indicator--e72ce81e-c1fb-4853-bccb-8e9a2ffee5e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408e866d-381c-4b99-b685-fa81c6ce1537", "sighting_of_ref": "indicator--e72ce81e-c1fb-4853-bccb-8e9a2ffee5e8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff3ea5f8-4321-4d65-8038-83e82806f773", "sighting_of_ref": "indicator--18045c3d-8af2-403f-bc98-1c44e4904266", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98883cea-e6e2-4676-b4e9-3906225327c1", "sighting_of_ref": "indicator--18045c3d-8af2-403f-bc98-1c44e4904266", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e5e3fb-f470-4b75-b78a-ac4b009699b2", "sighting_of_ref": "indicator--17c93637-9d4d-47c8-b12c-3936ebbc608f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ae4e51-7153-454b-a578-d5a82c535256", "sighting_of_ref": "indicator--078301e8-b6e1-4030-b143-93ace86e33ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--638f1f14-8a18-419e-96a3-7601de05f01e", "sighting_of_ref": "indicator--078301e8-b6e1-4030-b143-93ace86e33ec", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2533dd0c-d387-4119-b7f1-2ec1c81eddff", "sighting_of_ref": "indicator--eaebd325-3c3f-4659-a31a-0241bb0baf13", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea20165-b709-4cb9-80c7-e0203a6ee29f", "sighting_of_ref": "indicator--09ed6fab-2b01-4972-805e-d845cfcf8c07", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b7c7cb-d9d7-4559-91c2-4a20af825fd6", "sighting_of_ref": "indicator--09ed6fab-2b01-4972-805e-d845cfcf8c07", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f1c332-2507-45bb-994e-1ab0bce4a823", "sighting_of_ref": "indicator--92399508-e4c6-44d7-8f0a-0478361b3280", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1049a303-8381-4177-af99-9b37766e1992", "sighting_of_ref": "indicator--92399508-e4c6-44d7-8f0a-0478361b3280", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5a7f57e-f453-411b-b892-647737b54344", "sighting_of_ref": "indicator--499118f4-0b8b-4f4a-a754-8631cbc13f0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67243052-ae5d-4e7c-9b19-35051551f977", "sighting_of_ref": "indicator--499118f4-0b8b-4f4a-a754-8631cbc13f0f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4639433-1ede-4e3b-b259-8186984d6929", "sighting_of_ref": "indicator--9b87c4b5-99a7-4a65-a664-6264fab6bf96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927435b8-caa1-487d-93ed-bada02c701d9", "sighting_of_ref": "indicator--e76c6107-33d9-4db3-b19c-b13f846224b3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87978145-94ca-485d-aa6c-a7e992c9081a", "sighting_of_ref": "indicator--0d09e493-4cc1-401c-bb38-044919b31b4b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--707f925f-5427-4d89-a23e-5dfa606cc70b", "sighting_of_ref": "indicator--0d09e493-4cc1-401c-bb38-044919b31b4b", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7e5d65-c0f6-4a02-9ec5-9f5096c53f7f", "sighting_of_ref": "indicator--0d09e493-4cc1-401c-bb38-044919b31b4b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4479e48-a799-43d0-934e-6248f20400f9", "sighting_of_ref": "indicator--0d09e493-4cc1-401c-bb38-044919b31b4b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5d740ac-88c9-4965-af67-2b20f19ae143", "sighting_of_ref": "indicator--0d09e493-4cc1-401c-bb38-044919b31b4b", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8843e95-4c60-43c0-ab4d-792d90e628e4", "sighting_of_ref": "indicator--e5041e29-33fb-43ec-b914-52abd92e128e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c42355-5e49-4039-a34f-9b9b48e5e1b6", "sighting_of_ref": "indicator--e5041e29-33fb-43ec-b914-52abd92e128e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9e48368-a605-4ea2-ad1d-32af0b5b1ad9", "sighting_of_ref": "indicator--635f9f56-ecac-4c34-a5d6-587e407a641b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91b059c-7f14-4a21-bedf-076c9a5019ce", "sighting_of_ref": "indicator--635f9f56-ecac-4c34-a5d6-587e407a641b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83716ad0-d522-4959-8722-52b6074ab04c", "sighting_of_ref": "indicator--635f9f56-ecac-4c34-a5d6-587e407a641b", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66beb0e-4b94-4951-8161-903d1658b856", "sighting_of_ref": "indicator--9676064f-35d4-47be-b8ab-fca8b81b83e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918c0ca1-67fb-46a6-89ee-f5e96e5b09c6", "sighting_of_ref": "indicator--9676064f-35d4-47be-b8ab-fca8b81b83e1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313de364-89ad-4d28-bcfa-eb5ec4a281a9", "sighting_of_ref": "indicator--9676064f-35d4-47be-b8ab-fca8b81b83e1", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc47f595-16a5-450b-a113-c969c9cd40a4", "sighting_of_ref": "indicator--d079df24-8e12-4991-bcf9-d7a0e2e3c178", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92819fe-aa28-40ee-8892-946408a93e79", "sighting_of_ref": "indicator--d079df24-8e12-4991-bcf9-d7a0e2e3c178", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69bd4ed7-c24e-486d-8a1a-ed83aea18083", "sighting_of_ref": "indicator--d079df24-8e12-4991-bcf9-d7a0e2e3c178", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214a712e-99d9-41a0-8398-52a3af82c95a", "sighting_of_ref": "indicator--b2851620-5d86-4067-8cc7-1af2d0431e4e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6a6c6e-0efb-46de-90fe-b08dbbae58a8", "sighting_of_ref": "indicator--b2851620-5d86-4067-8cc7-1af2d0431e4e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a976782-f2ff-431e-8d66-cd2ef669be7f", "sighting_of_ref": "indicator--b2851620-5d86-4067-8cc7-1af2d0431e4e", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a72b14-9272-47de-9128-252390fbdf80", "sighting_of_ref": "indicator--1fd5f29c-8a69-41ca-b7a1-b8c291e7dc42", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd5f7b4-83ef-4d88-b818-7e69540e825a", "sighting_of_ref": "indicator--1fd5f29c-8a69-41ca-b7a1-b8c291e7dc42", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046743af-95e6-46d9-abbf-c03500643743", "sighting_of_ref": "indicator--1fd5f29c-8a69-41ca-b7a1-b8c291e7dc42", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--974a9102-bf83-4518-ba4b-15407709e93a", "sighting_of_ref": "indicator--ddf78763-518a-4631-b1a8-6290ff615135", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8797dc8-6406-47b4-9c13-82f9be3dc6cf", "sighting_of_ref": "indicator--ddf78763-518a-4631-b1a8-6290ff615135", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48a7c68-9062-4e0a-ace1-185ceb9861be", "sighting_of_ref": "indicator--c1be84df-16d6-4868-8051-add991fc0fdd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b29a23-fc3b-4cc2-a177-d411129fdf93", "sighting_of_ref": "indicator--c1be84df-16d6-4868-8051-add991fc0fdd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4540e76b-09e4-4d65-8ebd-7a34e7751b53", "sighting_of_ref": "indicator--6b5e5702-49a1-4ebe-a211-02758633c7c1", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f63081-f87f-4e81-8dbe-1e9d3293a00f", "sighting_of_ref": "indicator--b1935300-8bf8-4ef0-bbf6-bf33fb283ca6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10b0b793-ccf6-4e62-9ed7-b7c66ab809b2", "sighting_of_ref": "indicator--921b9030-5158-47f9-a099-57efe22e669f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f1aae7-c9a5-4817-9e3d-358f00991d1c", "sighting_of_ref": "indicator--921b9030-5158-47f9-a099-57efe22e669f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2549a46-b4c6-4171-912c-2cde873e0449", "sighting_of_ref": "indicator--f4b42046-8c91-443d-8a23-6ca5b980f909", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0d2441d-d8c6-4b67-9c6b-02392fb9cc75", "sighting_of_ref": "indicator--f4411a45-223e-489f-96ff-f4c5405bdf7d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c9323a-e308-4303-9c0d-5956d03bc82a", "sighting_of_ref": "indicator--aa8232cb-72a6-4936-8257-bfe78b76406a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0ccb35-eddb-4cea-9f70-c43a023a0a9a", "sighting_of_ref": "indicator--8a0e7356-f0c6-42fb-a313-56059104eda3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9c1bf2-5b8f-4314-8eda-09258f2c6b1c", "sighting_of_ref": "indicator--8a0e7356-f0c6-42fb-a313-56059104eda3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8046c5d7-94f0-460c-b39f-c285d453d960", "sighting_of_ref": "indicator--4bfeb03a-bec4-444a-b3f6-4a851b26a976", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785339b4-6443-471f-931d-6da09c7dfd2d", "sighting_of_ref": "indicator--b66587fd-bc38-4420-a6fc-d1f07b0242c7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826090ac-1b4b-47ff-9aaa-80971887a510", "sighting_of_ref": "indicator--9ebf80bc-89ab-4a83-a3ce-f688a42f2abf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5025d7-06c8-4138-bc7f-3f959c447518", "sighting_of_ref": "indicator--186165d8-f261-4a1e-bc45-c710a21ffe53", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85395664-c4b5-4178-ab27-ec7dcf63a27c", "sighting_of_ref": "indicator--0fa985e1-3cc1-4ce9-9cd7-2f0ccbc55951", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f2ff20-d493-4470-9234-34f09302da80", "sighting_of_ref": "indicator--394e7ca5-9db3-48fc-b6c0-c99a09cfee63", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c86bd1a-1c53-40c2-b597-cd2ebf61e04d", "sighting_of_ref": "indicator--6a8a3381-f466-4932-8a2e-2ddc3446213c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e470ae2-c380-47af-8a25-df4d801cc870", "sighting_of_ref": "indicator--071b2ca6-1ec5-45e5-8690-6dae6b3dbe03", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984591cd-00a7-41b7-ab6f-8733f3cc4a6f", "sighting_of_ref": "indicator--071b2ca6-1ec5-45e5-8690-6dae6b3dbe03", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c9402d-7213-4740-8ae8-2b5e48471a7d", "sighting_of_ref": "indicator--be0518f6-2ec4-4e9a-a325-523b6e370644", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e2ed87-6e58-4623-971f-344d9c6027da", "sighting_of_ref": "indicator--be0518f6-2ec4-4e9a-a325-523b6e370644", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ddd8502-e513-4ba2-8106-9c0f32e58208", "sighting_of_ref": "indicator--a9d9b56a-3fd9-4062-b81f-d12165f8c762", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794cbea9-3008-41a7-b30b-dd37a704ae8d", "sighting_of_ref": "indicator--a9d9b56a-3fd9-4062-b81f-d12165f8c762", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91e73422-57eb-4497-bbc2-5b2e02663307", "sighting_of_ref": "indicator--3f5ba21b-2abf-4cc1-af5d-ee42d0ac17a5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c733e85-22f9-42c7-874a-953654979dde", "sighting_of_ref": "indicator--001ce1f0-871a-4579-9003-b7b4f5f83cae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d1e35a-6f00-4c66-abc3-554ec09a306f", "sighting_of_ref": "indicator--5e1c88b0-a80f-4377-bdb7-8cb3cc0fc0f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5909ae-01d1-4bfb-87bd-6af6cea5eb60", "sighting_of_ref": "indicator--5d0b7cd9-9bce-47db-9428-36ab9ec9ba5c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfbeda5f-f4b9-416e-a70a-45bbfd2781be", "sighting_of_ref": "indicator--10e9b340-3735-4205-bfa8-fd916c90aa1e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295a5217-cc11-4df8-9475-d14df2d9acbc", "sighting_of_ref": "indicator--5d52dd7b-b6e6-430d-82e0-65e9044ebd7e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb522c4-9ff1-4f27-bfed-4221bdf4309a", "sighting_of_ref": "indicator--95f44137-e3e0-46cd-9ca1-3e5de05f6231", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1055d350-c7c2-431b-817a-0a989700437d", "sighting_of_ref": "indicator--c9279d40-416a-4734-aa09-de461ef0e353", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d79b00-bc71-4f55-b743-a416208fc2f5", "sighting_of_ref": "indicator--c2472ba1-5010-40d6-b711-d6b9c960384c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bc5bc5-153d-48d0-8a5a-38ef2a93c4e5", "sighting_of_ref": "indicator--105c732c-22a9-41b7-a12c-17e288ed46a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89dc61c2-1f38-4698-97e9-b17f756c1f24", "sighting_of_ref": "indicator--ce6ff927-32f6-4f78-8e26-b3e7f91f0ea6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47d4baa-6c8b-4390-99b3-fd3ef60faa75", "sighting_of_ref": "indicator--da876631-9477-43b0-a522-c8fe3038916b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802a3fe3-3a78-4452-ad55-dc8b45403cc0", "sighting_of_ref": "indicator--d9cc7f0f-84c3-4b2e-ac51-3f9a662a3bae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668d65e7-6897-40e8-a0ba-0203adebd937", "sighting_of_ref": "indicator--c0f86c6a-a1b9-4625-bbcb-0b440574b198", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bd582e-1be1-409f-96ed-400b1ebcce69", "sighting_of_ref": "indicator--cb99a924-281d-4832-9b67-03e04f37b5b2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e680e0-a4a6-41c7-b0a8-003b4a581756", "sighting_of_ref": "indicator--d22d76b8-f1fd-4086-a7ad-bfe1bf7752e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42f2a68-a438-43ab-bde6-134f60598818", "sighting_of_ref": "indicator--d22d76b8-f1fd-4086-a7ad-bfe1bf7752e1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a52f1ebf-c932-46d2-9c54-ae470ee4058b", "sighting_of_ref": "indicator--f2e034f9-63a5-499b-80a7-c4e5b72b1dc6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08062d0f-0bd2-41fe-b155-e6ddd3b8c4c4", "sighting_of_ref": "indicator--4f2bcd07-523d-464a-b767-79058722520b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0bd7eb-539d-4556-8794-45aec8a1c6d0", "sighting_of_ref": "indicator--4f2bcd07-523d-464a-b767-79058722520b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad30a806-a7ce-462e-9950-8e4c59db2ebb", "sighting_of_ref": "indicator--794f3971-ae05-4753-be8f-57c0f99d19a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b277d51f-fc2c-45aa-bd0c-7848edd07f2d", "sighting_of_ref": "indicator--57f3ef55-9556-40d2-a593-ba4b7ff02945", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6314992-ca8b-42dd-97c4-952ef19237b5", "sighting_of_ref": "indicator--b4a782dd-3ecf-41cc-a743-4f79eb774a61", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f178f3-5671-4afb-90d2-d7759c1826b6", "sighting_of_ref": "indicator--0466fc37-fe81-47b8-812c-2e11eded9378", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ac7d57-23e2-48bd-8a05-221d7d99d9a2", "sighting_of_ref": "indicator--9e922b18-ab34-46c4-acdc-05dcadce6594", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c47a66-9d29-49e7-b4b3-bf03ff485a15", "sighting_of_ref": "indicator--915e8502-532e-457d-8bfb-73e7cb017905", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18145834-0721-4839-9022-254e0b08dd92", "sighting_of_ref": "indicator--d78c83b1-a00f-44d6-b105-96cde3212f7e", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f36eb4-04a0-43c3-858e-045cea8aa824", "sighting_of_ref": "indicator--4701a6fe-9e21-40cf-9cbb-2c989a2fa227", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf40fb4-22fd-42e5-b371-a2d90b3da240", "sighting_of_ref": "indicator--c6d121e4-794f-4f73-ae0d-78d76b2a160e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2db042e6-0ed0-480a-bb77-e98537ffc96d", "sighting_of_ref": "indicator--72c686db-dffa-48c9-9767-a596bb1284a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--456716be-89ba-4473-9692-2fef2739acf4", "sighting_of_ref": "indicator--48635f02-f1aa-4a88-a34f-e02ccf695f4a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d39b3f14-45d8-46f0-9a6b-5dcb0b93a9cb", "sighting_of_ref": "indicator--846683b8-3d5b-45b1-bfb0-d922366237dd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075041ef-beb4-4db9-af76-f7d25c4cdb4d", "sighting_of_ref": "indicator--846683b8-3d5b-45b1-bfb0-d922366237dd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26773d1-8f73-4afc-ae3b-9e91094d7e26", "sighting_of_ref": "indicator--0f1cf6ac-1f6f-4644-ab94-820c1c81b06d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--454ed94a-ad3e-4353-984f-5e6fd3887423", "sighting_of_ref": "indicator--0f1cf6ac-1f6f-4644-ab94-820c1c81b06d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e51f426-8610-4ea2-ad93-529a7c20f543", "sighting_of_ref": "indicator--69396bc1-8678-4ce8-8c1f-a26dc026a51d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78cf1b5a-12bf-457a-a447-13e427586c4c", "sighting_of_ref": "indicator--31db1320-4f51-4a60-bf04-8b254171e7f5", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2733df5e-349c-4e6d-a805-904cac33fad8", "sighting_of_ref": "indicator--bb848224-84da-4f9f-badb-70a3eb9b0868", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d402f284-57ef-4e53-9aa0-0d440b45a4ae", "sighting_of_ref": "indicator--e9e00baf-d94b-44f3-ad4c-d926de846b24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3f35d2-ef06-4568-8770-ceb6608b71c5", "sighting_of_ref": "indicator--e9e00baf-d94b-44f3-ad4c-d926de846b24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629044fa-31f0-4b9b-ad5f-0cff09a26967", "sighting_of_ref": "indicator--671129ac-6914-48a5-88ad-ec97f7c0244c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34606a0b-27cb-4e60-96ec-b3fbe568379a", "sighting_of_ref": "indicator--cbe5c006-ae17-4453-be59-d0cafcc8c821", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e5f2e1-c534-4b05-9bc5-e0c9616ceabf", "sighting_of_ref": "indicator--cbe5c006-ae17-4453-be59-d0cafcc8c821", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7bafba-a719-4aee-ae62-e48c7a5b4119", "sighting_of_ref": "indicator--8c98bb8d-12a9-4c9b-91ba-ad0498c2013c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24a01d8-337a-4129-ba94-b483563c67fe", "sighting_of_ref": "indicator--8c98bb8d-12a9-4c9b-91ba-ad0498c2013c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106817b1-e33c-4ae5-9c74-17b9025e5d5c", "sighting_of_ref": "indicator--0f019a30-dd57-4e01-85ee-bf5dc9604c95", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cad31f4a-6842-4fd2-9863-27f60f813b06", "sighting_of_ref": "indicator--ec486576-c655-4b60-b2bb-9e6d84258f05", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ddceeb-9754-4a34-b197-abde4d108530", "sighting_of_ref": "indicator--ec486576-c655-4b60-b2bb-9e6d84258f05", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfae1776-5168-4486-bb81-07718e3a3aac", "sighting_of_ref": "indicator--8e7ba4c4-e61e-4502-be19-669fd0414818", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80bd717d-f5c1-4727-857a-8a8ed75948c1", "sighting_of_ref": "indicator--8e7ba4c4-e61e-4502-be19-669fd0414818", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1271a0a2-f700-4518-9ff0-6d0fea1ee7f5", "sighting_of_ref": "indicator--55f37dbe-bab8-4349-8f03-4702d809fa4b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dec5d8b-11ec-42bf-9272-a9e68b11f6a2", "sighting_of_ref": "indicator--55f37dbe-bab8-4349-8f03-4702d809fa4b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d2d9fcb-a407-4f68-9158-d4f924423b36", "sighting_of_ref": "indicator--1bf9bfc1-9633-4651-ab77-a4e16907405c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f640c05d-dab5-44e7-9698-ab86102424b9", "sighting_of_ref": "indicator--1bf9bfc1-9633-4651-ab77-a4e16907405c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303bf521-6db1-4967-b7ab-b86ae3caf426", "sighting_of_ref": "indicator--927919e6-e371-48b0-866b-c33ec6fd2b37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81029199-c264-4c35-8670-41766c170733", "sighting_of_ref": "indicator--545f7a8e-35b4-437c-8dac-84d696261c09", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23381efd-27d6-479c-8433-0233bfec041a", "sighting_of_ref": "indicator--545f7a8e-35b4-437c-8dac-84d696261c09", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904fd6dc-b01e-48ed-8a68-5e3a72421a20", "sighting_of_ref": "indicator--b4ac8d6e-1d0b-427d-a2bb-404b67264b0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268da2d3-ae3f-46d8-98c2-c85818765f7c", "sighting_of_ref": "indicator--b4ac8d6e-1d0b-427d-a2bb-404b67264b0a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf91798-d8a5-4393-a49c-13bbc27ed16a", "sighting_of_ref": "indicator--b4ac8d6e-1d0b-427d-a2bb-404b67264b0a", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4605cb09-0a6e-4b97-888e-643538a53411", "sighting_of_ref": "indicator--9abee57f-d18e-4de6-bdaa-afa935f58b61", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a72401a-145c-4fa2-b964-7652d6fa2b66", "sighting_of_ref": "indicator--ff79f543-ee48-4b54-a66e-5e5b21c69615", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3063cf82-1038-4be9-b590-2942e7ac229e", "sighting_of_ref": "indicator--ff79f543-ee48-4b54-a66e-5e5b21c69615", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb65b844-3e9f-4e73-8c5f-4b2a3a1651a0", "sighting_of_ref": "indicator--03b9a117-c0cd-49e2-b74f-e9d2afa5e345", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65a6cd1-c01d-4c07-83ff-735f887cd802", "sighting_of_ref": "indicator--2c19dbe0-d07c-4d95-aa4d-135d62a07914", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa664a71-b228-4dc8-91a1-aa164c91a8d9", "sighting_of_ref": "indicator--2c19dbe0-d07c-4d95-aa4d-135d62a07914", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e5ebbb-7c52-45f6-b915-dab57bf833e6", "sighting_of_ref": "indicator--9959c33a-3de5-47d9-b5d1-60ef22e25671", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1571197-c669-40c4-9547-076cbf9f5a9d", "sighting_of_ref": "indicator--45c0f5a2-3091-4425-9ee7-028f1816cc6a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0e125c-9085-4eed-bc9f-0858ef05e07e", "sighting_of_ref": "indicator--45c0f5a2-3091-4425-9ee7-028f1816cc6a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42382f38-0610-4c8c-a12e-d6663e04d316", "sighting_of_ref": "indicator--78b926ae-d4a9-4a51-946d-e227e5bb41df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb73b22-e73a-4e68-a3e1-a9de56fb20f5", "sighting_of_ref": "indicator--78b926ae-d4a9-4a51-946d-e227e5bb41df", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f030629-d0a1-4b08-b4bc-b6410fa72d0f", "sighting_of_ref": "indicator--48da50c3-dea7-4152-ada1-d8e2e9255137", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16ba1d4-6df2-4cb7-9632-5676588d02d6", "sighting_of_ref": "indicator--48da50c3-dea7-4152-ada1-d8e2e9255137", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622b4bd5-b7e2-4ce0-a14d-8c23b7d9662b", "sighting_of_ref": "indicator--eb03bd20-c449-41eb-af46-b5e97e2765a5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5df866f-b960-43ad-bdfc-116f7573a693", "sighting_of_ref": "indicator--6822eb89-72e3-4cd6-9616-e9294e11cb40", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8105c08-3662-4637-aa14-7735bc913b5d", "sighting_of_ref": "indicator--ca9f8c44-8994-4727-b902-536b445c63c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d89be82-8f16-4323-a207-633c46f7647f", "sighting_of_ref": "indicator--572909ef-e212-4df6-8806-817679cfb71b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25154bde-0f1b-4b91-aea2-e931f75b7d2c", "sighting_of_ref": "indicator--e3b6f602-0337-472f-8989-6944e1c644fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b2b710-d1e0-41ba-b235-65951abd2575", "sighting_of_ref": "indicator--23c8fc3e-45f2-46ff-ba0f-321d6931efd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cbcbb81-2ca3-447e-a525-39ae0d0b6546", "sighting_of_ref": "indicator--aa0e6eaa-5561-4c7d-997a-b5f3d8fb8674", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a96cbc-f1b6-46f8-9cb5-aecdd1110ee4", "sighting_of_ref": "indicator--be958d34-3c93-4a62-8ebf-b14f57d1db4e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31d6a6a-61d7-4fa1-a113-7381664eb449", "sighting_of_ref": "indicator--be958d34-3c93-4a62-8ebf-b14f57d1db4e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a110460a-ce54-4dc3-8422-347e12ef4555", "sighting_of_ref": "indicator--277c634d-8c1a-403d-be56-0bd62cc2c789", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dff0ee4-69db-4322-b12c-2226f90eee5e", "sighting_of_ref": "indicator--277c634d-8c1a-403d-be56-0bd62cc2c789", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb45fb77-bf8a-45dd-b3ed-1996b1e77992", "sighting_of_ref": "indicator--ee1c8490-9f96-422c-8851-b7799179f08f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26ae4a3-6334-4894-835c-3e5a99be179c", "sighting_of_ref": "indicator--0e4632e5-3ab7-4d9a-b27f-d2d28b1a5832", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9e0ecf-9fbf-4549-8eac-664a1ec86ed6", "sighting_of_ref": "indicator--0e4632e5-3ab7-4d9a-b27f-d2d28b1a5832", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df674986-f972-46d2-b9d4-467cb6700fb7", "sighting_of_ref": "indicator--11c25d5b-0f7a-4222-a5f3-9326593da622", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8add2cf7-bbe3-45d5-b8d0-5fdbe0b759b2", "sighting_of_ref": "indicator--11c25d5b-0f7a-4222-a5f3-9326593da622", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5bb0bcc-23fc-4a31-8a9c-60f90bcfe3a6", "sighting_of_ref": "indicator--a0df2ddb-8543-4fd6-a4fc-57b797bb1c05", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4168b23d-e2db-462f-9a1f-765241f916f8", "sighting_of_ref": "indicator--a0df2ddb-8543-4fd6-a4fc-57b797bb1c05", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5711953d-3fb2-478e-ad3a-fbb770ba781a", "sighting_of_ref": "indicator--78e05220-904a-4713-9041-cd39dbf22ad7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7889ad1-291d-43a1-ba2b-6a19ad6a8c67", "sighting_of_ref": "indicator--78e05220-904a-4713-9041-cd39dbf22ad7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0282c9d4-ae54-4d26-ac3e-b4d33921d259", "sighting_of_ref": "indicator--e1ffeb1a-eb39-403e-9bd6-ef3a334c1947", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--944e60da-a7a1-4a46-a7f6-1ae70053c965", "sighting_of_ref": "indicator--d7e4817c-2ecc-4675-98f1-21364b9fb54d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f2c5c4-c81f-4a90-ac54-e55128d06852", "sighting_of_ref": "indicator--1be94ab8-9649-4e36-bb3c-b72f8a405777", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf6de4c-e132-41a2-b6e6-fd04f520daa1", "sighting_of_ref": "indicator--48a01163-1bd5-470a-a7ff-6a6616ed73b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53bf2b60-3c31-4615-8678-ef11ed289261", "sighting_of_ref": "indicator--48a01163-1bd5-470a-a7ff-6a6616ed73b8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df00d7a8-9b9b-4008-999e-4e747cb8e1dc", "sighting_of_ref": "indicator--5436bb59-6cff-4e4c-a0ae-fa6e3765ca76", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--874586e3-f7b8-4666-8511-afc4aacdd8b2", "sighting_of_ref": "indicator--5436bb59-6cff-4e4c-a0ae-fa6e3765ca76", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31894a8-068e-4ecd-8138-4538bec829a5", "sighting_of_ref": "indicator--bb91f451-494c-4a53-96ad-b7bd7780b88c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4076090-2160-40ce-8c6a-941c22d37b42", "sighting_of_ref": "indicator--51c0334a-13f8-43c6-9948-e9b743a81da4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461e92d3-01c4-440f-ba0e-ccf44ef52555", "sighting_of_ref": "indicator--044bb89d-4c6b-4516-92c0-7d8558cc35b6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a831ae19-449c-44fb-b193-9de535f151d0", "sighting_of_ref": "indicator--044bb89d-4c6b-4516-92c0-7d8558cc35b6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8350cacc-2e0c-42bc-a546-e380a20dbb6c", "sighting_of_ref": "indicator--53b6cbcb-07fb-471a-ac14-1643170a3843", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56184feb-db6d-4aa4-9713-15370c6c8a4d", "sighting_of_ref": "indicator--53b6cbcb-07fb-471a-ac14-1643170a3843", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021ec7be-da6d-448b-b833-5be8e7681ea0", "sighting_of_ref": "indicator--f64063f9-2897-47f0-b424-2b45cbfee8d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ed73f2-a225-4668-8886-466b4e391e66", "sighting_of_ref": "indicator--b3075e54-30a7-468a-aa7d-4cc0299718e3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad64c6fd-5938-4012-975d-6c84d95dfe82", "sighting_of_ref": "indicator--d56864ee-74d8-4ffa-9cd0-cb63b00b6a2d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0247cf-ff81-459d-93c7-ae245233d999", "sighting_of_ref": "indicator--d56864ee-74d8-4ffa-9cd0-cb63b00b6a2d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f228cd-bdb1-4c26-a5c9-78539cad5b83", "sighting_of_ref": "indicator--14a01ef1-db6d-4f33-95ec-b3e0734e9bfe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d905c847-aadc-4328-b7ee-511fab14f998", "sighting_of_ref": "indicator--14a01ef1-db6d-4f33-95ec-b3e0734e9bfe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e50e2b37-aaa1-4c73-9e6b-b8efade161bc", "sighting_of_ref": "indicator--70e895ed-119c-444d-a4c3-51398b57bd6f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474ba529-9137-406a-8f35-5e03de1851d2", "sighting_of_ref": "indicator--bb4aab63-c701-4c84-9b73-cbdbf35d2e94", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24eba1b3-60fc-48c1-83e2-8aa2dce1b154", "sighting_of_ref": "indicator--49cc78fe-b9b7-41de-84a4-8d6d57de9d08", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6056f89f-6c44-4b2d-9bd5-53fcaade126d", "sighting_of_ref": "indicator--f53ec922-f2b6-401f-8086-2a8752afc306", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85901e53-9c76-4bc7-8fd9-7a8e5fdca84e", "sighting_of_ref": "indicator--8778db37-b752-4d47-bdaf-b3fbd5b9ce36", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf34313e-32b8-408c-a3e8-20b1477b1a66", "sighting_of_ref": "indicator--75e5b2cb-15cd-45a5-b971-f18c5a90e5ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71563ea-cf6c-499f-8b15-c39e30c87e92", "sighting_of_ref": "indicator--75e5b2cb-15cd-45a5-b971-f18c5a90e5ec", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9b9d755-5116-472d-a1f1-86e8b2de605a", "sighting_of_ref": "indicator--be4caf85-0c1c-4fde-81b0-4f5dd950a6e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893e1478-d2a1-40aa-bb09-009c9d47ace0", "sighting_of_ref": "indicator--be4caf85-0c1c-4fde-81b0-4f5dd950a6e4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16221a3c-a119-47b6-8df5-0930f5c40b29", "sighting_of_ref": "indicator--9f21722b-c507-434f-9def-38a436cb2e2a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3296874-b19c-4c28-815a-d88948b73433", "sighting_of_ref": "indicator--d449b15a-82e6-4f7e-a63c-8c9fd4664dd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0851796-1acd-4391-b484-7559df79760c", "sighting_of_ref": "indicator--d449b15a-82e6-4f7e-a63c-8c9fd4664dd7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ceed30-7d0e-456b-95b7-7cd96caad853", "sighting_of_ref": "indicator--2bb01aba-327e-4ac5-a665-28404c5f7352", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad243fa-c9c9-453b-96f3-e4a46a1f9c01", "sighting_of_ref": "indicator--2bb01aba-327e-4ac5-a665-28404c5f7352", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694025d7-26b7-4570-a76c-3c5a994ebd0b", "sighting_of_ref": "indicator--31bb452d-70d4-4dd0-9ff4-612c1749d10f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b22144c-9dda-4772-b99f-39fa5d908acc", "sighting_of_ref": "indicator--31bb452d-70d4-4dd0-9ff4-612c1749d10f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a421a0-d657-49c8-946c-ac1fe627f72b", "sighting_of_ref": "indicator--1b155db4-b9df-4580-a0d8-afd2ea703a54", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d40af1-a2bd-4a35-90c1-19ed546ac869", "sighting_of_ref": "indicator--1b155db4-b9df-4580-a0d8-afd2ea703a54", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eae61e3-3dfa-441c-b145-edb14f2075b4", "sighting_of_ref": "indicator--67189d05-51f4-49f9-9ea1-dbb1c7257262", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a213a8-527e-4152-b538-c62d0b02aa70", "sighting_of_ref": "indicator--67189d05-51f4-49f9-9ea1-dbb1c7257262", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f500488-d047-40aa-8d4e-7547f4dc9687", "sighting_of_ref": "indicator--398086b9-06b8-4e8c-be50-a33f86775336", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--562563a5-e03d-4c72-9d9b-75cf5758527b", "sighting_of_ref": "indicator--398086b9-06b8-4e8c-be50-a33f86775336", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f63b597-f521-4684-b699-7418a77dbd02", "sighting_of_ref": "indicator--02f91b26-6398-43e5-aaf8-c59905d9ff4c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f29afd-68d0-4b43-9d57-c0e3b8b794f8", "sighting_of_ref": "indicator--7c42be8b-d891-43a8-bfdc-7e5ff672e4df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f619aa1b-5b0f-4c3b-bc85-13566326aeb7", "sighting_of_ref": "indicator--0201669a-e7bf-4178-a423-7ed44a979e65", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3765c4-3ed1-42bf-b4a9-53891262e93f", "sighting_of_ref": "indicator--8d28f4e2-e023-4013-8651-1c63e35fccd0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c5de26-b723-48b8-bff3-f350e2c7a236", "sighting_of_ref": "indicator--8d28f4e2-e023-4013-8651-1c63e35fccd0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27997b6-f30d-4af7-b4c2-b33c89065533", "sighting_of_ref": "indicator--fb928a6e-91c3-4211-8dd1-2d73006a32ba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7327a4ec-aea1-463b-a919-e5d5404eaaef", "sighting_of_ref": "indicator--fb928a6e-91c3-4211-8dd1-2d73006a32ba", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e15063-073d-4054-924f-0dbae7c5c77e", "sighting_of_ref": "indicator--b663229e-ba77-45b5-9dbf-f95106138ba8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b758370-5835-4dda-84df-4ad68d2cbfaf", "sighting_of_ref": "indicator--b663229e-ba77-45b5-9dbf-f95106138ba8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1c3a4b-d167-462d-8074-afb962f929b1", "sighting_of_ref": "indicator--f0a12e49-85a7-40fc-8e14-401ba5628a9f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d41ef91-9d64-47ca-b6d8-8861c3a738fa", "sighting_of_ref": "indicator--f0a12e49-85a7-40fc-8e14-401ba5628a9f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f43277e-e709-4a3d-bdc2-6b212c8f9992", "sighting_of_ref": "indicator--a8411166-21b5-45ae-8a20-d97d4f5f3088", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132cd4ef-32b5-4f7d-b5fd-c15d5fa360bf", "sighting_of_ref": "indicator--a8411166-21b5-45ae-8a20-d97d4f5f3088", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03551d4-9dca-45d7-8af2-a494d25c9091", "sighting_of_ref": "indicator--65311307-2f48-496e-8581-963a0729aef1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4cf9d28-dad4-4e9c-ad3c-bc01b413dce6", "sighting_of_ref": "indicator--b93ddb51-b92d-40cf-9c8d-5517d93af982", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59d35f5-2d1b-4a4c-a306-94917df60380", "sighting_of_ref": "indicator--5b52512a-c344-4421-9fb5-cfd08c07d59c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442a904f-3597-412f-9c70-1208885f57ed", "sighting_of_ref": "indicator--b0993635-4875-402c-87f6-1a9e418fb9da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd53559b-88ec-4550-8e63-176696c6cbd5", "sighting_of_ref": "indicator--b0993635-4875-402c-87f6-1a9e418fb9da", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b5ced5c-02ad-4125-8ded-d6ed75fecc31", "sighting_of_ref": "indicator--e46f7dac-b1ba-486f-a992-8f3691659d24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84a313c-f5f4-443e-b708-9c416e206c27", "sighting_of_ref": "indicator--878284b4-a7d0-4a3e-8e98-09d1d9428812", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb3a695-a5a2-47dd-bc19-4e3eb3b15e5b", "sighting_of_ref": "indicator--878284b4-a7d0-4a3e-8e98-09d1d9428812", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c571d575-8731-4e41-a153-8942a7e370a7", "sighting_of_ref": "indicator--98b1252f-dcba-48fe-acb4-91b814342257", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c8de5f-1c91-4c6f-92f0-b09b0afa933d", "sighting_of_ref": "indicator--89b23520-9dd4-4429-8892-9d628450ca24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c997781-17e9-4991-907c-20ad120666dd", "sighting_of_ref": "indicator--7248f57e-fbfb-4351-98f0-ab01a6c99400", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16e2fce-fc39-4520-b799-d3b88c7911ff", "sighting_of_ref": "indicator--7248f57e-fbfb-4351-98f0-ab01a6c99400", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79fefaed-d22c-4bdb-a9f3-fd39080523db", "sighting_of_ref": "indicator--5c70c26b-8307-471f-ab45-d93364aa2d01", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5018702a-0230-412a-bb18-c6b44665453f", "sighting_of_ref": "indicator--5c70c26b-8307-471f-ab45-d93364aa2d01", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab18dd9-0ea3-44b2-a2d9-1620a6f96dc9", "sighting_of_ref": "indicator--52bf2d9c-c041-4f3d-be6e-e11f17ad89db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37e73958-a086-41ff-864e-14fcf8c9d98c", "sighting_of_ref": "indicator--52bf2d9c-c041-4f3d-be6e-e11f17ad89db", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7aca3c2-4186-4325-9ad7-ee5a10e65f5b", "sighting_of_ref": "indicator--292211da-4fcf-4207-9eec-95db6a49bfbd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c02dac-ecfd-48b9-8011-9d9aa780495e", "sighting_of_ref": "indicator--5af734fe-5602-4a2b-a92f-fe745e80b51e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b564b4d8-4415-4d21-a306-467282839d7c", "sighting_of_ref": "indicator--5af734fe-5602-4a2b-a92f-fe745e80b51e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab50fe5-2619-40ea-b6a7-edea4a1881b3", "sighting_of_ref": "indicator--88f9ad11-dc98-4c0b-b193-416747dd9d78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8a5b85-4f64-4a64-a010-42af65cdadf5", "sighting_of_ref": "indicator--a147b88b-c647-41d1-887e-c6b51aa75261", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffa9312-c22c-44e3-b9bf-2e13eda39346", "sighting_of_ref": "indicator--fc52bacf-1088-499b-9782-cad9a3e22d5b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ae57ab-176b-42e0-b23b-efb8d1a2e693", "sighting_of_ref": "indicator--fc52bacf-1088-499b-9782-cad9a3e22d5b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b972bc2-e147-4c2b-b385-65aba4617edf", "sighting_of_ref": "indicator--e9541585-69d0-4228-a10c-7baff1362588", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c3957b-b1ed-4696-a9c2-0dee466792d0", "sighting_of_ref": "indicator--839c033d-1fc2-4c09-bc55-d3a56dade12b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc81231d-f841-4ecc-a028-3627f1f55acd", "sighting_of_ref": "indicator--792467f1-054b-430b-9bb2-a1454ae53345", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9042b0c4-7ec3-457f-ac47-956ccc5b09e8", "sighting_of_ref": "indicator--7e5f8d1a-30e6-4e94-90f3-ee45df2319a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a5ffa2-839d-4281-b275-3dc419e23248", "sighting_of_ref": "indicator--ec630903-36b9-431a-9c17-1677e6dba38f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--960d78e0-4402-46a5-909c-1b2f2475b1da", "sighting_of_ref": "indicator--763171a3-0879-4eb3-967b-1f6303471adb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f7b81a4-111d-489a-8ce5-700e39015ebf", "sighting_of_ref": "indicator--32c4b2ce-b670-45bd-825d-019749751a31", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482a192f-5340-4bbe-bc10-31c574c1254e", "sighting_of_ref": "indicator--601f53a1-d71e-4b13-a0cd-e90d70e502e6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e00b59-e276-43b5-aebf-d1dee41727e1", "sighting_of_ref": "indicator--7a16cc12-0819-4577-9fa7-3582b615ba72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41f11bf-ab5f-4cb4-9f70-e16de842e517", "sighting_of_ref": "indicator--b5028fff-c75a-4a1d-a80d-95b9eddd9cee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05b33f3-e916-4135-aa02-406e20743456", "sighting_of_ref": "indicator--b5028fff-c75a-4a1d-a80d-95b9eddd9cee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a4519b-c9fd-46ff-9032-0bf371a6c047", "sighting_of_ref": "indicator--1d726b2c-a258-4778-aa92-92bf26e77025", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed175fe-ffe5-4c46-8efc-6d1980ff9775", "sighting_of_ref": "indicator--1d726b2c-a258-4778-aa92-92bf26e77025", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de67959-a6da-424d-b889-ff9e223a1722", "sighting_of_ref": "indicator--ebc02a4d-7039-4f59-ba8b-3284419368a0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4b843c-40f5-47d9-ad46-dc41e10ea67a", "sighting_of_ref": "indicator--ebc02a4d-7039-4f59-ba8b-3284419368a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3f5cb1-91b6-4e4c-97be-6ae36265cb1d", "sighting_of_ref": "indicator--a96b2009-beb2-4496-9a72-81ac672a4074", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c08e385-5eca-4ae6-bca0-c3c90ba0b30a", "sighting_of_ref": "indicator--cc461e08-3fc0-4819-bcef-f37357b355fe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04273bba-ae88-41b3-9919-2113eac5e5e5", "sighting_of_ref": "indicator--d14c9a74-2fd7-4024-bc07-24e235717f02", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a63851e-cf2e-4098-a361-558b3435625c", "sighting_of_ref": "indicator--d5d25f3d-f78b-4b17-a599-7f19284c7f20", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c4c4e1-7e69-4bbb-8860-6f49e55988d4", "sighting_of_ref": "indicator--d5d25f3d-f78b-4b17-a599-7f19284c7f20", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909cdd41-e8ed-4e02-9292-cea28a5a5331", "sighting_of_ref": "indicator--f55b329f-35d6-4595-9804-d0b2a4071d78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05868cc-b471-4d9b-8ebf-bec32497e084", "sighting_of_ref": "indicator--4a2b240c-4457-45ca-a1e9-bcead5820cf2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed148e3-6615-4e7e-9dbd-76a9b3a3eee8", "sighting_of_ref": "indicator--c8e5a39e-f91b-4608-8c66-ef6b6f84d440", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e109f915-a25e-4a1f-a453-faaa4330470f", "sighting_of_ref": "indicator--399ba23c-f923-4ed6-827b-b4c32ed16763", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc94dd7e-10e6-40d8-a2d1-f9b92d59e837", "sighting_of_ref": "indicator--399ba23c-f923-4ed6-827b-b4c32ed16763", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ae7bdb8-4640-4953-ad39-93b015ece115", "sighting_of_ref": "indicator--9db37832-fa3f-48f6-bf13-f46854ea05cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb50d457-34b6-403c-9840-a71c3e68d8ed", "sighting_of_ref": "indicator--9db37832-fa3f-48f6-bf13-f46854ea05cb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992181e3-4fee-48f6-a7f6-e15c3236b258", "sighting_of_ref": "indicator--66110c8b-5497-48d3-85b2-aa5c4264a3e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97275bae-ef64-47e0-9de7-49bd6fced263", "sighting_of_ref": "indicator--66110c8b-5497-48d3-85b2-aa5c4264a3e4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7fa763-a139-4c6d-97be-1816a4aacfa4", "sighting_of_ref": "indicator--bb847549-8ca5-4dbe-8b4a-4ef5954bc9e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97003a90-f3ab-405c-9c0c-2f7cbd173de2", "sighting_of_ref": "indicator--5f89bc95-233a-49e6-97f1-d8d205dce455", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b3ee2a-b81d-4767-a2e7-7a5529e330bc", "sighting_of_ref": "indicator--4bae0659-cb93-4c78-a9a7-ce12980ec149", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f238b2a-228a-45e7-b4d4-5db88a448802", "sighting_of_ref": "indicator--b7feddf9-3b7e-45ec-8c88-89b1af313633", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cb05c02-634f-4c1e-9c0e-98e4766b9aaf", "sighting_of_ref": "indicator--9f165939-8822-4998-950c-1ea266b56e5f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07993f80-f054-449d-930d-6a2fa567ce2e", "sighting_of_ref": "indicator--ba1dd2cc-081e-4e23-b2a9-a409e8c09463", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d51f6e5-e015-4b3d-8a1a-5b9146e60d04", "sighting_of_ref": "indicator--95f77f11-902b-45ff-8606-82d7ecf072e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdfce90-2696-469d-8aad-6beac44f689d", "sighting_of_ref": "indicator--7dad7d9d-3cd1-409d-a58f-42677abc7d71", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a30ab0c8-8bf5-42ea-86ce-7fd3c1b080fb", "sighting_of_ref": "indicator--9952bf0c-3ebc-47e3-892a-bcfda3c81c09", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0cfddf-8fa5-4e58-884b-7193188c0cfd", "sighting_of_ref": "indicator--fc58ced7-dc54-412e-ae57-3b147acfc69a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6626b86d-e3bc-4af4-9040-147d6986e938", "sighting_of_ref": "indicator--a4af01ca-3d33-499a-b73a-e58e34d24446", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62287615-ed35-4521-9a46-51b42def3c54", "sighting_of_ref": "indicator--a4af01ca-3d33-499a-b73a-e58e34d24446", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70ed3d37-e8ca-4ebc-bc9e-a43e0ca92434", "sighting_of_ref": "indicator--b4911295-19d4-4b44-b33b-a3be7561540a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2753a212-a78f-4f3a-9739-60bf0aa09807", "sighting_of_ref": "indicator--b4911295-19d4-4b44-b33b-a3be7561540a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1fc3282-dd9d-42fb-a66b-af77e20f4440", "sighting_of_ref": "indicator--5888834c-a9eb-4c03-ad20-c61ca6c780b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544a4d21-0309-4788-af0d-83499928c81f", "sighting_of_ref": "indicator--5888834c-a9eb-4c03-ad20-c61ca6c780b9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ab580f-c4fc-481b-b8f4-490f8873ce4d", "sighting_of_ref": "indicator--57ab554d-e210-41b7-ba76-272b692aaa75", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4036f9-7d4f-4a9f-9c70-8e5248926321", "sighting_of_ref": "indicator--57ab554d-e210-41b7-ba76-272b692aaa75", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91fd1826-76b6-4623-9438-334775a77de3", "sighting_of_ref": "indicator--9595dad7-e54c-4a70-b7d4-9f8d3338eb5c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a6767f-6050-4084-b22d-9e120c1a29ce", "sighting_of_ref": "indicator--05f200c9-b9a6-4fdc-a071-594749023615", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b0029e-d2e2-40a8-a33b-cc838af659e4", "sighting_of_ref": "indicator--e9d3c428-6979-4874-9c08-9f1493f74e10", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--041542c0-01f2-4688-91bb-9014da378279", "sighting_of_ref": "indicator--f5ce9912-80b5-4d6c-b13a-283ea95f92f6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5d92c02-e6ab-47a5-b2dc-8bf84bf0300a", "sighting_of_ref": "indicator--b5ac0503-db97-4d6b-8d48-3fdaccb055e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e90cde61-9a73-47f1-a17e-3a1bcadb5d40", "sighting_of_ref": "indicator--b5ac0503-db97-4d6b-8d48-3fdaccb055e1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fb55ef-2e4e-46f5-97e3-6bc9a2134b79", "sighting_of_ref": "indicator--dd7a1869-b234-4a51-992d-18f65ec92118", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d212cf4-122f-45b2-9465-8080721966ff", "sighting_of_ref": "indicator--dd7a1869-b234-4a51-992d-18f65ec92118", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96eca94-555d-4137-8e35-e4a09e379ee6", "sighting_of_ref": "indicator--24818664-b6d6-47dd-baf4-efe4abb8dda4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c50ead-65df-4ab6-8621-fce456e40fcd", "sighting_of_ref": "indicator--73425cb9-d94e-4a5c-88cd-079df1b63cb4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac72e61a-a8f6-49f2-a83f-e681aeedbeb9", "sighting_of_ref": "indicator--73425cb9-d94e-4a5c-88cd-079df1b63cb4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca7e6d5-8c14-44dd-8d53-c98d16f0abd6", "sighting_of_ref": "indicator--0dfb40b3-356b-46dd-b28f-ae08f4e41c66", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5d9c6d-4762-49b2-92a8-b283c89b625b", "sighting_of_ref": "indicator--466c8e25-7d11-4e72-aae4-625fd854edd9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2068a081-537f-40e5-b40d-2de17c4e7959", "sighting_of_ref": "indicator--466c8e25-7d11-4e72-aae4-625fd854edd9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6adbc60-79f5-459f-af69-65b1df22b674", "sighting_of_ref": "indicator--8d21a186-eb90-43a3-a8eb-0128582a81b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8abf9d2e-7cc2-4c72-a7a7-abd9e692f5ac", "sighting_of_ref": "indicator--8d21a186-eb90-43a3-a8eb-0128582a81b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4206f9fc-9da7-483b-ac34-4129dabd1317", "sighting_of_ref": "indicator--697b2ecd-f5ad-48ae-83bf-eec64a300e9b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f177f1-2034-4520-97ed-3ded7e5ab344", "sighting_of_ref": "indicator--697b2ecd-f5ad-48ae-83bf-eec64a300e9b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffd5b31-d16c-4e6b-8af6-577de3a9770a", "sighting_of_ref": "indicator--a83135b4-991f-45b5-8e5b-691dd76150b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d69c37-e9c7-4e8e-b754-5827234e2bef", "sighting_of_ref": "indicator--52938ce7-0500-41da-aaf8-78df341af61b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7687bb8-ae6e-46db-9f0f-a7d444244add", "sighting_of_ref": "indicator--478d8838-5322-4322-bd51-b4df235188bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c45d26d-07a2-4e86-a3ce-c18d97d4c6ef", "sighting_of_ref": "indicator--cec6ae2e-3023-4493-91fd-ac13203dc206", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c60405-add6-416f-bca8-c86cb81b7e3a", "sighting_of_ref": "indicator--a2f96a41-028e-4fea-8380-711205bd6e68", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab816b9-d50e-425a-873e-9b03551ed552", "sighting_of_ref": "indicator--a2f96a41-028e-4fea-8380-711205bd6e68", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368ba58e-5779-4931-833a-0ba31951c5d8", "sighting_of_ref": "indicator--89bd0eda-4dac-452a-8e8e-e7232cbf313b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47035e14-89aa-4216-8db8-b7ffd25c90af", "sighting_of_ref": "indicator--d91e4cbc-b193-417d-8903-e6eb2b8c01a7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13afa07b-8440-4dd7-8ba3-76cabacb9830", "sighting_of_ref": "indicator--c7047e22-ccee-460f-b4a0-b28faf03bc53", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dba3a2a-55a5-4619-a332-ca5108cfa23e", "sighting_of_ref": "indicator--3dc5c6c7-b26b-41f4-bd76-967b363167be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe87ad8-5a85-45ab-8fdd-243045e90fae", "sighting_of_ref": "indicator--54d3a305-7b1d-456c-b926-8fd2abf9540b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce74043e-1919-46b4-b1fb-4222a93075fc", "sighting_of_ref": "indicator--a320a2aa-9a0e-4318-92b7-d4717382d198", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ad9bfa3-85a4-49a9-9cbc-d3c8083bf7a2", "sighting_of_ref": "indicator--91c92428-35a5-4b78-a382-7e3fe31b0225", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33b8bdd9-dab4-4c57-8653-c805dc715092", "sighting_of_ref": "indicator--5e8518e5-bcb7-412a-9508-66bb282c12cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51aef82-c993-4b1d-90a2-988c561e2348", "sighting_of_ref": "indicator--3bf249ca-4f0d-4312-bd5f-0304ee8aa2c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50cde5ac-a8c2-45d6-ae99-6fb5dbfb0a8b", "sighting_of_ref": "indicator--0bcee60e-2d5a-4c7b-b8c0-9bb105d3789d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cdf61e-d17a-4fe4-a871-82e077874fd1", "sighting_of_ref": "indicator--030cee12-12eb-4987-bd18-f455eb08c259", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46b9e43b-2867-4395-a503-80d5ab904635", "sighting_of_ref": "indicator--030cee12-12eb-4987-bd18-f455eb08c259", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d65f47a1-8eba-4ee9-a182-e0a2b61f39a2", "sighting_of_ref": "indicator--7d32215c-1908-400a-bb90-58f3164ddd24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0119ac6-c050-4389-b92f-184908ec97ee", "sighting_of_ref": "indicator--7d32215c-1908-400a-bb90-58f3164ddd24", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f527b91-a1e1-4b93-aed7-ac3d73e99bdb", "sighting_of_ref": "indicator--d530d612-69d8-45da-ad87-89a2464705f4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064f2e19-8447-49e5-b3c0-7d6e0818a9ba", "sighting_of_ref": "indicator--539eedcf-a30e-4c28-9783-e923f33c4a6d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3442c01e-59dc-44f8-bf99-6c583c813e4f", "sighting_of_ref": "indicator--de303983-336b-4637-91a9-e107ede569ae", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--823e5c28-ef66-44ae-a5c8-b3ef23a60ec7", "sighting_of_ref": "indicator--b12b8986-2864-4f05-b69c-a6cb7466d71f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb50b18-2a93-4529-945d-b858752e30f0", "sighting_of_ref": "indicator--a84d0fa9-b7f8-4b2c-bd9d-244596758f81", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca0e9c2-f807-42db-ba68-bd9f9f9d3878", "sighting_of_ref": "indicator--2de1d238-5a98-4a38-8494-a8de17edd4a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c522d72-5e88-487a-8d72-d713f1942f84", "sighting_of_ref": "indicator--e87a25a8-4545-4cd3-b881-d94dc98de900", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f21e10a-5591-4dd2-8100-d0bb6c400cf2", "sighting_of_ref": "indicator--d38246b4-21d2-49f3-aef3-1d68450b4776", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c54ceb9-c2d5-43df-a91a-5a602995b2da", "sighting_of_ref": "indicator--0a006ccb-909c-4ac3-8699-912e53f1ec41", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac63ed34-d1dd-462b-8152-47f1d8a99f7a", "sighting_of_ref": "indicator--20f383bb-716d-4342-a378-bebf925cfabb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18f95c1-1039-462c-ae0f-c4553bd42d8d", "sighting_of_ref": "indicator--d1ece605-b266-45c1-bd05-4b66b6e41bc4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15602a5-1a9c-442b-ae0d-047324c9e2ae", "sighting_of_ref": "indicator--7294d50f-b76e-4f57-85df-dc20a5f4733b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--718df3fb-c286-4b37-97be-e587c0a40de7", "sighting_of_ref": "indicator--4e9d3d59-f883-418f-a731-6a346a21feb8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2022ed39-6c8a-42d5-a12f-fcad16c4cb59", "sighting_of_ref": "indicator--1eb8d4b5-085c-4ca5-aac9-08942d8d22b2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d2334d-b98a-4198-998f-997b02dc81cc", "sighting_of_ref": "indicator--2d8892c1-1173-4f11-a756-b9c5021c875a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b010f5-f06d-404b-bd09-ee616bb52665", "sighting_of_ref": "indicator--f93580fe-c3c2-42f2-b938-a461bc8c695d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f174b3b-008a-4a8a-a883-c6318cbbf09f", "sighting_of_ref": "indicator--c915855a-e5f6-43ea-a02b-2b4000e9ff1b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d055eb-5012-4aac-ab3d-f0abb5a33e74", "sighting_of_ref": "indicator--62a07469-4e9d-4f03-b8e1-3dce158a85e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13893414-e7a8-422f-882c-d5f0b0f8eafc", "sighting_of_ref": "indicator--3f331fce-ff9c-4055-b59f-6692df304ec4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5986a53c-666d-4d25-80eb-d93355043cfd", "sighting_of_ref": "indicator--ae7de128-6cac-46da-af3d-a690540ae12d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de108d78-9e17-4e21-89b5-164b43f8d73f", "sighting_of_ref": "indicator--3f55d507-42ea-4810-abe2-e7b8ce10ebcd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f61380-a459-4fbc-a511-41af35958d4b", "sighting_of_ref": "indicator--3f80b69e-16e1-449f-8dfd-35c8b651d913", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d57b69c-48d8-4019-9826-8b67f8cef91b", "sighting_of_ref": "indicator--0a44cd0f-94ab-4ce4-a0a2-1b8f6cb1343d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b8ef5f-22c2-41ef-8da1-2e91a58490e7", "sighting_of_ref": "indicator--c109ac72-2b32-4283-a9a2-57959c9cd27a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e9a1a56-80b2-4a17-8cbb-2463f7bdb611", "sighting_of_ref": "indicator--05fcfecf-79b8-4ebc-92d1-e5657aff22bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebf319e-e392-42a7-83b5-db01d0fdd79f", "sighting_of_ref": "indicator--2f106219-7ca7-410b-837d-4b1a232a523b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2480f28-4716-4b2c-bb8a-973e004e1683", "sighting_of_ref": "indicator--2f106219-7ca7-410b-837d-4b1a232a523b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbdc8d6-5772-4af8-b122-2b8c2949408b", "sighting_of_ref": "indicator--5648cc1a-fc2e-4ef7-91ba-9439b295594a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c529a24d-cf42-4bd2-afc2-d81f4a1e215b", "sighting_of_ref": "indicator--97039ec6-0746-44b8-9100-14190678a266", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30d0de5-67f4-4f6f-aef4-e2f3594abf2a", "sighting_of_ref": "indicator--466dcf35-b1de-4139-a89e-e85fc814d2da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3365623f-25aa-4a5f-8add-80616efadd87", "sighting_of_ref": "indicator--fa3cca49-8947-411e-b32f-01c6810ecb2a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c21da8b-7643-4ac4-a3c4-9c274965d1bc", "sighting_of_ref": "indicator--7e46c7e3-5910-45ca-850b-f85549c0037d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5156df9-0826-4ff3-bae3-482964b0fb43", "sighting_of_ref": "indicator--708c0242-f16e-4bde-9de4-13c4159e4916", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66024995-102d-4b42-a622-2cc0715e107c", "sighting_of_ref": "indicator--4b862596-0030-4f6e-b479-28844d0f0394", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3af9b0f-03ba-49bb-b0d9-583690bb1a91", "sighting_of_ref": "indicator--046104b1-70c5-4509-843a-5bf4f3dc3c1a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97928026-9a25-4bc1-8009-417ac29f544b", "sighting_of_ref": "indicator--8e2a0fcc-a669-417a-9a4b-b2c5483cf020", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f71def-fd32-4ca0-bbff-cd79953884b8", "sighting_of_ref": "indicator--36cd927a-7548-4aa5-9b6c-a236dd22f321", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b529dfb4-c79b-4a35-88db-3118b48daae3", "sighting_of_ref": "indicator--4c42c09e-2bd5-4380-899d-ff0207efeccc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657a7a91-d1b8-4ff6-9d0e-1e934e93d1e6", "sighting_of_ref": "indicator--427e2578-9fdb-4ac3-8176-5ff04603cbe9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf9f826-6ff9-4ada-b056-177bf5c3ffe2", "sighting_of_ref": "indicator--b2de8f17-d9af-4e7c-87ef-66191e1dbdd3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70221d41-b31c-48b3-9841-814bf2812edf", "sighting_of_ref": "indicator--2d3f7d8f-c4f3-4fe8-a48f-76df48af3410", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53587cb0-0915-4ee9-892c-7090410e3475", "sighting_of_ref": "indicator--eebdc46e-c8bd-4356-a7d1-3007c68a5c40", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961273fa-1c33-4efd-8768-3718fc6b4e25", "sighting_of_ref": "indicator--fda58b4e-fd22-43dd-b311-817c7545d598", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706068f8-1a0a-4164-8ece-5cc849785a82", "sighting_of_ref": "indicator--f3a621bc-10d3-4c39-8ba9-164e73c6d1a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedcb56a-6572-4021-ac5a-c2eaeb75545b", "sighting_of_ref": "indicator--5c29229e-5c8c-4d15-b8ea-a5d6c18402de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4f69a6-e4c1-4f14-a576-3f12989b7334", "sighting_of_ref": "indicator--32672fe5-71f4-4fa7-b58c-4d9dea5d04f1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba340b96-7882-4ee9-bf51-65c0b0f88cb6", "sighting_of_ref": "indicator--47f30544-d750-4df9-977d-df9e8e475ecb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0096c2f0-6394-404c-ade9-65138f2f5bea", "sighting_of_ref": "indicator--be4341dd-3649-4e85-8aa9-87beeaa103b6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afeddbe2-79cd-4234-87fb-be436308f6d5", "sighting_of_ref": "indicator--2feb56a0-c907-45cb-9668-58b8bfee2dab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d28080-87f5-4754-bd83-63456a6e5195", "sighting_of_ref": "indicator--a517a275-2f1a-401a-b66e-d3d6ed51ef83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6006e6b4-7e9b-443e-8500-1472279a4ec6", "sighting_of_ref": "indicator--93ee4799-49cb-4ab8-a9d4-e39ff933c9a1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf12a62-aeb9-424f-8c7f-5ea0cbbd6ece", "sighting_of_ref": "indicator--ac01ca3f-a120-4e2f-9dde-92989d8dc4a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff7c28a-3cab-46fa-9e27-29b0b459ee9c", "sighting_of_ref": "indicator--8be4331e-d6e0-43d1-a2f8-613937b97d3b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ab5a22-1922-470b-afb9-dbdc8d80744c", "sighting_of_ref": "indicator--57181bc8-43f3-4477-afb0-5c0a4207da50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fec1d4a-b0fd-42a9-b531-682d8ce35f8f", "sighting_of_ref": "indicator--1ae24243-dec8-44bc-80de-cb0fdf4c1caa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1b71f7-69e0-4bec-afe7-07c0c086c861", "sighting_of_ref": "indicator--5ba6c6a1-a0af-4517-9482-5ac3b9ab3d67", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9872a4f-07e5-41a8-af7b-7fefd18d6db2", "sighting_of_ref": "indicator--674a0848-2d7c-4a1d-ae4c-6d7d2fca3f49", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3384504f-ae2f-4ace-9ebc-875b567c0a1a", "sighting_of_ref": "indicator--af61a0be-cee5-457d-9bb0-63febb91c24d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727fadfc-dca2-4269-a9c9-e0b8ef8adcb8", "sighting_of_ref": "indicator--265c4c10-072f-47c8-9499-e20869a84efe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2577987e-eac3-4b94-8931-5d6b3ffefcba", "sighting_of_ref": "indicator--f90295bd-439b-4bd9-9e99-8a23627159ad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f389be-15a9-48fd-82e5-13ded3739012", "sighting_of_ref": "indicator--b85828d6-cd80-4696-bc29-15e8dd48f0a1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c966c6-b343-49e4-b3e1-1e10bc844667", "sighting_of_ref": "indicator--f1a1f05e-0c06-4405-b38d-990b19cbc255", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08bf242-7b17-4263-bc09-63e6e96d1911", "sighting_of_ref": "indicator--288a2255-01c7-4c57-bbcb-25c54601470a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefef7be-aa43-4c0c-8a68-2d5e317235d7", "sighting_of_ref": "indicator--40308856-1698-4194-989a-b999231a210a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--add86936-f427-4c04-a47c-552b4e248528", "sighting_of_ref": "indicator--5ddd6c68-972f-443c-a3c0-244a6e824230", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865453bf-8f3f-4f59-8ea6-c268c28997d1", "sighting_of_ref": "indicator--f576ca5e-cdd8-4f42-b2c1-9e3282cd8b2a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fcb3d6-0f0e-4b5c-a0fe-a98d501d62da", "sighting_of_ref": "indicator--3f57863f-984b-487c-abdb-d3da62953d7f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c77bc5-eac0-42b3-9b56-02708089d1b5", "sighting_of_ref": "indicator--b9fb7e75-c465-4d4b-b6ef-6c6911b207c3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828031ce-a9bb-4627-9a7c-702418f80edf", "sighting_of_ref": "indicator--e8d5e6f9-8f36-434e-b542-006ce0a8c984", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039ba75c-0e0a-4a0e-a62e-54adb65da5ec", "sighting_of_ref": "indicator--1af1100d-6dba-4359-89dc-929de1ee890c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76502f97-27a6-4d80-b8fd-98d83a291b15", "sighting_of_ref": "indicator--4a984444-dc10-4b3c-9cb0-ad66723082b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327cf8d7-1f8d-46cb-a009-e22743bb43a2", "sighting_of_ref": "indicator--eca988b7-e91d-4f1d-b0d5-0f0e3525dbf7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb096a84-1cb5-423f-9424-58152d6cbecf", "sighting_of_ref": "indicator--e2372a92-8d0d-4e0d-a47b-2c6a9f98affd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf23773d-b4e3-452d-9181-20303a77cf57", "sighting_of_ref": "indicator--975ed887-a61a-47b8-b739-4cd963f91338", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e298d25-e51f-414a-a34a-dbef5e4003e8", "sighting_of_ref": "indicator--14858537-5ea5-4ab3-915f-96c2325d2fee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0eea5fd-8b31-4b54-82ff-5ddb45fafe0b", "sighting_of_ref": "indicator--969a45da-08eb-43c4-a2d5-b331b29fcdc1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bd0115-5883-428a-aafa-1f35ea80f47d", "sighting_of_ref": "indicator--3d018791-20a0-487c-b45d-e3870f67e5da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d41aca-5b5f-47c6-b4c9-ac7eb86a8acc", "sighting_of_ref": "indicator--12e72ddd-25c7-447b-a1e2-a69c9bdcfcca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c9fae8-d089-4b5a-accd-2e5976b1c700", "sighting_of_ref": "indicator--734773dc-bde5-41a9-aa9d-7d222a0c0805", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b079ebd9-e576-443a-a500-40566ba1ca9c", "sighting_of_ref": "indicator--f3d768a8-7eb9-4302-b687-3c11cea08043", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528f88c7-c30d-4fa3-8840-b70360e04757", "sighting_of_ref": "indicator--f41cffad-9ba0-41cb-bf9a-02960c2eef7c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71abb223-38d6-4b8e-b5ea-fc0a271743e6", "sighting_of_ref": "indicator--a40d9bd7-41b9-4e12-9e51-11714f59a0b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9ef8f7-5a1b-4ab3-ad3d-b0df3db16c66", "sighting_of_ref": "indicator--fad3f4db-9486-428c-81e4-17a246135730", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a90c156-4a81-4181-9764-ac19518def60", "sighting_of_ref": "indicator--3abaf839-5230-483c-94e8-eb26f575a98e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d71eba-6d3d-4a8a-9a5f-5064be480a47", "sighting_of_ref": "indicator--0d941ef0-6126-44a3-a07c-2f1bf388dfc6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--736f9543-a3a7-42f2-bac6-374b7ef67260", "sighting_of_ref": "indicator--8e50ee23-cb0f-4d97-88c5-af592a2dd64d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ec7667-9252-449f-86dd-d7924564ac2a", "sighting_of_ref": "indicator--433ccc66-1831-41da-929b-5016c318f93c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e4fa26-7d80-4927-8ca7-87490b82e7a1", "sighting_of_ref": "indicator--ef99c993-e111-4cca-a124-fc2bd42a00c7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e79295-2e1e-4a77-b88a-f7fa4ff90fd8", "sighting_of_ref": "indicator--e1cc5d29-fb61-440a-858d-27a3b2e0c90b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfe41a39-31dc-47a3-8c3c-02cd1b39290a", "sighting_of_ref": "indicator--a56647a1-cbc0-4efe-a94e-0199511bda7a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c32cb40-19e2-4db9-8220-f92940aae1bf", "sighting_of_ref": "indicator--dbac1eff-54bc-4e4e-84ca-72967939f344", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aadf2eb-3e20-4e09-bba1-a848d149d436", "sighting_of_ref": "indicator--a67d9972-3988-4970-ad48-20330d820a5c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c57ce65-1f80-42c4-b6d6-75becf27f5f4", "sighting_of_ref": "indicator--00471763-198c-4bae-9410-fda5974d1ce7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610301ff-5cb2-4c6b-bfdc-95974cb788bd", "sighting_of_ref": "indicator--7f27da37-a42e-48e1-a546-b9952fd34380", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f1b20b-fb05-4b37-8b1e-77f3d33e9bce", "sighting_of_ref": "indicator--49f2220e-ac09-4d25-bf12-972067464d46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ff8716-a2cb-4d42-a535-8907d371889c", "sighting_of_ref": "indicator--474d687d-3195-4681-b350-b6a3216400b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e5d98e-1fcd-4090-adb8-9c81f79ebb8a", "sighting_of_ref": "indicator--a2ddc05b-e6c3-443f-b11d-51d3892b65dd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124cad2d-825b-442f-b8e2-a55ced4afabd", "sighting_of_ref": "indicator--d4137501-aac6-44b0-900d-a63bb84b0f60", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4894724d-d88a-4203-a5db-d0ed6cca97a1", "sighting_of_ref": "indicator--4389e0cc-bdc0-4c03-b947-6ccef9f61bdf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d8d684-4855-4136-812e-002c65fa86ec", "sighting_of_ref": "indicator--317947bc-310d-4dab-8b21-5b3f438d4a63", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b155c831-d248-4c74-b375-4ad3cccb5832", "sighting_of_ref": "indicator--dd957f42-e805-4808-8d7b-be514aa548e1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1d77a4-fe0b-409b-a81e-42b2c7ea673c", "sighting_of_ref": "indicator--698ad7f9-508f-40fe-b9e1-f1f6c2446adc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ed206f-4854-445f-a71b-4f747a62a62f", "sighting_of_ref": "indicator--f18d3860-fc05-4d3e-9f7a-10ee339c21c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414cc4f3-eb52-4801-a597-ee519442d86a", "sighting_of_ref": "indicator--0458c4b6-3107-4242-a347-a700890731a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb15a14-9c0a-405f-9612-54b278715e06", "sighting_of_ref": "indicator--2ea4ed7f-2793-4b11-bd3d-670af2b16cb8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a871d0d1-6fae-4331-bc1c-daf7464e34c5", "sighting_of_ref": "indicator--42693371-6dbb-4805-96b0-1e4ee6426121", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890af1ca-830d-4337-add7-22adfd871da6", "sighting_of_ref": "indicator--2ffd337f-ea67-4fa0-bf18-a49a3d84d0af", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9bc2363-52d8-4bcb-8190-29cbff5d97ec", "sighting_of_ref": "indicator--85d3f2d0-b321-466e-b053-f34540f9ae3b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--559501c7-84be-4866-8ee0-5c83ebd9e248", "sighting_of_ref": "indicator--e21c9c27-f117-4963-8b31-0cf628d80bef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897640b3-3564-4b56-b468-fb1742b0d074", "sighting_of_ref": "indicator--b5b07c84-f420-4573-9b21-4cc96f0fd790", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d08f5dd2-87fe-441b-b7a2-025b5c42896d", "sighting_of_ref": "indicator--fcc3b4e7-4459-42dd-94ee-2c7b3c6ea6b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21381dea-7521-46f7-9091-7610f6bf71f8", "sighting_of_ref": "indicator--7013614f-ecef-4a25-93a5-6f8f6788f183", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--470419f5-59e2-4353-81fc-9d1921e83e0b", "sighting_of_ref": "indicator--d8f05239-dfa5-45fd-90e7-b1c49d861935", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--139d8ee1-2c39-4f92-8f6b-5f69bb583706", "sighting_of_ref": "indicator--6be5ee2c-e212-4267-85f3-79e3efd6ec07", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160af97e-3cf0-4258-aa69-1c6cc17bcfe7", "sighting_of_ref": "indicator--54eeebdb-5756-4517-a16b-66317397a923", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5315b2-3352-45d8-a058-0004ae1e2e52", "sighting_of_ref": "indicator--35446b49-c824-424a-b68f-3e2de1bfac42", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a92f471-5302-4210-aec0-640649326553", "sighting_of_ref": "indicator--42510e58-14f8-444f-8e92-9e8d31ae74c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1595df94-eef2-4b28-8968-7c17e582f680", "sighting_of_ref": "indicator--b0e80a05-ac8d-4ddb-adbb-d579bfa992e1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7801268b-70c2-46db-9698-8207530756ec", "sighting_of_ref": "indicator--f1ab9c18-752a-4f7d-aa46-7d6fe2b041fa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--345bf6e2-2ac7-4ca0-b5bd-3d290cafca00", "sighting_of_ref": "indicator--be25f8c8-2a90-4899-a8da-9973d19f89a2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f7af92-4b3e-4417-9307-49275c623512", "sighting_of_ref": "indicator--177f8513-c61a-4bd9-bdde-fec9622f7d9a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2b3b84-6a5f-4122-975f-9354bc2e9a79", "sighting_of_ref": "indicator--c85cf6bf-44a5-4d90-8c53-f5aa4724e82e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac290830-961d-4745-9083-6d6a89285ad7", "sighting_of_ref": "indicator--5f02d088-0cba-40de-85a8-d546ef71294c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02693dfa-af09-475b-bf65-eeaddd582574", "sighting_of_ref": "indicator--ee394af8-dc73-4f36-b0e2-d63d4b37c1b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e73188b-c130-465e-9080-7536cfdd26d0", "sighting_of_ref": "indicator--c1cdd3b8-f0e5-4889-ab2e-c7540ad80b73", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a418656-677f-436b-be92-6e4c2865255a", "sighting_of_ref": "indicator--b0e06260-d648-4516-baf6-23de7e5a86e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda5fd9b-cac3-4baa-8505-74652ade58ce", "sighting_of_ref": "indicator--b36dd9f5-24ba-4bd2-8a6a-211ae78b0488", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a6ad55-367b-4f21-b85d-53019a0645e2", "sighting_of_ref": "indicator--7129f971-134f-47ef-a44f-227abf534dfd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80e78ec-9395-4a00-843f-72f3220936ca", "sighting_of_ref": "indicator--bdfcdf2c-7bd3-460f-8ac1-8f51e8d0d910", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbac056a-5e74-4414-b983-a3bc4b55856a", "sighting_of_ref": "indicator--957a4ef0-8fd1-4b97-be9f-8d2b0b86a8b1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b22dc2e-ba20-4e6f-aa30-d1f6811eeb28", "sighting_of_ref": "indicator--165f4cdb-bcb1-4b4f-8e49-e09d66469188", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb0a424-14d3-47b5-ab3c-d6a5af4d5429", "sighting_of_ref": "indicator--fe6bc299-ea00-445d-85ac-edee700d1d48", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d99fc9-4ea1-410f-962c-4ac6ca712a3f", "sighting_of_ref": "indicator--7cf9ffd4-b79d-4115-8d09-c6240572ff91", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7050d57d-9328-4a7c-b7ba-b4d1a110dba4", "sighting_of_ref": "indicator--5d889b29-5874-480f-9664-f99ed807f82c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be0fcb0-6d25-47fe-9954-8a890b1a51b4", "sighting_of_ref": "indicator--8881c614-8c69-405e-8137-e23a70bf1d6d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f42df30-03e4-4cfe-bae3-c5458b029590", "sighting_of_ref": "indicator--3c81d69c-a371-4b00-ae15-31b745871a44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a6b454c-916f-4083-ae8c-cbf8f403253a", "sighting_of_ref": "indicator--e175989a-ce45-4f59-9fac-5789e0cb1510", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96248173-6074-40a7-ab42-a4b0350eaf66", "sighting_of_ref": "indicator--0208b927-2436-4495-85a0-1e1ad2524d4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505902a2-2a73-46a0-a3dc-6fb0fc67b59a", "sighting_of_ref": "indicator--7e19cb8a-c6e0-4218-b55d-38488ec5c9e8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee15e4b-e08d-4bd9-9b94-b5a866c2c914", "sighting_of_ref": "indicator--2451c74e-f1b4-4607-9734-2fde2d45aecb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb5b44c-3559-459e-a787-9d578447533e", "sighting_of_ref": "indicator--61590178-112f-4f2e-bba6-7a9623ffa3d3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05cb7fcd-a6e1-4637-b478-18ced4a0d8e7", "sighting_of_ref": "indicator--c25d9256-c7ee-4e16-b07a-fe73e1e4f3ee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8514e3dc-a157-4b07-a47c-64244a23b62c", "sighting_of_ref": "indicator--52dc3a05-d1f1-4dce-a7fd-50055b44f5f1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f58d20b-6ded-4bc3-a77a-d2f3fc1db8d2", "sighting_of_ref": "indicator--a6d73791-54fe-4659-8f33-f9462c59f6bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad43b143-bd5a-4a95-a614-40e6e84d06c9", "sighting_of_ref": "indicator--166d1e01-5e51-4e1e-894a-a76a94782098", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f9c3bb-ed44-4685-87fd-2b58fc5434c9", "sighting_of_ref": "indicator--166d1e01-5e51-4e1e-894a-a76a94782098", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4e00bd-9cec-4248-863a-41981e65c60e", "sighting_of_ref": "indicator--abea62eb-17fe-4586-8037-930c7f17bbd9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de0de86-4f79-4f52-bb42-2df23e22bd4b", "sighting_of_ref": "indicator--d1b434c2-230c-49f5-83d9-d0962f67fa68", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a344cb7-ecf5-4967-a76b-7bedc68505ee", "sighting_of_ref": "indicator--b242b486-dec1-43f3-8c23-57666ec00e23", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0807d5-93f5-46fe-b85d-c49b42eb76be", "sighting_of_ref": "indicator--f500b9a0-60f6-4014-88d6-e99d94b46775", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2e92812-20a4-44b8-8232-33dfa4d980f6", "sighting_of_ref": "indicator--c87dbb09-97d6-4aa0-a132-17c082b7a803", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f7c3d3-3c36-43a4-adaf-c34cdd94af98", "sighting_of_ref": "indicator--9db03a2d-5059-4b1a-b613-0895375f352a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f80d4fd8-6d74-43d9-bf2d-f380d41db413", "sighting_of_ref": "indicator--97263cd4-63e7-469c-a88e-f2f5c38d52d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff1a966e-a565-4c2a-9a7b-6c6778380018", "sighting_of_ref": "indicator--f594dac5-76d8-4da6-884a-9313b08d3769", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bc9570-ae86-49a3-a8f9-5a71b76f249c", "sighting_of_ref": "indicator--50d5e6d8-825b-41ce-9c7b-841f3d796c16", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff69eaad-1fef-4eb8-9412-039b1a40151c", "sighting_of_ref": "indicator--8c05a178-0031-4229-8e9f-bdf8d45b54de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62f5b065-62f2-4827-bd7f-c525f0771f54", "sighting_of_ref": "indicator--760bb588-38f2-49f7-9a8d-ec1512b29f8d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fd2513-f872-47b2-bf09-889012e05972", "sighting_of_ref": "indicator--4035d3e4-ba52-444c-9c6a-6a89c67249e2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a492b3-88d1-4da7-8ff7-c617f30f2a4b", "sighting_of_ref": "indicator--65f0fd31-44b7-4e35-aad1-24429dbf11cd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4559316-c898-4461-a6ca-8478402668f5", "sighting_of_ref": "indicator--58739d3c-1603-4beb-97bd-2b2a97e4c801", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c580d6-f27c-453c-84fa-eae7080a7e9c", "sighting_of_ref": "indicator--995a3423-d572-47d6-b292-786ea2a76b8a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380c40e1-ce94-404b-ae1c-0149a1b2187c", "sighting_of_ref": "indicator--e78f5581-4165-4543-86c0-c66e46d8200b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0900db89-06f3-45b8-af5d-d8ffb1ffc83a", "sighting_of_ref": "indicator--c6ba0f31-e5f2-4d6f-8221-404a1170446c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369a78be-31d4-4ca9-b7cc-415234181b27", "sighting_of_ref": "indicator--b0c84758-585d-488a-8ab0-3f202c352eff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d692f3e8-9511-4c71-9c64-a0b94dd8ddb7", "sighting_of_ref": "indicator--3d4126ea-5930-42bf-9428-deda6f4dda5f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d162a462-e892-4ab3-a589-4e2f9e136d72", "sighting_of_ref": "indicator--d796f84f-ab62-4408-b798-2f84ba727540", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1014d0e-015a-4e75-b163-97704bfe845d", "sighting_of_ref": "indicator--e01ef7c0-f5dc-4aa8-ac3e-b028c99086df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--216e13fe-9060-4bf7-bafc-7d905cf70319", "sighting_of_ref": "indicator--5afa06ea-0a4e-4f82-a39e-5fad3d25873f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32a33bc-5aad-4d52-958d-557d2b565e7d", "sighting_of_ref": "indicator--78257823-e181-4507-8be4-238dfe4ca0b6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee765a0-fbf0-4f17-8f58-7cf8da7c01b3", "sighting_of_ref": "indicator--0ae92826-1f7b-4c49-b97c-abdc53f7d989", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b223401-bede-4101-83a0-67133430b86f", "sighting_of_ref": "indicator--741f0364-dfce-414f-b60d-f5493713c25b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e28c0299-09f5-416b-a337-a86cb65381ff", "sighting_of_ref": "indicator--8f43a184-ec23-409e-93ca-88238fc0ad5a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b7702e7-f924-4956-80c1-af4d0f949334", "sighting_of_ref": "indicator--f50142d8-8e74-40b1-bdcb-bfd8adbbe2c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15d540f-7296-46bb-9a71-8f4d8e945738", "sighting_of_ref": "indicator--90b41c98-274e-4353-ae15-160418028660", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75a0f943-3199-4500-b6f4-237b1f7f50f8", "sighting_of_ref": "indicator--9bf45495-0c86-4c1a-9ca3-6d98456ff4ca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77b0c2d-7177-4b54-ba82-a634ca534499", "sighting_of_ref": "indicator--2d83afd6-9d50-4316-937a-2d982f1bf3f4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5f5967-6973-49a3-804b-7b9fa674c925", "sighting_of_ref": "indicator--f3784aa6-db01-45c4-9290-a711dcd78459", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d4215f-e01c-4457-89d9-15dd60b1dbd0", "sighting_of_ref": "indicator--dd86413b-0bf3-4a04-87aa-bc8984dcd479", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa2b9244-2945-4607-b9bb-bc65966062ee", "sighting_of_ref": "indicator--1ed29842-c8bc-4174-bf73-f0e08f33b9d6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ba5c24-8526-4e89-a7c4-0597774e0e17", "sighting_of_ref": "indicator--8e0dc859-a0e9-4db5-b601-23a2c5cbb4f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ee6698-a71f-4c4f-b958-1aef0dffb678", "sighting_of_ref": "indicator--02dabd57-92d0-499c-936e-76c06344be4c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a97789-d758-4a99-a984-ec742eb9384d", "sighting_of_ref": "indicator--f0a1683f-80c5-4dfc-aaa9-5a9f153dceeb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffa1836-1192-4e4d-ace1-3431775f1e17", "sighting_of_ref": "indicator--2c7753b4-e02e-431c-88f0-d71d6bbeb97a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fc662f5-f018-48c0-9974-9008ba077a8f", "sighting_of_ref": "indicator--0ff8761f-b561-45d8-839a-639b2e2b3ad4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2967e569-89d2-4222-8ee6-f00955f7351b", "sighting_of_ref": "indicator--d3540d6e-341c-428a-9ead-1bffaa1fdbac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22add75d-74b6-4373-812f-15644efcec20", "sighting_of_ref": "indicator--cfe206f4-53f0-4832-973f-5a951f124954", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7780f456-0c2e-4456-ba08-26c24e24fd21", "sighting_of_ref": "indicator--ab151bb3-dd28-4cee-8cb4-ada20e114126", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a2771f-4749-47b5-9928-dcd605d010ce", "sighting_of_ref": "indicator--3282dd20-c5dd-4810-a195-2a8730188ee7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba6a369-2d2a-4d48-b27a-d7d6bb9e9669", "sighting_of_ref": "indicator--1f7e9491-566f-4f42-8c87-1a3de92bd840", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b237cb20-1f6c-43b7-973c-650be2cbb98c", "sighting_of_ref": "indicator--1f7e9491-566f-4f42-8c87-1a3de92bd840", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ab25d52-eb87-4c0c-9ad2-16a9cfc8e861", "sighting_of_ref": "indicator--a7b40c04-b075-4f3a-ac01-123a11def3b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b366705e-496a-4e4a-8508-c01ec7f61535", "sighting_of_ref": "indicator--38ad3d92-4789-473a-90aa-c424fdcb7943", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05db3be3-1b1d-4567-ad22-8193d898b268", "sighting_of_ref": "indicator--17b72eb9-ae09-4b1b-945e-944c1af94cd7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a6ebe6-dbf3-48b6-9317-02eb3d074450", "sighting_of_ref": "indicator--95dbc17c-5128-4a5c-bacd-ee2eaa2d5829", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5670a30-dfdb-4678-b097-33f9c295f85f", "sighting_of_ref": "indicator--2c790daf-699a-4a94-aa0a-6134ac0ba1d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0d4bd1-0ca9-4f60-94b1-f6d958dd39be", "sighting_of_ref": "indicator--d09435a8-8fce-4665-8a47-1be2ef9ac393", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf5332a-ddd7-4d73-88e9-b65f38f73c69", "sighting_of_ref": "indicator--d09435a8-8fce-4665-8a47-1be2ef9ac393", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c3c5dfa-3a68-4e39-bdd8-e51d9aa06967", "sighting_of_ref": "indicator--7daf9d27-7c37-4400-a800-4f285bab4934", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73371543-6c70-4464-a29c-56d3ceeb01e9", "sighting_of_ref": "indicator--9e142543-5906-4597-9c26-9e63f5b2dcdf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c061c21-b32d-4f3c-9d14-48943f4171b1", "sighting_of_ref": "indicator--b93ba62f-3c1e-4b14-8d00-0ad458315491", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54af9bbc-77a9-42fb-8d09-30edbe1904a7", "sighting_of_ref": "indicator--f0437c24-8690-4660-b247-5ed1052c9aa5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b000dc2-bb55-4376-86d3-450d36dcee79", "sighting_of_ref": "indicator--567b3a21-9dbe-4292-b571-677232234c72", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1593af36-1750-4fab-aa4f-f916433e528e", "sighting_of_ref": "indicator--22675efc-f43d-4525-8ee9-fbad250876e8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dee5a0-7613-4ea5-bcec-9575f18c281a", "sighting_of_ref": "indicator--d55cee97-833c-4cec-924e-7f01a63331bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d804689-8a7b-49a0-afbf-fbc81079f2ac", "sighting_of_ref": "indicator--369340c1-2905-4d0f-89ef-5ba3e9663b06", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e00a9c-6bbb-47c8-8b2c-3d67c510487b", "sighting_of_ref": "indicator--12876f73-a188-449a-8626-29b77c05b802", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--997b05bc-0669-44ea-9e74-69a818d59aaf", "sighting_of_ref": "indicator--f46a9f0f-43e1-4b14-bbd2-4191487cc573", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9fd305-4c35-4b8d-bc70-3b83f51a79aa", "sighting_of_ref": "indicator--075794cc-2206-439d-9a21-bf0be3d1de6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a2fc69-5a03-4d0e-90d8-3190053a6a0a", "sighting_of_ref": "indicator--450cbd07-f36e-4f61-b04f-e251cd462a28", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090e53ea-d7da-4844-a70e-90b7f92b39e8", "sighting_of_ref": "indicator--0f27c2b7-5447-404e-9239-c97cfbdae900", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2103ad28-1e03-4a17-9825-e618d245cb64", "sighting_of_ref": "indicator--10539681-1e91-4331-a99f-92f2c5089839", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557c3def-2248-4357-9fc6-acc7c17e6efa", "sighting_of_ref": "indicator--19d241a1-c8e8-40d6-84ba-6561dd3645a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf10b340-4cf2-46be-a3f4-a6c26a0444fe", "sighting_of_ref": "indicator--5226385c-d15c-4fcc-af54-8beff21c9537", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764c12e2-5ddd-4c0d-b9e4-105d03c02901", "sighting_of_ref": "indicator--2f7b06d6-1ac4-4632-afe8-d27bf9e7427f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ee1e0e-99d3-46b8-940f-3c26bd729250", "sighting_of_ref": "indicator--63e81e66-69c7-4ebf-845c-776aa25fde40", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbb07bfb-5a1d-454c-b61e-e24f9e6fa9a9", "sighting_of_ref": "indicator--06c786d8-cfd7-4fc5-869f-9278d9128f08", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bb3f13-3f2d-4040-bfce-cd28ad5702c5", "sighting_of_ref": "indicator--d492d92f-79e2-476e-938b-ed886027656f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de2eed59-cbbb-4286-8895-186d75f182ba", "sighting_of_ref": "indicator--a45358ab-2d4a-46f5-9d55-7483986cfc38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba2a2d4-6355-4e5e-92d9-220a3ca9d94d", "sighting_of_ref": "indicator--723260a2-7069-48cb-810b-387b4d019e90", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef2cddc-bc0a-4177-99ec-b18247a02642", "sighting_of_ref": "indicator--3aba01bd-0aef-471c-9d3f-1106f3089c1c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeacc312-5b04-4fc2-bad4-56ae5560f6ed", "sighting_of_ref": "indicator--7529c0e6-558b-4aa9-a538-639f7a677338", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859f06a9-c8da-448f-8c07-361767e7d75a", "sighting_of_ref": "indicator--16e75958-0a51-4ceb-b494-1b2d1579fca3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcead2c-217f-4ede-afbb-1fd5e73f1283", "sighting_of_ref": "indicator--400eb8b5-9669-4bf4-b211-f311b9aa8f88", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--361e151a-a1a3-49dd-8fdf-fa7f0a91b2a0", "sighting_of_ref": "indicator--447064cf-7a5b-438d-a091-8485ef3c70df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2250be98-27f5-41c4-a96b-4fa433a2db89", "sighting_of_ref": "indicator--75596191-7a8d-468b-9c51-95648710209d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be37a1f-40f2-4572-a845-dda8d30315ec", "sighting_of_ref": "indicator--4296f95b-3b1c-4c1f-ac47-7a02ef64a02c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79ecb667-4f26-4e32-86fb-f6ae0f0242c4", "sighting_of_ref": "indicator--26b9d1fc-554f-4ed2-bc2f-244c899929c8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfd2644f-8733-4ed5-9f64-82059de24eff", "sighting_of_ref": "indicator--9163126f-7180-45a8-84e3-1d9dbb0e8b61", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d0ed4c-ca8f-4b31-9d8f-93e869f0f1f6", "sighting_of_ref": "indicator--b42c27e7-1237-4f63-af54-a585e432819b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3815bc2e-8f63-42b0-8a2c-2afb57df111f", "sighting_of_ref": "indicator--03518f9c-8cd4-4dbf-87cf-aacf02e734d2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a58a35-b3bb-4ca1-ae7e-8f0d8eb4e6e7", "sighting_of_ref": "indicator--03518f9c-8cd4-4dbf-87cf-aacf02e734d2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff863af-91f1-4df9-8057-67bdf1d3aa89", "sighting_of_ref": "indicator--d96ae741-006d-4257-9551-8b7670928bc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e51e5f8-fc94-4dbd-9e38-eea97418d5d7", "sighting_of_ref": "indicator--190fd202-477b-4ecf-9c1f-64f241076919", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9da99e-1bc6-4410-ac86-4403d282a7db", "sighting_of_ref": "indicator--76875076-afb7-4f72-a7bf-25e6a065671b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58adab9d-d99a-4062-b041-b0aedf17c54e", "sighting_of_ref": "indicator--8a02ff2c-d8ee-4fd9-b4eb-4b42cb3c6d59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--982d003d-db1e-45ad-b7c6-ee9e5bcdd66f", "sighting_of_ref": "indicator--5ac7883e-4ab6-436a-98d1-eeed4696caee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5550bf06-1931-4565-9912-3e6fc361ef02", "sighting_of_ref": "indicator--4511e233-271e-4ca7-8c15-d07fcd1e0ad7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c944d8f-56d1-4bde-a5fc-b2915cfce2b9", "sighting_of_ref": "indicator--04a5cff8-a284-4ce1-ae37-49a7d3ceeeb5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90852bf9-3abf-4ea6-adce-d1c21875705a", "sighting_of_ref": "indicator--c74ae0aa-3c5f-4589-b6be-1cce02aa802d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10237b3b-0e99-4023-8c9b-55eab1ac168a", "sighting_of_ref": "indicator--4327613e-e638-4fec-8eda-bf4a795d9211", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed96c81-a1a1-46be-b49b-6dce1ee40272", "sighting_of_ref": "indicator--a411c3cc-ae24-4f29-ad58-ed3b9b9ab465", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098b1996-10bf-403c-b187-d8951790dc4f", "sighting_of_ref": "indicator--47a910b9-3bbc-40aa-a670-cc38bf691b47", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08ad8bb-c069-408e-b64b-bca678165124", "sighting_of_ref": "indicator--55755c4b-fa26-43f3-988c-123a8755e971", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dfc4b95-c318-414d-9da0-711bf56d64fd", "sighting_of_ref": "indicator--d58795e5-115b-4d78-bb5f-a7546fb52542", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412d4980-632e-4c68-8feb-b0cebcae2c35", "sighting_of_ref": "indicator--cd1d80b6-8101-425c-985f-34acf1bbd73f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9468ffb2-0127-4db1-8fa6-e5bcc79f716b", "sighting_of_ref": "indicator--6149652f-52be-41c0-82c0-f99df58f4a32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e528266-4850-497a-9cfd-5a6c75c188cf", "sighting_of_ref": "indicator--9c0f815e-bb29-4062-a586-4787e8b5790d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9db6289-4624-4843-adf5-dc3221440e22", "sighting_of_ref": "indicator--41bdc9f9-f4bf-4685-89db-fad7d04f0434", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651512c4-ebfd-4b72-809b-21bd74a2a0e7", "sighting_of_ref": "indicator--fa7dd599-a1b3-499b-9dc1-710443369f8d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e126b53-2bb0-4787-a52a-9c745a782323", "sighting_of_ref": "indicator--79e13e2a-d201-484d-9215-1a6ae2e0b0ab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d075e55-f926-43ea-993f-39e166a2d91f", "sighting_of_ref": "indicator--896c46b5-d397-4307-adb8-018617388cd9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daab3432-5543-4770-badb-651f2b4ed59a", "sighting_of_ref": "indicator--f9c2f9f8-f522-4389-80c7-c00355560c0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1e554c-3ca6-4ed5-9cd8-1f7daf1fc811", "sighting_of_ref": "indicator--eedc208f-d1dd-45b9-b383-a9ae7fa99492", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb31ef13-6fe3-420a-a3d0-d5782be98134", "sighting_of_ref": "indicator--3122a3c2-0131-494f-9c11-0f772b8762a7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62aa574-8076-43dc-9c33-756edc7b5d7c", "sighting_of_ref": "indicator--fad1b31b-e9b7-41eb-95c8-29e6cfb34cf3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c19762-d79a-4802-ac4e-43e5769588d5", "sighting_of_ref": "indicator--c6a3079b-05d4-4fff-a89b-a86e2f8a8752", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c215997-68e8-40cc-8631-c527b0c5b1e9", "sighting_of_ref": "indicator--5f912aef-d578-4a68-9dd7-569d42064753", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eee6080-68bd-454a-b091-ea04975ed2b6", "sighting_of_ref": "indicator--1b6b8b6d-391b-421b-a07d-6c0589042947", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355c4f2d-365a-4ac0-9848-e3c152dbf98a", "sighting_of_ref": "indicator--d8b36661-51e5-444f-81a5-a3adf282dfa4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89e96e0e-5223-49ac-b7a5-2a718223bf22", "sighting_of_ref": "indicator--a4127a4f-b9b9-4c8d-a365-f72d02eb0891", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8bfd30-ab1e-44a9-9a05-244c4c197c51", "sighting_of_ref": "indicator--e9a278b4-db64-4dec-8a43-a78d1d516517", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584b6c37-7503-4b53-9504-d4e1365dc516", "sighting_of_ref": "indicator--b5b8f7ef-9103-4d29-ad83-97b301d7ba45", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7714c2b8-f2a8-429e-aff7-10e3f768db40", "sighting_of_ref": "indicator--2893b02e-4370-445d-a395-ca6565867bde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fc9debb-328e-4a66-b02e-074da21c0663", "sighting_of_ref": "indicator--daa72037-0364-4db2-bb06-75e5eef62ca4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd9b7aad-fcf2-414a-b20b-7c201457e46b", "sighting_of_ref": "indicator--50b71427-6fe0-4a23-9e95-f6eab34d1e9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6376815-f1db-4389-8fa2-d1ec6cd69019", "sighting_of_ref": "indicator--1d765ec0-e890-472b-affe-d8168e494043", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--831df2db-0bff-4e7b-baff-ca74e5e24867", "sighting_of_ref": "indicator--4ea49ff4-a029-43f1-a143-ddec61546c68", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9869ade9-920c-46be-9d69-302d7f3fd422", "sighting_of_ref": "indicator--b9b3e37f-10fa-420a-823d-6cbcc9111123", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17eff8b5-d2ad-41c1-ae71-793288d79517", "sighting_of_ref": "indicator--9630c20c-f1c1-42df-823d-aa229d7ec3a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b26f012-813d-4376-ade2-ace3f5009c21", "sighting_of_ref": "indicator--ee343165-70b0-4f92-b374-1a83b6d59622", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165b6e53-c7a9-4a3e-8152-fe8a5cff0ebe", "sighting_of_ref": "indicator--dc9edcd3-3421-4062-9d55-a6eca14c377d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045902db-fc6f-4ecf-8fa8-95cf61087a8b", "sighting_of_ref": "indicator--90b76883-cf87-4c2f-8b21-8421a2acb1ad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3363a438-c1f7-450a-a59e-15a6318a6524", "sighting_of_ref": "indicator--d7b90af3-e750-4a8b-8d89-737e0d66408f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7df3bad-2fc8-4644-b65e-aea7b350fc43", "sighting_of_ref": "indicator--38d477f9-fbee-4c46-80e7-bae903f50129", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96fcc3ef-4904-44e9-8bbd-d1bf49c8a2b6", "sighting_of_ref": "indicator--38d477f9-fbee-4c46-80e7-bae903f50129", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d54b588-f6df-45f6-ab39-3bf0b31dd5eb", "sighting_of_ref": "indicator--24168195-494b-47cb-99e4-2d169e6d37de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2058e488-5430-42da-970a-50b12ad91566", "sighting_of_ref": "indicator--24168195-494b-47cb-99e4-2d169e6d37de", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a331ece-36a3-46e4-8cf4-e6e65a2a6444", "sighting_of_ref": "indicator--245457f4-025e-4e89-8092-84c4046a7e09", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1973c2bb-684a-4061-8f29-14e5d44636cb", "sighting_of_ref": "indicator--245457f4-025e-4e89-8092-84c4046a7e09", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90d4631-ae9e-419a-95e0-0824389dccdc", "sighting_of_ref": "indicator--20e34b13-4207-4bb6-8eb3-411f4d95bcf7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98af056a-5adf-4ab3-bf2d-a6d60cbc5d19", "sighting_of_ref": "indicator--20e34b13-4207-4bb6-8eb3-411f4d95bcf7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c74b01b-611f-4060-a71b-6e78c35b447c", "sighting_of_ref": "indicator--c7743724-93f4-4973-abd0-34e86afd4595", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247095dd-0ffd-4a2e-bd29-e0feec59d419", "sighting_of_ref": "indicator--c7743724-93f4-4973-abd0-34e86afd4595", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a8b923-3b4a-4061-ab3c-af769735a4fe", "sighting_of_ref": "indicator--0bfee3d4-731a-4e43-919e-b99846394acc", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a445e3-41f8-493b-bae4-caf88b33a89b", "sighting_of_ref": "indicator--a2a3fc0a-bd09-4c83-9632-c818f14e6562", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83016787-c13d-4de8-a8d5-9dacd5968336", "sighting_of_ref": "indicator--2b75aa80-53fb-426a-a901-0ad7f6a1326d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdbaee3c-f70f-42bb-a582-1e1f519af069", "sighting_of_ref": "indicator--48d98054-a17d-4a08-97b7-9dc078536c4d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a218f9ec-e7f3-4dab-814b-30649da3e007", "sighting_of_ref": "indicator--7173a4ec-c6e4-4b0c-880d-77eb59b6941d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1aec972-b53f-43c6-bad0-fe859a8f53e0", "sighting_of_ref": "indicator--7b067a4b-d81b-411e-bb5b-9f66de69fc70", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1e3ed9-eef2-437d-9c58-b046528cd259", "sighting_of_ref": "indicator--5ab8ca66-fe1b-4037-a97d-18eabce863f4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ada14044-8c51-4180-ab34-93d290bbb9c6", "sighting_of_ref": "indicator--24b9d7ef-14d5-4906-a1ab-9d7f286fec51", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513fb2d6-7f78-452a-a2f4-b040cdfa4a59", "sighting_of_ref": "indicator--510b02ee-5257-4685-9ac2-099f71175328", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c851326-04fb-4fb2-a4bc-0b48021d3024", "sighting_of_ref": "indicator--5a2f960f-1616-4eaf-b56a-00707f1d48fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--448ebe18-04b3-48ec-85ab-4ef4a84595ab", "sighting_of_ref": "indicator--212c8c92-c83b-44d9-8900-69a50ff6262a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a3e9dd-1993-4f35-b5c1-494f31160a94", "sighting_of_ref": "indicator--b4bfca9b-13fd-4143-98ac-1f13e0898363", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30757760-09db-41cb-b2f5-f9c68db6a48a", "sighting_of_ref": "indicator--24214ef8-f2e5-407f-9bf6-f0772abc6fc4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34b1b90-d8b8-4ad2-af52-5faa74869d9e", "sighting_of_ref": "indicator--30f3de5a-4d8b-40df-8ab5-c08de907096e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c007a97e-9840-45b1-a353-4ee5c20e7065", "sighting_of_ref": "indicator--7ce43995-64f2-4cb4-b485-f46b7b9d5492", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9473f7f-bf5c-4a3e-af01-62ec51cffda2", "sighting_of_ref": "indicator--7ce43995-64f2-4cb4-b485-f46b7b9d5492", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e1a35e5-81ab-49a3-8ea7-6bb59ed58c92", "sighting_of_ref": "indicator--779bb1f0-68a1-414d-b072-dd2dd2488e1d", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d548ba1c-1527-4e5b-9e8c-f07126e26de8", "sighting_of_ref": "indicator--2a46168f-443c-454e-97fd-a1a137a832d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd41c31-10cc-4ac3-b702-8109cab3a004", "sighting_of_ref": "indicator--2a46168f-443c-454e-97fd-a1a137a832d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49412d5-3ef0-4c0f-9296-c1985faeffb1", "sighting_of_ref": "indicator--902101ef-a75d-45b8-8a58-62d6bb67ef4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb4ded5-35e4-4a44-a127-917d6ea71bc2", "sighting_of_ref": "indicator--902101ef-a75d-45b8-8a58-62d6bb67ef4f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb89fb00-2165-4100-9ef1-4c7a6611df3c", "sighting_of_ref": "indicator--f8d0da3e-6cca-4726-8cb6-a68ea0826c0c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95abed7f-ba03-46f0-9854-a417b21790ae", "sighting_of_ref": "indicator--f8d0da3e-6cca-4726-8cb6-a68ea0826c0c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae63b50-2c98-4a15-9612-32855e344a25", "sighting_of_ref": "indicator--456e9062-3518-4423-be3a-0efbbff7e5c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902775dd-187b-4315-9de1-f38dc6c1f219", "sighting_of_ref": "indicator--456e9062-3518-4423-be3a-0efbbff7e5c9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee90c7ea-0063-4d08-ac14-c48fda55e3ea", "sighting_of_ref": "indicator--2131f7fe-d354-4c40-90d7-ed8b8608d63f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072a6802-b58b-43d2-95ef-b3fa883b70c5", "sighting_of_ref": "indicator--3b08998e-2adc-478e-81b4-f49857376b11", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f4e766-61bb-406f-8101-b3a0e7dcf4b5", "sighting_of_ref": "indicator--85022bcb-1f29-43e9-be60-5f929dbc3cdf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd705982-4869-4d2b-a3cd-33690ac8a49a", "sighting_of_ref": "indicator--49e4cea9-245e-44c5-8366-ab6c8d0c1c8e", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8881a732-f027-4bb4-8996-b8cc70311f55", "sighting_of_ref": "indicator--6c06cb28-d8ea-4343-83fb-c3bf70fcb187", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dac3972-ec2e-48bb-84ca-a36482128533", "sighting_of_ref": "indicator--7a10d6ee-f99d-42db-90ef-3281e867eced", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4d765f-f22e-40cb-b494-8b4a8a1258e0", "sighting_of_ref": "indicator--d2a71769-9bb1-44ea-aafb-e4d55b71aa4b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9279d075-b590-4473-9a48-25d748be1ba0", "sighting_of_ref": "indicator--d2a71769-9bb1-44ea-aafb-e4d55b71aa4b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9e50a1-5bf2-4cab-ad77-c6219d3cd6e7", "sighting_of_ref": "indicator--0858795b-34ce-42c1-ae62-d593aecc0997", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e784a5-d3e6-4d26-9de4-a30d73b03447", "sighting_of_ref": "indicator--a49b3219-f00d-48f9-9ddd-19f8b776d34e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6b7504-953d-4962-9f1a-1fa6eb8e142b", "sighting_of_ref": "indicator--470248df-9d45-4d8e-aeeb-dca714e88ce9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3d0410-6af5-44bd-9d09-a975661ca82e", "sighting_of_ref": "indicator--17039a8c-e834-478f-b489-5d31e32bd087", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4251fed8-eed4-43ed-9abc-1741660f3af6", "sighting_of_ref": "indicator--17039a8c-e834-478f-b489-5d31e32bd087", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c11fab42-33b7-4637-a1ee-1c412fadaf32", "sighting_of_ref": "indicator--996add68-70b8-4973-a94c-3fafd34d0a48", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed7fdb5-f390-44ac-864a-f8d7d4b313d0", "sighting_of_ref": "indicator--b209cf0b-0e94-4f53-b176-dfbbf5dc52e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274936c8-b7ac-48a3-aa06-04bfb9f4b729", "sighting_of_ref": "indicator--b209cf0b-0e94-4f53-b176-dfbbf5dc52e3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a51f6e3-74bb-4e87-88b1-f27167dcfcdb", "sighting_of_ref": "indicator--0652334a-a84c-4da5-964c-a2fe8f6f30db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc900736-76c7-4119-8d40-5fdea98cc880", "sighting_of_ref": "indicator--0652334a-a84c-4da5-964c-a2fe8f6f30db", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f31f509-d520-42c2-81dc-61f748f4bbfd", "sighting_of_ref": "indicator--dc222f64-842a-40b0-a972-5ea98aa078aa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474cc935-d44b-4930-ae93-4f1c65057f7a", "sighting_of_ref": "indicator--dc222f64-842a-40b0-a972-5ea98aa078aa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c532acc8-9a67-4d38-90c1-076540ef911c", "sighting_of_ref": "indicator--9501128d-9699-4421-9b13-6441af84e860", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4d291e6-e882-4dbc-b935-17b28aa4cbf5", "sighting_of_ref": "indicator--670da889-d6fd-4f86-a2f4-28a0a4f29c20", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d2b5890-f6c4-4623-8ddc-577e02d300e5", "sighting_of_ref": "indicator--70c6b4e5-7278-4a22-a657-734f48942f5b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da297c48-7428-476c-bdc0-34d90d3be191", "sighting_of_ref": "indicator--c911e3b5-bcd6-462a-9b09-ef232dbfa3e6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed2696a-7975-43ae-bf1c-bdfcb1efd70f", "sighting_of_ref": "indicator--0a895430-490e-4e0a-9c35-8e35a526f783", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad3bb59-785c-46df-b05b-99f85ee41f77", "sighting_of_ref": "indicator--6ad2dc79-3fc4-49a0-9b2a-bdda12a3886b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430def9c-ab09-47d9-867c-356d3a865f14", "sighting_of_ref": "indicator--8df3b549-829d-48d7-9add-aeea2e491ac2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba45ec40-ccb3-45d7-8bea-0511e4fb55e5", "sighting_of_ref": "indicator--8bc45b09-4839-4f3a-b85e-d129ece54c81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c59517a5-3d92-4744-869e-e0a36e69bca1", "sighting_of_ref": "indicator--fcf355d4-33f5-418a-9637-acf0dc8de28c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78403290-07e9-46fb-a5da-3b852e3624d1", "sighting_of_ref": "indicator--82acf7b7-a1c5-4fe9-9048-0cda81b375ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418a60e7-a626-4f5d-ae34-daa7fe60e75c", "sighting_of_ref": "indicator--131c8307-d938-47e6-9d79-101d33bf0175", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f1ef59-dd29-4db8-b56b-7767f3bef35b", "sighting_of_ref": "indicator--9a3076fe-34de-49e8-8393-a354a302a29e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf31f84a-ed67-4e24-adb5-eb73256a5c0e", "sighting_of_ref": "indicator--4a7f76a4-5441-4a01-b985-cd1ba0111432", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca3d433-ffaf-4913-af17-09deda55fa48", "sighting_of_ref": "indicator--702f8dde-7164-495f-bd2b-007bd70085ab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23a6568-606a-420f-be86-1a157ae81a61", "sighting_of_ref": "indicator--b4b25a8f-91ea-4cf6-87ed-521fbe4dab29", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4b4bfc-f877-47db-822b-50aef938d20d", "sighting_of_ref": "indicator--cd5eaffb-c59b-4a43-bf92-1280276f4d6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2f9e8e-8227-40ec-9d13-e368bd8f3934", "sighting_of_ref": "indicator--8f721aa3-a2a5-47fe-934f-6851347303dd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475fedec-727c-4174-9bfa-4124195995b7", "sighting_of_ref": "indicator--83106641-4bd8-468f-9b26-2a66a3475436", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd771207-0a57-4ddc-8e64-7fa66432fae1", "sighting_of_ref": "indicator--8fd0ef20-edb5-4dbd-9706-672efbade60c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65f368d-f719-4722-aa46-317b856a2eca", "sighting_of_ref": "indicator--2bc957d0-024b-4521-8bd8-57e2a0772718", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60be842-6e0a-4fdb-8fc5-b2bc1986d7b9", "sighting_of_ref": "indicator--45dc02bc-aec0-49a6-a7ac-9f0064c7676d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b79dbd5-d7c0-4781-bb4d-034bee6c44ef", "sighting_of_ref": "indicator--2873c7f0-7fa4-45a6-a9ca-04440099b854", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--639571f8-8336-4b57-9d5c-6edcee9a1662", "sighting_of_ref": "indicator--e7c2435c-c8d4-401f-bf3a-5c01d5e39a51", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6cd7893-34e5-403e-a413-9e248a9e3c58", "sighting_of_ref": "indicator--212be20d-2fe6-4d98-be9e-bb7162ec634b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5213930b-bdba-4d14-8928-f6380399b4c4", "sighting_of_ref": "indicator--6d30860e-93ce-4977-af77-41c5096e5fd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cb3333-2510-4839-b3de-95456878bec3", "sighting_of_ref": "indicator--ec9bded7-9a62-4c65-8921-103f12ec136a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac9ae89-019b-4ee0-b70e-670d42c09d72", "sighting_of_ref": "indicator--08ec01cd-918c-4ede-b78c-25309073e145", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee8409c-1fc2-400b-8e14-a76743583b4a", "sighting_of_ref": "indicator--7be0273f-af03-4379-b222-8f063ff92662", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d45a47b-d35e-406d-a8d3-770d7e7ad3a1", "sighting_of_ref": "indicator--0c78eca0-8b1e-4554-ab71-980b06a79b56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f77d95-0d3e-4936-a363-aa98071ba830", "sighting_of_ref": "indicator--a222dc7d-d56c-4758-892a-d656364a025e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b57fd11-c299-4ccf-86df-00f521d238ad", "sighting_of_ref": "indicator--8a9c44d7-5298-43a7-9edd-54b5f5b4ce3b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b78108a-4f29-4e5a-901e-8a4381e55f44", "sighting_of_ref": "indicator--fc9be99a-c6a0-463f-b700-0fb6950d0b06", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c67bb91c-67e7-47ed-9f7a-1ad044cf7d88", "sighting_of_ref": "indicator--e2906c37-b352-4e05-9fe4-09e03101694f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da8cb93-ce8d-4511-85ef-828c26c46ee0", "sighting_of_ref": "indicator--d99627c0-7551-45ec-acc8-cc4943873c49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe5dfae-4d14-4b25-9af6-271eb5d51fc1", "sighting_of_ref": "indicator--b286c3c7-6e27-4f2b-8d2e-4403f82018d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca67acdd-c806-4091-b46f-bf80f5badc56", "sighting_of_ref": "indicator--a57d548f-f287-4969-af7e-1d99db3c8628", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57d86a5-16b1-4cfe-b3af-c31dcde5af9b", "sighting_of_ref": "indicator--eb88089c-94e3-4fc9-935f-72c6f0c5c9db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c2e1b7-00f8-4376-8039-4196f9fec675", "sighting_of_ref": "indicator--0700c739-e92a-42dc-9ed0-5f4bafe509b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67230e6b-d086-4210-ae13-07217e8e4b5a", "sighting_of_ref": "indicator--cb33f906-b718-4b0d-87bb-3cb10fe02acb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bf03441-999c-4ff5-80ff-452283b52858", "sighting_of_ref": "indicator--89f2e6fe-d64a-4af5-95d8-c8cc527adef3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a46fb5-a55d-4e8f-bf8d-c60349100c09", "sighting_of_ref": "indicator--21b04049-b7be-45e6-8e9e-b6345291f79a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972e4a2f-14b4-4d7b-a892-8cb844fa85a8", "sighting_of_ref": "indicator--93501b79-d2ac-4a44-8e5e-d6570ce1b737", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc13d434-cacc-479f-861f-1f8a5416724e", "sighting_of_ref": "indicator--30940912-6fd5-4a42-b3e7-8c8c83bdebe2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37781f56-affe-46cc-872a-3333b853cd0c", "sighting_of_ref": "indicator--28ef0764-69c7-4378-a7b9-e8c14fa58b4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea48b24e-40e1-4df0-891c-832265ea8091", "sighting_of_ref": "indicator--0970b01a-4d9d-47e4-aee4-bb99afb4d8eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03717eb-dc2c-4b99-ae73-c84287ff4964", "sighting_of_ref": "indicator--426671bf-21ee-493e-b898-5d14c5f267e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237f13ae-2f33-4f76-bba3-fdfbca8729d5", "sighting_of_ref": "indicator--09fddc67-9ad2-4c42-b381-696a6f9a2126", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--913466e3-007b-4a86-bc82-7b10a73c1077", "sighting_of_ref": "indicator--ac352ff7-5587-4a7e-b68f-c2f8e60aa388", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfec6b15-31c3-4aeb-a8e9-e28910787b79", "sighting_of_ref": "indicator--d6b8d5d6-786d-4d93-a18b-60e79eccd352", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b8e5c22-5e35-40f6-8f70-ee1b47b995da", "sighting_of_ref": "indicator--60d33b74-3af7-4e00-8282-20372f72aabd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4528d33-fd3e-4816-8cbb-a2c989bf3fbc", "sighting_of_ref": "indicator--e7bedffe-e49b-48c9-abc4-6056c98eaec4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17d940c7-800a-4d36-9414-dec471c5e24f", "sighting_of_ref": "indicator--9ec29e07-9a57-495c-ac89-5d0acad7b246", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a83ec5-44d2-41cd-b917-c471bdb2c066", "sighting_of_ref": "indicator--9cd54805-2105-4748-a04a-8547f3ff705d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc775f24-378a-47d2-a929-e606bf555eca", "sighting_of_ref": "indicator--870ae136-2f5c-4a32-80a9-7ed3614a0a05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474b9c6c-374f-4445-bd73-e340374bc06e", "sighting_of_ref": "indicator--6df1c037-8245-4e3a-a0b9-bd77bbbeed1f", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc30d597-1ea0-4c6c-839b-d9169ad88c95", "sighting_of_ref": "indicator--6df1c037-8245-4e3a-a0b9-bd77bbbeed1f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30a85674-cf0e-48bf-9976-2c479bfa922f", "sighting_of_ref": "indicator--c58774f9-7967-46c5-8d64-d0d4e0ec8527", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2befb64-f4eb-4b6e-8401-b6ff7894c52d", "sighting_of_ref": "indicator--b982be03-af62-42b0-8337-e269d459c955", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71caef86-e95b-43d6-b4c7-3c7cb4cdd20f", "sighting_of_ref": "indicator--b982be03-af62-42b0-8337-e269d459c955", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdae4ab-5f70-4dcc-a8e1-0325494b7649", "sighting_of_ref": "indicator--810ce467-39dc-4821-807e-c133c80210af", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae958d2b-d034-437a-bea1-0d294ae8d2ee", "sighting_of_ref": "indicator--f36e94d1-45a5-4381-ae39-b762b52082b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e652b5-7d2d-41c8-a923-01e196f99252", "sighting_of_ref": "indicator--f36e94d1-45a5-4381-ae39-b762b52082b8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--989d1bf9-9b63-4803-8bbf-e8c96513bb04", "sighting_of_ref": "indicator--fe5dd18c-2004-44f7-a306-91e3d8aef41d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92a6805-524e-4234-9888-b49c54ad8a48", "sighting_of_ref": "indicator--251eaef2-81ca-411a-bf38-b5d164a4ad15", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a970b33b-6180-4e8a-b534-db21ed09e1a9", "sighting_of_ref": "indicator--d857cf33-b5ef-4368-9c7d-be107806c4c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83085331-8a91-477f-8489-993a3df7a911", "sighting_of_ref": "indicator--f8eb0769-1c29-434d-b96d-19c3658aaa2f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090ab003-0b4f-44a1-8303-beb8a44e6d56", "sighting_of_ref": "indicator--f8eb0769-1c29-434d-b96d-19c3658aaa2f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee79f346-0fc3-4104-91b4-9102ecb1e09f", "sighting_of_ref": "indicator--6b2b5fea-c8fc-403d-8843-f2beac445ecd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed714096-b346-4b9f-92f4-b30c639beec8", "sighting_of_ref": "indicator--154500ec-b26c-4799-a213-5e6de8229bf2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c2b811-5c69-46b4-843d-981f7bb60829", "sighting_of_ref": "indicator--030861d5-c50e-4352-84df-1885a903cf51", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03a5240-326c-478f-803f-69eeb9933a56", "sighting_of_ref": "indicator--9c44191a-9b6f-4bb3-997d-a9d4c9700f9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4fad28-7486-455a-bb1c-4b7ef13e80c2", "sighting_of_ref": "indicator--f2eeb4e7-0673-475b-9190-ba85637fd889", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e727ff10-812f-4493-9180-a4c6a9e0eafb", "sighting_of_ref": "indicator--d92ca470-fd08-49db-82bc-9485151dfb85", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c39ea6-91c5-4e00-8025-9f6b563903ff", "sighting_of_ref": "indicator--d92ca470-fd08-49db-82bc-9485151dfb85", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd30352-17ab-42b1-bf26-0da19e8ca1c9", "sighting_of_ref": "indicator--c2178b17-36c3-4ab1-a46c-8dca8017169e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3966de-2a3f-4a8b-b848-d1fd11e424dc", "sighting_of_ref": "indicator--0855db06-3208-43c1-a61f-b01d517fc323", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6437384c-34ad-4b2e-b47e-c1f4eac94121", "sighting_of_ref": "indicator--9025879f-8bb4-433b-95df-d12262670820", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fd89c7-36a9-42ec-babe-8fd8bd11b2e7", "sighting_of_ref": "indicator--30ee8c77-0df3-44d1-b8d0-ca1839f7074e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08591c69-8140-41f2-a25c-9a45b201c36c", "sighting_of_ref": "indicator--ffc0a5f8-efa3-4cd7-bde6-6b6a6190ccf8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a6ab05-8cc2-4d3c-8340-493b7630f7a6", "sighting_of_ref": "indicator--6a6c8b0c-ad36-4829-9024-529b5a9a1a28", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48290674-deff-4c33-87a9-d78798a0053c", "sighting_of_ref": "indicator--36a6e94f-79c4-4910-8fb0-7d64b6a0bbb4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8c1dcc-91f7-4cc6-95cf-1ac2c93b5135", "sighting_of_ref": "indicator--bda92ad7-c78d-4b15-bcb1-18b0d4982847", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adcb249e-2d2d-4ff9-8801-dbcf037a048e", "sighting_of_ref": "indicator--cb45f67a-3c01-4aa7-976e-52084c4e6845", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1269a7df-5859-463d-b247-59fd48148b85", "sighting_of_ref": "indicator--61d9d941-2298-419b-9b19-b5095efe64a2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224145c6-65e7-4380-a741-dff1ae321583", "sighting_of_ref": "indicator--ccf5e542-be9e-44f1-9c0f-1358f62432c4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3adba6c-8655-4146-81c9-8d940d7e66c7", "sighting_of_ref": "indicator--24563540-3bb1-444e-9b6d-6fa12b6f7b83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e242588-6586-472f-8082-20fdea67386c", "sighting_of_ref": "indicator--4499577b-b3b3-4916-9f5a-bf10c6c16825", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9834e0b5-067d-464d-9131-41167f589362", "sighting_of_ref": "indicator--a4ab7e45-ae53-494b-9d07-54b195aa3d29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7cc3bf-e25d-4935-92d8-13ed94a2f602", "sighting_of_ref": "indicator--5e93d894-3d27-436a-8d88-53f7c9639c2b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0a520b-af3d-453b-95cd-f69ea48f8977", "sighting_of_ref": "indicator--c58301e4-9cd2-4380-9ea0-13ab466e495f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4699c6a5-4676-4ef6-a563-f72eea9de1c2", "sighting_of_ref": "indicator--33d6ebf8-8a59-4c90-af26-420beff9b8e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d993f54a-864b-4613-b963-2856e2cb84b7", "sighting_of_ref": "indicator--37df9ecd-9400-4d63-86e6-11e845d70117", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11bb91ac-4a39-439e-8844-5e1e1700028b", "sighting_of_ref": "indicator--a2a206fc-d117-4588-8fdf-c32662d122aa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396f3a60-1401-42b4-897c-6431f8bd3678", "sighting_of_ref": "indicator--af11d7b5-d158-4ca0-9fc8-0b88e1e0c7da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f62663-3b01-4764-a61b-8981e47edf03", "sighting_of_ref": "indicator--d31118f2-dc4d-4d5b-87f8-f687d75c24df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2be87c9-8380-4e6f-a7a7-62a2ed3aee6d", "sighting_of_ref": "indicator--cd2f5050-d57d-4740-b8bd-3c8b57eafa7c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14796abc-88d8-47cb-84a3-5235b22d7aa6", "sighting_of_ref": "indicator--72f4356b-b593-44b3-90bb-bd56bfa8ab04", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34faef05-49fa-474c-ae31-e20a75331292", "sighting_of_ref": "indicator--d342a9f3-7b31-49e2-a855-6b0e9ce9cfd9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ec0129-c3b9-4d17-87d9-5be4d6ae7aa8", "sighting_of_ref": "indicator--8d831a92-6b3c-4d98-8b9a-f65d080896c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b4484b-0631-4f97-a379-3ff596108c1c", "sighting_of_ref": "indicator--89912e4c-02c5-48ae-8fbd-85ec4311ac50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d2efc5-73f8-4580-8d08-c4e8ea2a66ee", "sighting_of_ref": "indicator--ecbb1e30-cbdd-4fdd-9464-2acfc77a60dd", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426b287a-26fb-4d1c-bdf3-9a375427043c", "sighting_of_ref": "indicator--a79dcc92-9a3d-4812-8706-2f31d789864c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5ad45f3-910e-4e88-a91d-9170661a5031", "sighting_of_ref": "indicator--8021128f-4f1c-4241-a337-4d927dfb7671", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff12ee7-8e93-4da7-94c5-f33d8026e017", "sighting_of_ref": "indicator--9de681c0-013b-4db4-bcd3-fcbf4e97207f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4371a5-7c64-43d5-8768-fb18d98f93a1", "sighting_of_ref": "indicator--6ffd19fe-849b-4b43-9fa4-242fbc0642c4", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9057a5c-9911-4add-bf1f-f046947f8144", "sighting_of_ref": "indicator--91fc4e04-e4cd-474e-8ce2-9ecce4473341", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc67fcad-6339-4645-ac91-22d8c36455ab", "sighting_of_ref": "indicator--2731f903-5f8c-4d2e-b2d7-759b3389fea4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d33bd10-7b9a-4e9e-81a1-cc6b4d976fbc", "sighting_of_ref": "indicator--5d1fdd7f-5711-45e4-9f9c-39c8c7f716a4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e600e9a-11d3-46fb-aebf-950936e0a3eb", "sighting_of_ref": "indicator--6edbf946-4df5-48f1-9daf-62c02327492e", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19842bf2-d3bd-4fb0-8009-9a7db310fb9f", "sighting_of_ref": "indicator--fb92f4c6-79ec-4f9b-b6d3-72779cd541b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566c569a-8879-447b-a303-b7c857ca1028", "sighting_of_ref": "indicator--a1788d0d-eb0c-4e45-9675-88e54a7552c7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac53f3ec-86ac-403f-9110-0aebbc0192d3", "sighting_of_ref": "indicator--1e0f7d9e-b725-4359-ad24-a25658d21f50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5562e339-0874-4c54-85c5-402467d2e7ce", "sighting_of_ref": "indicator--43f497ec-d3c7-4eee-b9a0-dfaf23df49de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a5864a-059d-430d-823c-1a465c7a6b3e", "sighting_of_ref": "indicator--ba0cf2fc-3642-4044-bbd6-353c0fb0184b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeae8ce-1936-4848-8737-9fe48596aeb7", "sighting_of_ref": "indicator--d7ea3b0c-5aef-42f2-823d-5cced0994052", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa3a18ca-a387-4329-b1cb-6f62cc07692f", "sighting_of_ref": "indicator--2979e92e-69ae-41a5-8eb4-7d635eafc3ec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abc400c-109f-45db-b91e-dbeacce8eda9", "sighting_of_ref": "indicator--3bb8e105-fd3f-4e11-a158-439f9c3624b8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51958c07-d954-4ff0-9287-9264ba3f6b29", "sighting_of_ref": "indicator--8c3311eb-aff1-4ebe-b551-c514e3429c5e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317bd435-7e9a-49d0-b455-eac9d4b99282", "sighting_of_ref": "indicator--8c3311eb-aff1-4ebe-b551-c514e3429c5e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c24656e-dae0-465c-87ff-8fd5cfe5ba34", "sighting_of_ref": "indicator--ac62145e-a05a-4cb6-83c2-71cc059b6d31", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9f5c34-233a-449a-a810-d5d99e16ab4a", "sighting_of_ref": "indicator--af061c7c-4904-4a22-9b5c-3749fcf89c5c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--626176f0-b026-4376-9af4-d027ba6b1f20", "sighting_of_ref": "indicator--ec17899c-a06c-4999-9912-0007b89d7e9c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--037da737-9faf-477d-8bf6-6148931b9524", "sighting_of_ref": "indicator--06833a3f-100a-4ad7-9bf2-dfea6c2d166a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ac66aa-7b9e-4a96-a4db-40a446ace727", "sighting_of_ref": "indicator--bf3f674b-dd3c-45a7-a962-1b862c1f5554", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9761a88-41c2-45e8-b140-1905ebdd0cf0", "sighting_of_ref": "indicator--4f487c20-9c7f-4eda-b85f-6bc121bd4ddc", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d4f889-33de-41c8-9f4e-758172c1357b", "sighting_of_ref": "indicator--79bb8147-9a31-470f-aef2-f80d7f5fbc44", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ecdc718-8ec0-47c9-abf3-0b291f4c31ab", "sighting_of_ref": "indicator--ecea80f4-606c-4c4f-ba4a-f99eda93a6b8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52f5b14-4025-42e7-a842-1199754efee8", "sighting_of_ref": "indicator--fc1bc140-fb21-4334-86f5-0dcce1585d59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1789ae9c-5905-4501-b3f3-30bf3265a83c", "sighting_of_ref": "indicator--fd89dcfa-520c-4371-8aa8-86594b6057e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6140aa4-0ec3-489c-967f-10113b3af043", "sighting_of_ref": "indicator--3fb9f2b1-c74b-45ca-a0b4-d360465e16e7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0407b813-5bfe-4380-bccc-2bd8766c9c3e", "sighting_of_ref": "indicator--c148cb06-a80c-4a19-9f88-5752877e34a4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198256ec-3774-409b-be80-fe7b7c6651e9", "sighting_of_ref": "indicator--b6118d49-a0d6-4c3c-91af-b3e05fee2f1a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a1c929-8e75-4996-8bd3-56c2c3f47ca0", "sighting_of_ref": "indicator--c697de20-05ca-43c0-addc-bed69c1eb70d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e11ca5-0a80-4e01-b221-fab39e8fb175", "sighting_of_ref": "indicator--0cab6a65-2d8a-43d7-9813-a37e301b68fa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9139271-5ac7-4a7f-a3e5-fad9cd072784", "sighting_of_ref": "indicator--f39e5815-1308-47a8-8924-15067a61a611", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c21506-171e-4a91-a071-5cda4d09e125", "sighting_of_ref": "indicator--d2210f10-9e08-4c50-b25a-ae0f1f6d4b68", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d12eb607-8b6f-40ed-9894-77601781868a", "sighting_of_ref": "indicator--d2210f10-9e08-4c50-b25a-ae0f1f6d4b68", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3faad462-b608-400f-93d3-c0673a2b7470", "sighting_of_ref": "indicator--3c5a9390-6afb-4b41-ad25-79ff50faa0d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6382ef6e-a5ae-4b03-977c-f5997a7611d4", "sighting_of_ref": "indicator--d1d29429-6211-4864-a0db-1c478083c6a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235eb713-888e-418c-acb3-cb41a5bbf759", "sighting_of_ref": "indicator--7d15fad8-73f9-4506-93d2-03fc2f31bee4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11203af5-377d-438c-a9d9-afeb4dce148f", "sighting_of_ref": "indicator--69de9fab-6959-4f89-963c-f3f0852e5833", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4dfcaf-6f94-4bc3-894d-ea72c95dea3c", "sighting_of_ref": "indicator--9339685a-8af6-4894-ac32-58b38c18b7f4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d70a561-8f70-4ef9-a7cc-cccaa392a8d0", "sighting_of_ref": "indicator--59d7379f-8b96-44f6-90bc-a020d3ddcd0f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34ba6de-be75-4683-bbaf-bf041cec4f68", "sighting_of_ref": "indicator--50878861-f774-4a9a-8451-94208e70e3de", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f7e8d5-8db8-40a8-a33b-f522d56862d4", "sighting_of_ref": "indicator--836808a9-de2a-405c-b88e-fe3a3d44ed5a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef64a2e-91bb-44d8-a648-bfe6b11e0a99", "sighting_of_ref": "indicator--b6b7d0ed-6220-4ba2-aab7-058e3929fe16", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc586ba4-07d8-4c20-bcef-74f08bb018b2", "sighting_of_ref": "indicator--b6b7d0ed-6220-4ba2-aab7-058e3929fe16", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f19e033-852e-4ffe-b497-892134f3c512", "sighting_of_ref": "indicator--261f17f4-aee0-444f-8ce2-7d1b620fe6af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa776168-da91-4a8a-b76a-0f552d631f41", "sighting_of_ref": "indicator--261f17f4-aee0-444f-8ce2-7d1b620fe6af", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b41af69-47d9-44cd-b5c6-14d9bc3c9558", "sighting_of_ref": "indicator--b862f57c-53b6-4c5a-b1ef-3a768c23969e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c672cad3-8a7e-43ca-a028-446c5b98a372", "sighting_of_ref": "indicator--571eadf5-f010-47cf-9ed4-0f8b4ec2964d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea2bb79-64de-45ca-9e14-1e3eece1a839", "sighting_of_ref": "indicator--e2e864c3-4dea-4587-b617-b7dafd4469be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1454e4e9-18aa-4540-bc7b-379f1f9a1c1c", "sighting_of_ref": "indicator--181c9198-a6b6-407f-ba5c-5e69ec3b0eb8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f1f683-3a13-4aba-851f-309e6c40c45c", "sighting_of_ref": "indicator--ac28e903-cddb-4d2a-95bc-c4e58576ff47", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4af4d9c-bc45-42a5-97ea-d0809c718541", "sighting_of_ref": "indicator--ac28e903-cddb-4d2a-95bc-c4e58576ff47", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f64f49-09e9-4e48-9a24-08959baa5b00", "sighting_of_ref": "indicator--bdb233c2-a32c-4593-a974-0900c4ecc53c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7d4038a-77fb-42d2-8303-f5744f982523", "sighting_of_ref": "indicator--18bc94ab-a501-418b-a75a-99704a84db97", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336fcb8f-547a-4c89-8e82-8793e3ccd1c2", "sighting_of_ref": "indicator--e2c17337-6198-47cc-bf0b-0d4f9d08b17a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f822b17-bedc-4a4f-bf20-5f194ae4f47c", "sighting_of_ref": "indicator--0f27f991-5882-4cc9-ad14-0112e6e71d31", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc28079-1e92-43cd-a29a-8b4f99101c67", "sighting_of_ref": "indicator--9f0a22c7-0e22-4257-a099-cec0f4a6fd0a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885dc3ea-bd56-4743-82c9-e60e490febbe", "sighting_of_ref": "indicator--52cd0555-16d0-4fc2-80fd-b79ee1c5baa9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f71ef5-b42e-48e4-a0b3-60d4ef979f69", "sighting_of_ref": "indicator--2319bf7e-9011-40af-a864-71dfaeecd56a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22fa670e-55b9-4f7c-9280-e2720725120f", "sighting_of_ref": "indicator--566b8a4c-1422-41ef-8bb4-c990b94d01ae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd9eeee-e066-4113-8a38-1441dd183117", "sighting_of_ref": "indicator--949557df-98d1-4461-858d-c3a92cf95643", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6173a233-4d6e-4025-b68d-c6f57a48bff3", "sighting_of_ref": "indicator--b814825e-429b-4aee-b61b-bf54fa43f008", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d477e5-802f-410a-8a59-86dde131ebab", "sighting_of_ref": "indicator--b814825e-429b-4aee-b61b-bf54fa43f008", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdac5633-b7ab-491b-831c-f75ffc6d530c", "sighting_of_ref": "indicator--89efe592-aba2-4cc9-9109-8e95913239e1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e078b0e6-b77f-4fa3-b89d-4962672b975a", "sighting_of_ref": "indicator--538e2b5a-54e0-4557-9b91-d8c921dba05b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24b4989-289b-4c8e-bd4d-460b4f6a37d8", "sighting_of_ref": "indicator--7b8b63bd-6740-444f-9d4b-5b8c71123a65", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87355f5a-df35-4d12-bb23-74189634be4d", "sighting_of_ref": "indicator--7b8b63bd-6740-444f-9d4b-5b8c71123a65", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e28aaa9-c0de-437f-b13e-00d5900c2811", "sighting_of_ref": "indicator--89828d2f-21f7-40a9-9d6f-0340ab4adf6e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8402ed03-0aa6-4f5a-a444-337f5e1db67e", "sighting_of_ref": "indicator--1b36ef02-543f-4ba4-bdd6-c42a77eed9aa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a48c72f-084d-4b8a-8213-8d1a157c6df2", "sighting_of_ref": "indicator--19c3a1e8-bd36-4451-adf7-0c9da38920b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c016c5a6-52be-4efe-a487-b9406c96691b", "sighting_of_ref": "indicator--19c3a1e8-bd36-4451-adf7-0c9da38920b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9346b233-8692-46f0-8462-a7eb161c02e4", "sighting_of_ref": "indicator--aeb724fe-5bd1-407f-b119-916780e4e06e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1061932-57c4-496d-b86d-c6c5fef75356", "sighting_of_ref": "indicator--280960e9-66ab-4c3e-aa36-69134f9a8d40", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb359c57-5012-464a-87cd-7b423f7e6ad1", "sighting_of_ref": "indicator--e83b2a6e-3298-4dff-9d93-0b175ce30c58", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7be8e9-9068-41ae-b8e5-6abbc58d776c", "sighting_of_ref": "indicator--717b1134-a6d1-41ec-8293-649b07d5fa29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95954989-2b53-4fc5-81bb-a4b0ac73a96c", "sighting_of_ref": "indicator--8dd8b6ba-0fcb-495a-aa81-36df5286643f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a93d45-f38a-45b8-b698-80aeb5e6736f", "sighting_of_ref": "indicator--4fe3c7d8-896d-403c-819e-68e6e113f8d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed51ac12-f835-4ed3-bd34-b33b56f0cc93", "sighting_of_ref": "indicator--1ae691a6-72c0-44ae-81a3-c19f18ed3195", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c63fb82-71ff-45e7-bcc4-1e1076361114", "sighting_of_ref": "indicator--324e2e2d-6c10-4453-b299-7dea90db4fe5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe41935d-95c9-4c48-93df-81f5445da64f", "sighting_of_ref": "indicator--324e2e2d-6c10-4453-b299-7dea90db4fe5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d824443a-c2b1-4c50-a327-31ca1179276c", "sighting_of_ref": "indicator--62c55cda-a828-4841-9219-924b85b359f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ded8f7-2c43-4a4e-a6f9-63acab75af72", "sighting_of_ref": "indicator--cd5af0d0-a8ba-4ac3-8b9f-b68341a93fed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cca39e-ca79-4253-b4b0-a121c3ab3858", "sighting_of_ref": "indicator--8688856e-5ae2-4b08-abbc-3c201cef1c95", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58261e2-1342-47db-9a1a-cc0d77446c01", "sighting_of_ref": "indicator--f1025b29-9c9c-4280-874c-88bcb2f45869", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28bfed9b-9a22-4de9-a07f-ed4c4b8cfe4a", "sighting_of_ref": "indicator--06422e12-1c32-43c1-b07a-d5d7f51ab1fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7b0d58-c3f6-4e0f-8faa-7e199859cd78", "sighting_of_ref": "indicator--a8f0c445-5aa5-4015-8b6c-2f3d78bde1a0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4602acb0-562a-4be8-8935-2ca3d5e893e2", "sighting_of_ref": "indicator--a8f0c445-5aa5-4015-8b6c-2f3d78bde1a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63abbe9f-bb6f-42b6-8bef-c6e58950f03e", "sighting_of_ref": "indicator--7292110a-0048-465d-bd50-55acf6a80a17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e544038c-6aac-4ab8-b3b9-ee7df1eccbb4", "sighting_of_ref": "indicator--7292110a-0048-465d-bd50-55acf6a80a17", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4467548-7f45-4420-97d4-a18a3fdafa63", "sighting_of_ref": "indicator--5616ffc4-de75-475c-8945-367e4aabb96a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d41cf90-366d-45c0-8a52-386412be34f0", "sighting_of_ref": "indicator--f040929f-0e5a-40cf-b56b-9419bec086a8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27377a38-bb7a-4670-984c-8e9a885abc58", "sighting_of_ref": "indicator--e79379f8-44d3-4676-8533-7c76e5238a50", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd22a1b-d7df-4732-a766-763520e5ff8c", "sighting_of_ref": "indicator--a41ebd24-b837-49f3-905e-2d4a1782c2ca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cc6325-12c7-47d9-ae30-2e430e71fa74", "sighting_of_ref": "indicator--bf322b96-2998-492c-b1f2-e4782ef77ffe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76806d39-14af-45e8-a197-4babc641c5ed", "sighting_of_ref": "indicator--81b5aea2-b772-410f-999b-cb4f153965d4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a231c86-4464-4422-88d6-6014f3882ebc", "sighting_of_ref": "indicator--ab7a349f-de45-4256-820b-88291c53b58f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35d8269-4c8c-4a9e-a81c-f06952ca8a87", "sighting_of_ref": "indicator--96e96c26-3e01-4c25-99cc-e04f60e07703", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdaf8168-2b9f-466f-a0c3-621059e55722", "sighting_of_ref": "indicator--3aec0bae-203f-46cd-a0a6-a7acb68cac96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c51b16-b59d-46ce-97c5-9169f51ae126", "sighting_of_ref": "indicator--a5eaceec-b74f-4f11-90f2-c0b493a06d37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7773c5-b795-47d5-9cc0-238efaa6074a", "sighting_of_ref": "indicator--a5eaceec-b74f-4f11-90f2-c0b493a06d37", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46c45e0-3170-43be-9370-ea08dca18432", "sighting_of_ref": "indicator--6244148a-94a1-416c-aac4-83b61e24bd5b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c484de85-fe89-445a-b085-1fdbef04de26", "sighting_of_ref": "indicator--0e461fb5-10a4-4666-a33e-605653863ead", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f141309c-6d5b-48eb-afe3-05e78345aad0", "sighting_of_ref": "indicator--68be649a-6a35-40a5-8620-e543513268a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df6048e3-1f19-4987-af63-c0b42ac9ce06", "sighting_of_ref": "indicator--564f5b61-d004-485e-9068-2de3fbd161ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f9986b5-216f-4c53-849a-cb429ba94923", "sighting_of_ref": "indicator--6f28e4d6-faa7-46c5-9908-b5e79ef5fc59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e2669b-a34b-49ab-9f5f-adb5150e5167", "sighting_of_ref": "indicator--6f28e4d6-faa7-46c5-9908-b5e79ef5fc59", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43030bde-a45d-4b3a-a9de-7698e7518e8a", "sighting_of_ref": "indicator--46471d89-7019-4b22-9a65-d49fbe4eed2f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5123d6aa-14df-4965-a2ea-8f8e8137431e", "sighting_of_ref": "indicator--46471d89-7019-4b22-9a65-d49fbe4eed2f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81677a83-33ec-4516-9206-92176750fe0e", "sighting_of_ref": "indicator--3085b297-b8fb-4e0d-b65d-15e95425be08", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d6fddff-6d45-4dce-87bd-025641dcba90", "sighting_of_ref": "indicator--34784034-ab84-4926-a36e-1dece557f83c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e22ac97-cb5f-471b-893c-bfcd60400c82", "sighting_of_ref": "indicator--c2b54b0b-2535-4241-84f1-1c773e1513ea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18a92df-f08b-4f76-85dd-ec7b9477c370", "sighting_of_ref": "indicator--c2b54b0b-2535-4241-84f1-1c773e1513ea", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32edc54-d959-4ec9-89fb-cdcb000420c3", "sighting_of_ref": "indicator--35ab41c0-4eda-41c8-ab19-1bae21a7550a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce379b08-08a5-46e4-8cdb-3b6574004cdb", "sighting_of_ref": "indicator--b34efea5-7ca8-427d-9f64-9548f3b748f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d12f486-bc58-4021-8a9e-0282944c6a9b", "sighting_of_ref": "indicator--c18756ae-45e8-40c6-83a7-fa0a896514fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47c4dd7-987f-4695-a203-a665a7e84ed4", "sighting_of_ref": "indicator--ac83bbc0-e9b9-48cf-b6b2-532ef93f0795", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f53e1c-a891-4ff2-984c-061c39a5d4ae", "sighting_of_ref": "indicator--21dfe273-8667-423c-a24c-7cfe0101b4e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d44e9f2-cbb0-40d7-8b6d-2b5787e2bade", "sighting_of_ref": "indicator--54fbab94-96c8-4354-9b41-da7f0cc1d142", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fb4a61-9d69-4812-a08d-0e53f5c7f576", "sighting_of_ref": "indicator--54fbab94-96c8-4354-9b41-da7f0cc1d142", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e430682-7004-4560-95f5-0d5cf93f67bc", "sighting_of_ref": "indicator--efdfadf5-27f0-4e71-a8e8-7f6903e23c2b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea02f43e-da2a-4d59-8960-3eec981b14d5", "sighting_of_ref": "indicator--a6b41708-388a-4c3a-8242-7fb29bd8d197", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce82281d-69b0-4e5c-8e94-d6479f0cc213", "sighting_of_ref": "indicator--6807965d-058d-4ddc-a1e5-66cb04ae0f5b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bf001c-19e4-483e-a327-6d3a4f561854", "sighting_of_ref": "indicator--c3b26724-0afb-41a3-a022-758b000fc15d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72634d3c-cedf-4fbb-a5c6-4288f8d35086", "sighting_of_ref": "indicator--c3b26724-0afb-41a3-a022-758b000fc15d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e284ad35-8acb-4155-be24-f23389c2af70", "sighting_of_ref": "indicator--83ce77c3-9c24-4fed-8594-c02fc576f76c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a359606-2ed2-447b-9652-e2c4e1c83ec7", "sighting_of_ref": "indicator--2bb75f4c-c9a9-459b-ae1e-378ba676651e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57247f0e-b1ed-4840-847f-d4104ae5ad3f", "sighting_of_ref": "indicator--2bb75f4c-c9a9-459b-ae1e-378ba676651e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a76587-b3b9-4c07-92d0-4e6a6890bf05", "sighting_of_ref": "indicator--0799ce4b-cf48-4b19-b5c1-ef7918ddaa91", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdeef5d-dccb-463c-8c07-69b61e2869f1", "sighting_of_ref": "indicator--0799ce4b-cf48-4b19-b5c1-ef7918ddaa91", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a5645f-f4f2-4bd3-ac4a-36d32b4a9216", "sighting_of_ref": "indicator--dba64560-a4be-40ea-bd9c-400583c43b2b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8529322-6398-4c0c-a70f-9e3f31567786", "sighting_of_ref": "indicator--7a1c79de-8c41-43e8-af43-e9331ea16f0c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9d9ee4-ffe1-401e-866d-34d0caf029c3", "sighting_of_ref": "indicator--be542fbb-afcd-40dd-90e4-6a0df205a796", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a17e58fe-af8b-4deb-aa45-d17590924387", "sighting_of_ref": "indicator--9246cf28-7055-4474-ba69-6eb9f6d86a55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507d6b60-74d2-4d0f-95c2-9282437e5966", "sighting_of_ref": "indicator--9246cf28-7055-4474-ba69-6eb9f6d86a55", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec623372-27e5-4ca0-8578-7f7df79bafd6", "sighting_of_ref": "indicator--cad9a066-5cad-4a06-a1b6-3657c0ec8232", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c74f85a-eff8-4a21-9a38-1348f509b31e", "sighting_of_ref": "indicator--b150533e-87d7-4649-b299-4710f285a5c8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43a66a00-70a0-4750-b0a3-1a4a239cd707", "sighting_of_ref": "indicator--2222cafa-8123-4eb8-9f3e-d712631e45af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b3c4a1-fd5e-42ea-9b9b-73593cef40d2", "sighting_of_ref": "indicator--2222cafa-8123-4eb8-9f3e-d712631e45af", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be8e5e5f-b0f2-4417-913b-1804e2cb320d", "sighting_of_ref": "indicator--3aac9b91-a606-4c09-b14d-f0e9512e2090", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f880d459-0349-4945-baa4-9364a34f574e", "sighting_of_ref": "indicator--3aac9b91-a606-4c09-b14d-f0e9512e2090", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587110f0-276c-46a3-be19-a93fd81e7d7e", "sighting_of_ref": "indicator--15d57112-47e0-496b-9609-1b8feb178374", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f1d87f-28e9-4493-ae9b-364f8a7ec18a", "sighting_of_ref": "indicator--17f8bcc6-e77e-456c-9e9a-95057066ab70", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--432327e9-8bed-4f9e-be6a-115921cb0010", "sighting_of_ref": "indicator--1411790e-e8c9-4fed-8a54-1eb2efc5ba80", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2c823e-0b48-4b3a-8b30-5267aa70c9b0", "sighting_of_ref": "indicator--fdd23557-7a60-44b4-b359-73ae722ce3f2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7281bd-50e9-454b-b460-1de3673edba0", "sighting_of_ref": "indicator--f6197bb9-595e-4b08-b568-915f4cd6ee4c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d781d9-93a5-4c5b-9409-1b9fcc5a048c", "sighting_of_ref": "indicator--fd3766a3-9b83-44b2-955f-4b248be34a52", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13067e9f-6c8f-48be-bead-3e1fe51247d2", "sighting_of_ref": "indicator--ba792cb4-13b1-4848-82c6-8f51925476a6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b72df7-459d-4850-a51e-54bdadc3284b", "sighting_of_ref": "indicator--d46b157f-0d9d-4df4-8f3d-ac33849e9c22", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3724d79b-3063-49f7-84e8-52a840f192a2", "sighting_of_ref": "indicator--a8324266-ed31-45e7-9104-3aa3ef5b564f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fdf7be-95e3-42cb-812c-e76de6e74c45", "sighting_of_ref": "indicator--3ca72627-5cab-4321-b1da-5f9dc9f6334e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--096530cf-8488-4ba1-a456-941274f19a36", "sighting_of_ref": "indicator--a6fd3eb6-dbb2-4fec-92d3-0a02cdc2cd42", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5290a07-3894-4d9d-bdf5-b2f1887b38fc", "sighting_of_ref": "indicator--5348a294-5c51-4060-9e03-b234be372059", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f33ff5d-9c0a-468e-abc8-092ae7c5c732", "sighting_of_ref": "indicator--e00f6dfb-9170-4115-96a5-751d989f4675", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad1293e-de4b-4cce-bc83-6ed39d3a2cdf", "sighting_of_ref": "indicator--e16039b5-932f-4f17-9958-c0feb24ee8c5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975cdea0-ac6f-4130-b417-b9688bb12c98", "sighting_of_ref": "indicator--e16039b5-932f-4f17-9958-c0feb24ee8c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451fb77d-0a7c-4f45-8804-b2e8a95c12cf", "sighting_of_ref": "indicator--788f9885-c441-403d-ac5d-1f35df248974", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0cfc0e-4ca6-4417-9de1-3eb8378c199f", "sighting_of_ref": "indicator--788f9885-c441-403d-ac5d-1f35df248974", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00770255-3367-4932-a4b8-e72a8fdde97b", "sighting_of_ref": "indicator--e400626c-f32f-432b-afc5-6cd4298f5163", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3e10095-eae8-4abd-a4bb-6c97605e0172", "sighting_of_ref": "indicator--7a234f5e-903a-43b2-816a-eded5e0cd0b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8020fa-0ad3-4a3c-9c73-22ce5850f0b2", "sighting_of_ref": "indicator--7a234f5e-903a-43b2-816a-eded5e0cd0b5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea5a0ef-1745-46ca-802b-f30eaad6e5e3", "sighting_of_ref": "indicator--26060c06-8a95-4979-a984-eb1e5ba16dd2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811ba867-cc33-4c73-b497-19732e086d14", "sighting_of_ref": "indicator--15b89f1c-b3eb-4cad-9fd7-72da6d6e3932", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3767944-e73f-41c0-a3be-c48ac1c7fdeb", "sighting_of_ref": "indicator--15b89f1c-b3eb-4cad-9fd7-72da6d6e3932", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0695c3a4-d3c9-455f-83b8-6cb209f80fb8", "sighting_of_ref": "indicator--b1134fd1-9987-4853-8889-59c968710d8c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89ca255-e412-45f2-aad5-b44235e13c8a", "sighting_of_ref": "indicator--e55a4a6c-bc51-4f91-b823-5519b264b8a3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89bda657-df4c-4257-a9ac-84f2ea573a0e", "sighting_of_ref": "indicator--e55a4a6c-bc51-4f91-b823-5519b264b8a3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd0cff86-9c42-4d7e-88a2-9b69d331e262", "sighting_of_ref": "indicator--c613e2b7-f5f1-479c-9c6a-ebf51e0251df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff63479-b5d7-4b96-98bd-176a890bd9d3", "sighting_of_ref": "indicator--841fce91-93a1-4db8-b197-65d9268b886f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001cd24d-e595-49f1-9315-6fdffff3a3cf", "sighting_of_ref": "indicator--841fce91-93a1-4db8-b197-65d9268b886f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--071020e5-9890-426b-a25a-d854ee31d585", "sighting_of_ref": "indicator--0bc1bec7-d347-4f03-8487-1512c37809fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615a6e38-1f29-4902-8674-58fc4473fa3e", "sighting_of_ref": "indicator--0bc1bec7-d347-4f03-8487-1512c37809fd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d83c08c-84c4-4396-84bf-37ee71110200", "sighting_of_ref": "indicator--cae53ebd-a82f-4b25-9a2f-dda501460b79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ff5f2e-27e1-4a59-8b35-1ee9b8c54186", "sighting_of_ref": "indicator--7d880bfd-469e-4079-b067-c89c6426ba91", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fb9133-f721-4cb2-bac7-d519675a3f8e", "sighting_of_ref": "indicator--40ab8456-3aeb-45f9-ae96-f0087b0beeb9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719564a6-b7b2-488c-9ac6-1fff666d9c6c", "sighting_of_ref": "indicator--4936e956-16f8-4ac0-ad57-9d4c6ed70764", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0a7bc6-c588-4a4c-b2b9-5979174fc6e3", "sighting_of_ref": "indicator--4936e956-16f8-4ac0-ad57-9d4c6ed70764", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c78b80c-c1b3-4733-b0e2-4b4f3d5b6649", "sighting_of_ref": "indicator--54c20cdb-ffc3-49e0-afcd-544719ab7c64", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70483034-832a-4eae-9d5b-011b438f8116", "sighting_of_ref": "indicator--779532b2-ff3c-4f75-99a6-a0a8d69d9dfa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b4d09f7-a775-478f-9553-30743713164f", "sighting_of_ref": "indicator--779532b2-ff3c-4f75-99a6-a0a8d69d9dfa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa92c239-cc1c-4bae-95e0-30be30e9d242", "sighting_of_ref": "indicator--a524b073-c4a5-4173-8ad6-11d1efb7bb0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c961a4-bdb5-4edb-b984-2386060d5a78", "sighting_of_ref": "indicator--253c65a0-d427-4601-91e2-eed5bdc763e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7f34bc-6d21-428f-98ed-5a4a27971402", "sighting_of_ref": "indicator--76ee2121-4af2-4de2-ac0f-b6062cab1d49", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be76829-9dc7-4e19-b64f-6cbb1541890b", "sighting_of_ref": "indicator--539693f5-fac5-4129-ae5f-e31fde22e57e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0394f8c7-0ee5-4b7e-8571-375d4f988e8c", "sighting_of_ref": "indicator--db1d9f41-5aea-4be3-81d7-c6f076dcf411", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a07d77-a4c9-402a-a861-00e35afb67f6", "sighting_of_ref": "indicator--bc84c366-fa75-424e-b1c6-63ae1e3dc66f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b230c204-3471-4405-b6a4-9093685dfe39", "sighting_of_ref": "indicator--6b0986d1-524a-4e98-9475-ccb7f6b86cc7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a0296d-8c75-4adb-b3d5-93ca25762b57", "sighting_of_ref": "indicator--5315c010-222b-435e-99bb-ee3acce68d24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a200992b-87df-4e4e-835b-9621c8b8349f", "sighting_of_ref": "indicator--1e5a8ae5-9a64-46d1-a130-29d9a01df8b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b05df1dd-740d-4208-9aca-3f73630ef439", "sighting_of_ref": "indicator--7127eb66-6149-41d4-8136-098ac0aebf42", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59e91ab0-9fb7-42e9-97ec-f87273de46c8", "sighting_of_ref": "indicator--dbcc6570-1007-4035-b67b-e3a59c4adab5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82df34c5-6384-412f-8246-fe4eb353d391", "sighting_of_ref": "indicator--e75ef16a-c49d-4809-9cd1-acafd02dfb9f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6dcfc6-4acc-4422-8748-bf02ccdc0ba7", "sighting_of_ref": "indicator--de01bea9-50dd-4edb-8985-eabc3e9c33a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a97ce4a4-b71c-44ac-9e73-992ad5974e0e", "sighting_of_ref": "indicator--860b37aa-abf1-445b-a0b3-1257290060bb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df90f1b9-34b4-43b9-9df9-813e3548342a", "sighting_of_ref": "indicator--f2eab526-11c9-4786-b151-a068f6c86bc3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fd207f0-ee5a-421f-8230-757c0fa82b3f", "sighting_of_ref": "indicator--f2eab526-11c9-4786-b151-a068f6c86bc3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62d4468-9f68-4e32-a503-5fe41af7b70a", "sighting_of_ref": "indicator--e8a0d7e4-e890-4cfd-be9f-d4b8df62d9fe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6e2a4dd-1a67-4bfe-8a78-423aa00817be", "sighting_of_ref": "indicator--9ee9beeb-0aaf-499a-9eb7-1baeb4bc1a10", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4036abd7-8d77-484f-bf2a-9eb451d71a10", "sighting_of_ref": "indicator--43241b9e-4c04-4d56-98a4-9d6aedaf2c90", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a0da02-5a6b-4290-a5cf-4b1defdcbda7", "sighting_of_ref": "indicator--3092b859-229e-4d84-9678-04d542d9f4d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9203319c-0f0e-4e4b-8c28-a1554ecc843e", "sighting_of_ref": "indicator--e8750863-8026-485c-95f9-b8044c345a65", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd8bb1c-24cc-4855-b5a9-ea70ae804870", "sighting_of_ref": "indicator--0ae4ed03-7114-4875-8c90-38bfb65f374c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226eae91-6f20-479b-9c2e-1429b141625a", "sighting_of_ref": "indicator--0ae4ed03-7114-4875-8c90-38bfb65f374c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0611f4bc-64f2-42de-9587-f15fedfc8094", "sighting_of_ref": "indicator--04fbd929-09dd-4aa6-a436-84cedb8ebe52", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91af0f72-e2d7-4ce1-8de6-a52e7d453b55", "sighting_of_ref": "indicator--04fbd929-09dd-4aa6-a436-84cedb8ebe52", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daeab6b0-610a-4a5c-8cd7-be0ba98eff7e", "sighting_of_ref": "indicator--e955a73d-a069-432c-9da8-55c34bf29596", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4fc9cdd-5b55-4854-8186-e66abce4e245", "sighting_of_ref": "indicator--1902f473-69b7-44d2-9c61-cfc28bb14152", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befbea58-be2d-4528-a7c7-dee3787c2c37", "sighting_of_ref": "indicator--e494d2a3-4708-4512-b03f-0cff36368b57", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1889ea6a-fb72-4939-9658-e6dc7e6cac1a", "sighting_of_ref": "indicator--f8543d2a-7cbe-48ae-8c75-a7e5c19bb084", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88ce576-ebad-423c-a6db-2e33b6341f6d", "sighting_of_ref": "indicator--12872287-0c2c-4f77-a9ed-640442e70989", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bf027e-e116-4c4c-8324-e588f839424c", "sighting_of_ref": "indicator--e0868022-0e58-4104-9e46-cec0b85b2ab7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d889bfb6-be9c-4241-aada-cbc72b0631a3", "sighting_of_ref": "indicator--8ed1ae23-5988-44ac-97c3-0fa7af4790bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855da752-6283-4424-87b6-f3763b790fb4", "sighting_of_ref": "indicator--0e725c70-79f8-421e-9d2a-aa074e7dfb76", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d2cb78b-a376-4757-9cd8-ad819691161b", "sighting_of_ref": "indicator--ad54184c-d6d8-491b-8fec-da0c6349cc0e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2494c1-4b5c-41a0-98a1-8368f4c6e479", "sighting_of_ref": "indicator--af8c3805-f296-418e-9e01-46f367abb993", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c515e08e-0537-410e-858b-b30a9409f43d", "sighting_of_ref": "indicator--af8c3805-f296-418e-9e01-46f367abb993", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3be4c26-a756-4029-89d4-40f0af52ba36", "sighting_of_ref": "indicator--cbb00eb0-c3aa-4ae6-a855-5cee98b38de9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd510ab8-3f34-4f26-a885-163e2f7d6e8d", "sighting_of_ref": "indicator--d7731507-43cd-4c0f-8b3e-dbb4d0cc2b8a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--281386ce-1d7a-4235-b619-6cdba3efdd95", "sighting_of_ref": "indicator--dd73026e-24f5-4f6c-b2eb-4ef7d947fe70", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e1a39a-400e-4947-9273-dd8dd6d3cd5c", "sighting_of_ref": "indicator--d11a88cc-2ae9-468f-91f4-ca47ca357540", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36794d48-c2f6-469c-b6d3-040c99eda30a", "sighting_of_ref": "indicator--06a158b9-1bcc-4209-9644-60ab7256c7be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfb0786-d7c7-48d7-872b-63efb7904072", "sighting_of_ref": "indicator--06a158b9-1bcc-4209-9644-60ab7256c7be", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4221df-28d9-41dd-943b-0cc88ec79b51", "sighting_of_ref": "indicator--3427a2e1-729c-4b14-96d5-8777b95d9919", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94be1a4a-5b2c-4d5d-892c-7092f67b97b2", "sighting_of_ref": "indicator--4b2b9226-f3e8-479c-a574-5990308be680", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19ec848-eb0f-4547-a45b-3f9291985724", "sighting_of_ref": "indicator--18c57864-6f36-4d76-9c67-2c380337f966", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a400198-a2ed-4e0f-91c0-ef7400b5ab23", "sighting_of_ref": "indicator--b9795964-631f-448b-aed2-1de055d6f456", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c8b976-edc9-4fd1-8e03-29d9973a63a8", "sighting_of_ref": "indicator--65316af8-d959-407a-ae50-88367e9477b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d442c6b-813a-4ebf-9695-6fd5c3437be7", "sighting_of_ref": "indicator--65316af8-d959-407a-ae50-88367e9477b1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f31239-f7e8-4f05-aa08-39dc601bdae6", "sighting_of_ref": "indicator--1da096e2-e740-43dc-90db-b274060136f8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d942bf76-5517-44c6-a240-d7ccbad56b9f", "sighting_of_ref": "indicator--a7692712-2225-4339-ab3d-1487568c9ebe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1d6d5e-a291-46d3-a47e-0dbce1ea8318", "sighting_of_ref": "indicator--8e9a3ea8-3a64-49e5-aef0-0ffcdd66deb4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fe6267-d789-49b1-9d15-4e3ea19cb45f", "sighting_of_ref": "indicator--e596f4ca-682e-4da6-a3d2-0a1736503529", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f546518-15d1-4066-bd53-4b3a468fcbc1", "sighting_of_ref": "indicator--ebcab871-01b6-4e34-867b-2929d7e8cec1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db8fc803-3cea-4394-8255-0cbca8f118b9", "sighting_of_ref": "indicator--1bd78e06-8057-4417-9baa-c7f56e1765f6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816b4197-6f32-438f-b68b-410892cfc313", "sighting_of_ref": "indicator--1bd78e06-8057-4417-9baa-c7f56e1765f6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020b5a48-fbcb-4791-9a1c-4a0e091ed330", "sighting_of_ref": "indicator--dcb97fed-19e9-41ee-b60f-6a7ce3a21287", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c51c1c0-0c1b-4097-b3bb-34368f852a39", "sighting_of_ref": "indicator--f4e381cf-1ad7-43dc-9671-203ba2e94457", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6883fe-2228-4e17-922b-226819e5c3b2", "sighting_of_ref": "indicator--e208f726-9645-4b53-b759-c2fd2e160560", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a903705-fa71-48f6-b62c-6f7b3f70ce85", "sighting_of_ref": "indicator--978c081e-97c7-431e-b30d-af633d81c6c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb98abce-82ea-4b07-a0e8-209041297e16", "sighting_of_ref": "indicator--76aafce9-a8b7-491d-a2b4-b06c8bce0e96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c83032-b8ad-4e5a-ae46-25f6e83abbce", "sighting_of_ref": "indicator--76aafce9-a8b7-491d-a2b4-b06c8bce0e96", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22c9ea9-a0aa-4673-95a4-233d53432489", "sighting_of_ref": "indicator--d2d65a87-d334-42e7-ac65-34a7dbb41ce5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3cdd95-8610-46a8-974f-9988b25079e6", "sighting_of_ref": "indicator--9b2b0d3d-f9da-4c47-a99f-b13c352f437e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad22fe37-84cd-49ba-ac3f-7ff96516f6df", "sighting_of_ref": "indicator--85ba63f7-3994-4bfd-9cda-950ded96ead2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db16169-efd0-420f-b440-66c13411c68c", "sighting_of_ref": "indicator--67cbd65a-cc57-448d-b4b2-f25140ca6290", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38459577-5d42-44f4-8880-3abc5a2a030a", "sighting_of_ref": "indicator--c289af03-bc5f-4420-a58d-dbe7bc1195ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460e81bc-cf7e-4d2a-80a4-87f5ae729e2a", "sighting_of_ref": "indicator--295f0802-d296-41bd-8512-1d67e111da39", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc150abb-8c5f-4636-b7d8-0bc7d641c6ef", "sighting_of_ref": "indicator--09da3576-1ee2-480f-9f32-d6dd4a28d1ff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--526ac877-c221-4f08-a279-4afde43d4f49", "sighting_of_ref": "indicator--b2f70ecf-643f-42c0-8234-66f9ddcb124d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0eca45-39aa-4307-8309-3ffc39b91da0", "sighting_of_ref": "indicator--aae09f7f-114d-4da9-9985-c7771a73291f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee0a6a5-430a-4054-ac75-d8a76b50a23e", "sighting_of_ref": "indicator--17bd1ff5-d905-40c5-855d-f5d2ea8ab5cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3df5fb-618d-4807-a3a4-2b0ad66a8b56", "sighting_of_ref": "indicator--9edfbc16-800f-40b9-b44f-c9665bc4bdc3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c3c7d1-0770-4105-9433-f2efa9b2d3b2", "sighting_of_ref": "indicator--9b698064-cdfa-47f8-bf34-2d9dbe4de0fb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a1577e-dfe2-4777-91a2-476b775a1f2e", "sighting_of_ref": "indicator--0808a1a9-bc08-4be6-befc-15b9d305dd78", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5d8beb-a9ff-4cd8-bc5d-42a9dd6cf321", "sighting_of_ref": "indicator--d156d89d-5f54-457b-a12e-3bb168f1555c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2610ba74-f3b6-4c7c-a415-42ed9e576d10", "sighting_of_ref": "indicator--128d72f5-dc37-48af-a144-dbd41138a8b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595be07e-4670-4b7e-8444-20f5de3f6aa1", "sighting_of_ref": "indicator--a73ab2ba-fe10-4691-a5eb-0689a30aebee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6b9e2a-abf9-4419-9127-a868f9c03ef7", "sighting_of_ref": "indicator--d25e40c3-8649-4134-9e3f-3dcc3f9d60ae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8515d490-3006-4119-971f-936943a65382", "sighting_of_ref": "indicator--bc573c02-fe49-43f6-afc4-37d176240c47", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4959afce-74fa-4576-9181-a0d562d952ed", "sighting_of_ref": "indicator--aa170792-95c2-483b-85bd-277cfa78e615", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68594eb4-bf53-40c8-93c5-6ee66de6e29e", "sighting_of_ref": "indicator--78ae5802-065b-4c1c-bfbe-b9ce6062d5b6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19311940-3fdc-4250-80ba-ef9504b9a10a", "sighting_of_ref": "indicator--c25089b9-58fc-4d11-bdb4-1035016e6e01", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa25dcd-ede5-4bb3-85fc-9292692c80e3", "sighting_of_ref": "indicator--9478230a-9aca-4120-b311-254cd1e43bb5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a995ab90-8740-46d8-990b-446eca115c64", "sighting_of_ref": "indicator--8088d55e-c9eb-4567-91ef-f8f3d7ea514f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436ab96b-310a-45f4-939a-caab3b519345", "sighting_of_ref": "indicator--e1e17c01-33b4-46e7-806e-f9a3b2d2c58c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6dd0923-082a-4f2e-b49b-60f41c285f47", "sighting_of_ref": "indicator--830a4523-ab4d-4dbb-bea9-705b8708ebd0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5deaab1f-f5d7-4e5b-87db-7153cba484d5", "sighting_of_ref": "indicator--273991a2-96f0-4e14-a196-eb130f247858", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca5deea-131d-46eb-9b26-cb19d057ed4f", "sighting_of_ref": "indicator--43a9afc1-44fa-48e2-bef0-aa2d8bb142d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec19b6a4-3cd2-421f-bae4-18f32c0eed7d", "sighting_of_ref": "indicator--43a9afc1-44fa-48e2-bef0-aa2d8bb142d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf10116b-0e5d-40cb-bd8d-9e17a0114a53", "sighting_of_ref": "indicator--6397fada-ec0a-47ff-9232-97d850a8a6ae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd444c2b-7cd1-4825-865e-35d9e424188b", "sighting_of_ref": "indicator--ad450c82-e5f0-4a2e-b228-5abc713a17de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def366f4-d49f-41af-b691-f0d2c2a1ab4a", "sighting_of_ref": "indicator--b8073628-4dcb-4ae6-99d2-870964ae18ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6435cd-af03-4ff5-8586-235cf4b95167", "sighting_of_ref": "indicator--135d8c63-d9ef-4dbc-b97f-d78f81d6d289", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb24189-30be-4394-9cb3-b9f1db8a736e", "sighting_of_ref": "indicator--135d8c63-d9ef-4dbc-b97f-d78f81d6d289", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0dab8e-1c6f-402a-9cd3-0be3815d8a01", "sighting_of_ref": "indicator--1e7efe5f-650a-4828-9925-429057bf1a98", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--627204ac-36fa-45f9-ad40-75ad96103629", "sighting_of_ref": "indicator--dd8659ec-4767-4d3c-b3ac-b6c5acc1eab1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--120fc22c-5e5a-4876-8e70-3258ac68c80a", "sighting_of_ref": "indicator--bdc1707d-f4a4-48b2-b713-ed0fc785a884", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6946c82e-9a53-4166-9110-a233ac853061", "sighting_of_ref": "indicator--4d5740f0-3e73-4d7d-b7e0-3aa04876ec1c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7948bad6-16e7-4596-8e2b-27c51d043d40", "sighting_of_ref": "indicator--96594c66-a8b1-4227-b9e3-8bed51d93857", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c171d31-1a0f-4a9e-861b-a4c268ba8c5c", "sighting_of_ref": "indicator--7120eaf4-7e86-4d42-a45a-9481e7c76f1b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f026df98-583b-44ab-984c-84929a598cd6", "sighting_of_ref": "indicator--41caf478-09ed-43c4-ba84-bcaf458af8d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411083b9-105b-4ced-b2d2-5ee072187e97", "sighting_of_ref": "indicator--41caf478-09ed-43c4-ba84-bcaf458af8d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08e5a241-69ef-4d3a-b4fb-a8dfcd6803f6", "sighting_of_ref": "indicator--72ea8270-d309-4aaa-975e-e21b5ccd50d6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46179cbe-ec52-4e7b-a829-1ee13de2f211", "sighting_of_ref": "indicator--393e069f-0bbd-4dd7-91af-dc7a2bfb9677", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdbbe92-4cd3-4cb1-84da-ef7abb53e377", "sighting_of_ref": "indicator--393e069f-0bbd-4dd7-91af-dc7a2bfb9677", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2523d1eb-98ae-4136-ac31-da6d26a840c9", "sighting_of_ref": "indicator--6ef08514-a950-4124-a1d7-49db10d19f38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e35df08c-96cb-4cb9-bc1b-2de5f98ed701", "sighting_of_ref": "indicator--fe481c03-f985-40a1-819a-a9cca7efde20", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21b95e3-1604-4563-9c60-d239d1de2e33", "sighting_of_ref": "indicator--ac6990cb-801f-4840-87c8-39a48d58b239", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf27295a-d3d1-404d-9f8e-377dc449ac86", "sighting_of_ref": "indicator--1aef22a4-c5ce-4c51-8441-29052d02dc7d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075b464e-6263-49b6-8fb5-45c496003a10", "sighting_of_ref": "indicator--2f91c00a-0ee7-4a4c-9a75-0f038585fa71", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c55e879-af6b-4219-84a5-bfebaab6eb0c", "sighting_of_ref": "indicator--587bec0e-9aaa-4a19-b19c-fd32563df2c8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21da761f-04ed-4233-9f86-34233c2160a7", "sighting_of_ref": "indicator--22b7749e-1e8c-4aca-a2ea-f7c5a3645a05", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9a50b2-8cbf-4e06-ac39-5354c876f071", "sighting_of_ref": "indicator--7951cb1a-9260-4c74-ba25-156d80aeced5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77ec911-b039-4e9b-a40e-75663722e38c", "sighting_of_ref": "indicator--fb18bc75-01a4-4ae2-b6ba-371a15cbf032", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f6330f-6f0c-4d4e-a17d-f91f167bf5e4", "sighting_of_ref": "indicator--c0c3457f-d4e8-4d04-aa09-efb80b44b8ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43b73f0-185d-43eb-b987-87af0f500800", "sighting_of_ref": "indicator--98dd9cfa-172c-4e9f-b4b3-99268c1d3fce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0aa7d5-10e5-4c03-a463-80595cffa447", "sighting_of_ref": "indicator--b3a213b9-6c36-46c5-98aa-f2ae40bc33f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb048320-1a32-494b-9a09-538a0c04d805", "sighting_of_ref": "indicator--c49c0068-0b39-440f-8609-3764b68d2b5a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e07be49-bb7c-4569-b3b8-0d8707356595", "sighting_of_ref": "indicator--fdb894a2-593c-4a18-8fde-5f761e56d510", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea0a1ba-70f5-4e2d-9b9d-ec62aba4718a", "sighting_of_ref": "indicator--941da606-f8bf-4a6c-acf1-b5f2692ae340", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59209524-2406-42f5-b63f-f94356f98ee4", "sighting_of_ref": "indicator--941da606-f8bf-4a6c-acf1-b5f2692ae340", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--426f0b71-9a86-4d47-8cd1-2b7050259beb", "sighting_of_ref": "indicator--ca0d09ca-15cd-49c4-871e-620abe28aea5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96cc6f6f-6327-449c-bc68-b146a3b19f43", "sighting_of_ref": "indicator--25828479-c34c-4e87-bfac-3fb9c4d399c1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270739d2-0d7d-488a-94d4-19e8737c4516", "sighting_of_ref": "indicator--a66ad7a7-be2d-47ee-bb39-fb25a10ed847", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb37f492-555e-4056-83f5-b8708d01e2ba", "sighting_of_ref": "indicator--f30fe1d7-f096-44b5-a8a2-15046b22ddd6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5f66e1-4bef-4e2b-b99d-1fdd58368189", "sighting_of_ref": "indicator--fbbc3277-939b-4c60-a7ad-7be8e1fadc43", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2500ea6a-62f1-4c2b-862e-895cc28ec8dc", "sighting_of_ref": "indicator--fbbc3277-939b-4c60-a7ad-7be8e1fadc43", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17ffa36-c615-4d59-b58f-22691e1fb273", "sighting_of_ref": "indicator--05782008-0430-44ac-9cbd-1ed493ebca91", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf2169d-bdd2-4501-a58f-7acd44641241", "sighting_of_ref": "indicator--05782008-0430-44ac-9cbd-1ed493ebca91", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33092f54-6289-4a19-b067-8ed2baddc822", "sighting_of_ref": "indicator--acf98653-c297-46e6-a191-6d099036c8c7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7087d11-c015-4be1-9c3a-b394066fdedf", "sighting_of_ref": "indicator--44534c65-9e9c-4026-92ea-e9826ade56d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d758bc6-1396-44a7-ab15-a093912afe86", "sighting_of_ref": "indicator--98a7aeef-dc36-4175-9356-8eab2d117956", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a594c91-ff39-423f-8719-54e823c94732", "sighting_of_ref": "indicator--482e5d72-f4f0-4f3b-b165-4754a3373463", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27b1fd1a-5738-4715-8892-3e48ceaaab1e", "sighting_of_ref": "indicator--19b3e98c-a92e-4fe1-afad-99a41549ed87", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca4d2b3-dbed-4683-897c-9d89495352f2", "sighting_of_ref": "indicator--d4c82e28-4f06-4eed-88c3-2597ae750a33", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d0b066-c7d2-445b-9327-78e8daef8932", "sighting_of_ref": "indicator--b7605b34-6623-4ffe-9a9f-e12947f2ae6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cedd133a-1182-48f3-8eab-9432bbc504cc", "sighting_of_ref": "indicator--60f9fc0e-dfca-474b-b77c-5dfa22da59e2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8b3c99-f5b9-4f20-8b89-9e957ad8942d", "sighting_of_ref": "indicator--392edf6b-6e0b-4913-a84b-84d16a125c25", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64a91857-4267-4464-8a6d-d9d79788bdea", "sighting_of_ref": "indicator--7b88c0fa-b082-4ed8-95bf-c2a90a86f84a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388fb6e2-2d26-4ef3-b3f3-4438743a6ff2", "sighting_of_ref": "indicator--d672dae9-2623-42d9-b6a8-9539807b897e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76a9dd2d-ad8c-4e70-8798-abbf54592e54", "sighting_of_ref": "indicator--7fba47d3-375c-4967-9710-e190eb20a246", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6002c63a-9810-4254-821a-787ae7b8529c", "sighting_of_ref": "indicator--d85b94c1-a8fc-452f-8753-06b0ed0f054a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c810088-8e81-4f6b-a81b-166a9982123c", "sighting_of_ref": "indicator--d27d2625-1725-4259-a90b-ae0bb48691b9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b65e056-57d7-4162-bb4b-221048eab619", "sighting_of_ref": "indicator--fd72c7a3-731d-4073-aafc-47736a778b9c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88147153-5539-476f-a0c0-982b93bbef2d", "sighting_of_ref": "indicator--66172491-dcf9-4b25-a9da-96a58e9f4c37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1eee83-b195-44f2-ab20-d1e780ff4e01", "sighting_of_ref": "indicator--7cd742cb-679c-44c5-97be-bfc9d3657b81", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27ffa88-756b-4cc5-ae66-a3afd29ab044", "sighting_of_ref": "indicator--040e2f19-51e6-4e6a-9f67-d71a62cb6a34", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9f80de-e975-4646-968e-0991a9a95c3a", "sighting_of_ref": "indicator--040e2f19-51e6-4e6a-9f67-d71a62cb6a34", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51106ee-dfc2-432e-af48-5b7f3514ebf8", "sighting_of_ref": "indicator--36be09da-eeaa-4554-a36d-4b431f97511c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59499b7-79bb-482d-8801-4bc199cf8b3d", "sighting_of_ref": "indicator--aa3e33ad-f8e1-4476-8d9f-f0b7f6015292", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7822aec-eca9-4e78-98df-bb1734891004", "sighting_of_ref": "indicator--62b97b7f-a8af-4bc4-a404-780a144c7d87", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9cae48-69ec-4641-a385-1299f1d9a8d3", "sighting_of_ref": "indicator--1afa0fdb-ceaf-4009-b6a0-8f42fbf9aec3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99d1a5e6-6eaf-4da1-a121-570f5cec9a98", "sighting_of_ref": "indicator--a56e83df-5a36-43bc-8e27-512cd01a94c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af020e5-fb83-4def-bef0-078b54c58df6", "sighting_of_ref": "indicator--a56e83df-5a36-43bc-8e27-512cd01a94c0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3f431c3-b08a-40de-b73c-790b5a17a104", "sighting_of_ref": "indicator--8a8214b3-173d-454c-9ef3-ab38d9cff323", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df668ffb-3f20-40c4-bffc-f00e5faf2ff0", "sighting_of_ref": "indicator--7f8a33f9-8c55-4b78-9e78-ed11e8fcb259", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e78ab5d-2ec8-4fdc-8977-b73eb2622fb0", "sighting_of_ref": "indicator--8c881ad5-4991-4f45-ae87-a099ebb4cbd4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4232b1b8-f079-4aa7-8540-c003013e6670", "sighting_of_ref": "indicator--bb94e1b1-d5bf-4ad8-8f78-17d673ce1ef5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--647aeaa1-90b4-43fc-b854-11c01c5f3255", "sighting_of_ref": "indicator--a52cff45-8e18-4f2c-8391-4fec911e25f7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c82569-c4e7-44e7-a95d-3d29a688d53b", "sighting_of_ref": "indicator--240f1479-f881-4eeb-992f-a33d4cc1c4cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0623cea0-9c35-445c-adb7-a48531a0805a", "sighting_of_ref": "indicator--240f1479-f881-4eeb-992f-a33d4cc1c4cf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d0ecfc-c608-495d-b319-2dabbe7be29a", "sighting_of_ref": "indicator--ead31920-500a-4bbe-898f-bdd7e45a0aea", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--123e181c-0921-4100-b92c-b15e067d95ab", "sighting_of_ref": "indicator--215c307e-682d-4afa-ac0f-721d12ac2435", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2616ef-e10b-4372-b3de-4bc4d499fb04", "sighting_of_ref": "indicator--cf31ca2e-9232-4b5a-8511-80c19b75fd14", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16780cc1-f544-4ac7-b37c-e7908a733ab7", "sighting_of_ref": "indicator--cf31ca2e-9232-4b5a-8511-80c19b75fd14", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef54df2e-0c58-4ba2-8760-e139e0d03577", "sighting_of_ref": "indicator--d7dfdf1d-a3bf-42eb-b8e6-4519073f2269", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1a9576-79d1-4e46-9496-3463414d848d", "sighting_of_ref": "indicator--83e3fe83-0d03-4131-bf53-54faf9e8b3db", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47522e8-ebf2-46e7-b585-bdbad05e1712", "sighting_of_ref": "indicator--4042ce76-27ed-4da5-ada2-c03b8cda7437", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9808e9ea-73aa-41dc-a9c2-51ec49f0f0a8", "sighting_of_ref": "indicator--36e54c74-f6c3-46ed-ab65-f7dd428b5cc0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58af451c-5bb8-4541-ae50-6ef8d8990ff7", "sighting_of_ref": "indicator--7a74debf-23d8-448a-afa1-2c599246eab4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1603389-bf0e-402c-9244-87c91c313d21", "sighting_of_ref": "indicator--bc319133-ff02-4c41-aa6b-d1241b22579e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdad325-3767-4444-86ed-fdec0d76bf4d", "sighting_of_ref": "indicator--95f2c14f-ded9-45b8-8597-9275005f43d3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81f1440c-61ff-4422-8861-d0e8b1a14337", "sighting_of_ref": "indicator--b519764e-a3c2-45d2-ba64-779082c66226", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a4b580-66b7-40c5-a641-0fb6c86adaca", "sighting_of_ref": "indicator--4d08faad-dfff-498c-912c-128f89783820", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bd7e6f-566a-4562-9913-0f2503f7746c", "sighting_of_ref": "indicator--2e11955a-30d7-48db-a76c-4ea34185fa8e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341c4aea-4d61-4ce7-a29f-9812b27d9675", "sighting_of_ref": "indicator--e0337943-8162-4d16-a9a7-04b9dc1b24f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8965e6f7-e9a5-4dae-a412-f1e1009409ae", "sighting_of_ref": "indicator--0f678c9d-c159-412f-9541-8d2eabf9a53c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4061759b-ab4b-43ae-97ba-1cf3368dba2c", "sighting_of_ref": "indicator--f0ecb9d3-b8c2-49ee-b8d8-c5caebd3095d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ae6f72-d28b-40d4-9e80-4219a2881a75", "sighting_of_ref": "indicator--600ad359-84e3-47a7-aa68-6d361e13188c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab94e758-3c0f-4e32-9ccb-a16fa867f213", "sighting_of_ref": "indicator--600ad359-84e3-47a7-aa68-6d361e13188c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85818b74-b7d7-4d44-a09d-89647b6ef98b", "sighting_of_ref": "indicator--c1b9f9f3-63f9-47d6-9002-183a948210dc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953570d5-c95b-44ae-be85-414cd0ab97af", "sighting_of_ref": "indicator--ecf63e72-331f-4949-8b43-83c6396d5147", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64020e3e-326e-4ca5-9116-9381b3aa157c", "sighting_of_ref": "indicator--572fd1a5-f3fa-4637-ab18-90c1a8d052a4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab0e694-bbcf-4979-be17-4cfa0df64afe", "sighting_of_ref": "indicator--858e4d6a-7c79-4655-a437-779755d853b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ad7960-e406-40e2-b1bf-b65804f5c393", "sighting_of_ref": "indicator--afab39e1-4bfa-47cc-b5d4-95069d72ec7f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a691f1ab-9733-4cb5-ba3d-94ae386db24a", "sighting_of_ref": "indicator--37d5157c-2419-4ffe-b827-240b43941944", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f915d67-3b06-4fe8-af25-1231fd9b402e", "sighting_of_ref": "indicator--9a862c9d-61f1-4525-a8f0-9ac1356a6ae0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689667eb-3df1-4cbc-afa8-af4308dfee78", "sighting_of_ref": "indicator--ea878787-1f59-466a-91e0-5367962b9226", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facd9fc7-bb7b-4cca-b6d1-0f20cccd1800", "sighting_of_ref": "indicator--39250f55-5a11-41cc-92a0-9f74a5834b93", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab22086-cf69-43b9-a9da-42e1b6d3b540", "sighting_of_ref": "indicator--58ed8043-240c-4424-b62e-c9ffa5e7fb8b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--272da92a-47ef-462e-b6fc-e23274919fc9", "sighting_of_ref": "indicator--0ade17a1-b1f1-4122-8c57-3c7f975daad7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7961f16-7bc3-4ded-9b39-64b3fa2d0a24", "sighting_of_ref": "indicator--721e4c0b-cdaf-4c91-85e8-cae6d0f2555b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d95c76d-e20d-4779-a662-89d2f8b9e6d3", "sighting_of_ref": "indicator--59b7f48e-ebed-4c07-8886-463d4849984b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbedc114-cea1-45bb-9e00-9e93a380e8f9", "sighting_of_ref": "indicator--9f7db003-96c9-434b-87be-716194b81662", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909e6dd4-5f67-40dd-bb7a-e2707e0bd9e3", "sighting_of_ref": "indicator--1d436608-675b-4c7e-aea6-5ece7a75947d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a915e8d8-1855-4d3a-937f-c7abacdf6c2f", "sighting_of_ref": "indicator--e02832ab-8bfc-4b5e-9e16-5fa40659e0ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ededc73-753d-4d59-a6b1-b9d7c7676329", "sighting_of_ref": "indicator--46c5f0eb-2ea7-47f7-af4f-aa748a7e4479", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee0f53a-cf4d-4db9-91e4-c2da8e511099", "sighting_of_ref": "indicator--8a1b6ad3-debd-4864-9225-bfce92abeb63", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8d2637-b210-441e-ad39-956099e30f99", "sighting_of_ref": "indicator--8a1b6ad3-debd-4864-9225-bfce92abeb63", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817056c7-afa3-4ebb-94f2-f71e1ee04e7a", "sighting_of_ref": "indicator--12b877bd-eaef-4e0f-a9e2-be216d8acc67", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68802a4b-0ba1-4929-aec8-7d903b611491", "sighting_of_ref": "indicator--34ecb75e-079c-4efb-8472-9760a7119e41", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cde4b34-27f2-46d8-9ff2-fce38edc89ae", "sighting_of_ref": "indicator--88c64b65-e96b-41c0-ae0a-7618b82f8bc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca5f8a0-f2c0-4ded-9810-278f7730edeb", "sighting_of_ref": "indicator--b903e440-9e01-4ae6-9c9e-57bd1141e563", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f05ebfc-4cc4-49be-87c2-39a0de781104", "sighting_of_ref": "indicator--b57c3bbc-9a1d-408b-8899-2580a757730a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf80470-8872-46af-9478-e37004c87908", "sighting_of_ref": "indicator--aed3621a-4d69-47f7-8708-af9aa897f59a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a80af7-7dea-4b12-91bb-a195d3262714", "sighting_of_ref": "indicator--4fc74e72-a267-48c4-a9c7-43aee47819b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe05da1-dc35-4e48-af01-cca8beceed27", "sighting_of_ref": "indicator--283941ac-d981-4708-be02-7713785d98f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194ebf3e-f3ea-4080-a3c1-f29dc425adb9", "sighting_of_ref": "indicator--efedc13d-e4cb-41c2-8f59-dfa14f90b0bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35928827-de4e-4111-a50b-a2621750588a", "sighting_of_ref": "indicator--58f23797-422e-4d69-9dc9-172cb15b57a3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1ddf07-ebee-4979-86c3-741c607d9675", "sighting_of_ref": "indicator--27b2478f-fd9e-4f24-b1b6-0275d5260126", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3f2e91-1bd3-4d76-8fb8-13e781c60997", "sighting_of_ref": "indicator--3ca4533a-49fd-4d96-b6f5-e09706276e75", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f05d543-66a1-4a35-b50f-b5ce3dbecf65", "sighting_of_ref": "indicator--d65be961-b32d-48d7-8b07-d33038c46d97", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b168a2fd-4336-4adf-8ec4-5e37928ab19a", "sighting_of_ref": "indicator--bffb96da-8e14-4f0d-a986-6dc8aeecd7be", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f790bf0-5c85-463c-a1da-1a8f1300097e", "sighting_of_ref": "indicator--aabf5dba-03f6-440c-8633-2b95d5284b83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65018ee5-98d4-4c66-a5ba-f5ee3aefbaa4", "sighting_of_ref": "indicator--cc4525c4-c3cb-4257-bb65-d8839e5c15a6", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd862e06-c365-4f5b-b752-6748de0adcb6", "sighting_of_ref": "indicator--cd128235-7b94-4fe9-9606-d6549b13120c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c49938f-3129-4a67-92d0-94ae71861b3c", "sighting_of_ref": "indicator--d239525e-f2ba-476d-ae21-7454f8b55823", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cba8e2-98a4-49e2-b7cb-ff28722121e8", "sighting_of_ref": "indicator--997248b8-f86e-435e-a534-a3c1c8fa0053", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--106349f4-bc42-4e86-8d8e-6d64e1789b39", "sighting_of_ref": "indicator--6465af54-cd78-4806-ac54-4e87b2f6c8cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07e1cef7-e9ab-4baf-a84e-a1bd60acf325", "sighting_of_ref": "indicator--6c9cdfb0-b7ba-462b-9753-140ad9d2be1c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfb3dcf-60e7-4cd0-be11-a43b4369c8d9", "sighting_of_ref": "indicator--ba29c49d-9c28-49c4-9cfa-bd877b85d53d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b437ebb-30e5-4e0f-aee0-bf7c668503ea", "sighting_of_ref": "indicator--9d795cd0-26d8-406d-8e2b-3d44de81f7a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d58cd31-d0b5-4a4e-be4e-224a4c31af66", "sighting_of_ref": "indicator--f56399a2-e0c5-4af9-adad-241447911586", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--614bf879-5f80-4229-9364-a9d258f48cf8", "sighting_of_ref": "indicator--de994f74-037f-4132-8b55-2967a292118b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d42405-38aa-42ec-a7b3-5cb6c8c5e13c", "sighting_of_ref": "indicator--943ceeea-7827-413f-ac59-22f396f55a81", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eccda90-12ee-46f5-b9c5-7d6a2a89cb66", "sighting_of_ref": "indicator--943ceeea-7827-413f-ac59-22f396f55a81", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d319c5e8-fbed-415b-83ba-649e803ce4d9", "sighting_of_ref": "indicator--37c76c1f-76fe-404a-b626-02a5dd386a66", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ea51865-16f1-4fd7-b292-e37651606d32", "sighting_of_ref": "indicator--74daa0e2-9d19-44f2-bd92-7998c02ea8c4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fc3115-fb92-456f-9898-ae3b21255fa6", "sighting_of_ref": "indicator--74daa0e2-9d19-44f2-bd92-7998c02ea8c4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e99e80d-2496-4ad0-8b44-f0ea74baedba", "sighting_of_ref": "indicator--e24f6d90-9f1e-40d1-974e-769a1a802f5b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde3c9ea-a997-403a-98dd-69ed8e156367", "sighting_of_ref": "indicator--47bee9d4-631c-4f6e-8e5f-33c8c68ee544", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0228066-e6a8-4ca6-b83d-cce41f2510cb", "sighting_of_ref": "indicator--d1901b23-214e-4d6e-a9ef-8981fdefa279", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbeb383-fd4b-44e8-9b33-c2bdc35d84e4", "sighting_of_ref": "indicator--f68ba565-54b2-4dea-8624-c821b6f88a3f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc87d3e-d16d-4fd5-ad07-85c315c72c75", "sighting_of_ref": "indicator--e69909fa-4c44-4b54-8bed-8c0a8044fb0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a718875-c859-4c7e-ab17-fb58e22a8339", "sighting_of_ref": "indicator--0e5d6614-9736-4785-81ce-cb68cea215a5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984f9a5a-abdc-4367-9973-9e084951e776", "sighting_of_ref": "indicator--7e85399d-e953-4ad1-89d6-fb941799d0d1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6bcaf2d-faf8-475c-ae9d-af31f2aa1655", "sighting_of_ref": "indicator--aa845951-e574-4672-9fca-8495db350881", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--442422cd-fdc5-4d93-8cee-d75cd23bfa36", "sighting_of_ref": "indicator--005f1c8b-c9cf-4ef8-a9f0-02a894864a98", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a5b929-52eb-4794-a0e9-6ae5a51ba4da", "sighting_of_ref": "indicator--f6355c25-ee7b-492c-9a3f-96e0e91c0ada", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d97010-b192-484a-b72b-f3fd60653b2b", "sighting_of_ref": "indicator--11c632c8-1c4c-450e-963f-3410d60111d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd63a45-f28c-42ce-852e-12106f810ba6", "sighting_of_ref": "indicator--03fa2e27-b66b-43cc-b6ff-18453bbb2583", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38bb7f66-6002-4404-9564-7fc1919b5de0", "sighting_of_ref": "indicator--0571edb6-69e5-40f6-a5d7-1d97e003ff2f", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecfda83-50d2-4c30-bcab-c3fd8b791b5b", "sighting_of_ref": "indicator--28797743-713c-4c34-bd5c-1b82055bcc52", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e566594d-55e4-4cc1-acfa-ab8504e31d3a", "sighting_of_ref": "indicator--8a6e363c-af94-4785-9acf-1ee557849669", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17deb526-55a8-42de-989e-0d187bedd3d3", "sighting_of_ref": "indicator--e91ebf13-f188-4e62-a862-e0db2f49042f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1442b99-62f3-44b8-bf64-12d8687308b6", "sighting_of_ref": "indicator--e91ebf13-f188-4e62-a862-e0db2f49042f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd714ea-f1c4-4371-be30-a25bad73969b", "sighting_of_ref": "indicator--59f07c4e-45c8-419d-be2b-040d38c7ca14", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a1d804-cb5f-43e8-9fcf-3e045d60296e", "sighting_of_ref": "indicator--044fc445-3ecc-4d1c-915a-02fa5d97d808", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9efcb5-d9a7-47ea-8542-c544bc671c51", "sighting_of_ref": "indicator--1d85380c-93f1-4870-809e-db90b916c6f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988ac3e1-f491-4a85-9db7-27ca29f56947", "sighting_of_ref": "indicator--1d85380c-93f1-4870-809e-db90b916c6f3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f911b86e-6426-45e8-b361-882e20578ac9", "sighting_of_ref": "indicator--051ebf05-52bc-4e08-88a2-90ea1a193363", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31545b7a-0a7b-4d8a-9c8d-9cdd53644797", "sighting_of_ref": "indicator--900bbce3-56e5-48de-9116-26d7719a7a3c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207b1ed6-73a6-48ee-a421-71762761adb1", "sighting_of_ref": "indicator--f45099fc-2d0e-4d1a-bd5b-217fcb6f16bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef12f0b-b59c-497a-b025-4f705c35ea91", "sighting_of_ref": "indicator--f45099fc-2d0e-4d1a-bd5b-217fcb6f16bd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7799514a-167c-4435-a6ab-c19506df60db", "sighting_of_ref": "indicator--b35bef6f-021a-4a76-93a7-f5fda08e1f30", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26279e65-53bd-48f8-91f1-7701c90c0147", "sighting_of_ref": "indicator--b35bef6f-021a-4a76-93a7-f5fda08e1f30", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f734a0-346b-4b23-959b-fe8a32837f29", "sighting_of_ref": "indicator--7766f312-667e-4ef4-81c7-8df5e55f9505", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9416f53c-d0d3-4b15-9858-c0eb93fee694", "sighting_of_ref": "indicator--3cfa5f47-673a-4074-98bd-2a6f48f6c15a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5537e2d5-ce71-416d-9412-43e7b960b5d5", "sighting_of_ref": "indicator--0c1244ce-7c55-4b4a-a941-d312097de824", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff92e30e-2b57-4410-999e-095750a4a335", "sighting_of_ref": "indicator--1eaf05b9-b050-4dbe-ac43-0c698ea9d2b6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5467578c-2cb7-44f1-86b8-860bd6f280f4", "sighting_of_ref": "indicator--b196b0ff-26b1-4206-8404-daee8ceb1b93", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad041209-eda2-4dec-9100-8072de0b008d", "sighting_of_ref": "indicator--b196b0ff-26b1-4206-8404-daee8ceb1b93", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c33135d-c406-4e12-b618-fe6007d92a05", "sighting_of_ref": "indicator--a28c7868-5ed9-40eb-97ff-fc5640dff44c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70587fd3-7054-4655-84f8-58026cf2f57e", "sighting_of_ref": "indicator--a28c7868-5ed9-40eb-97ff-fc5640dff44c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0823a0-f31e-47be-80d7-134128970449", "sighting_of_ref": "indicator--80d7e36b-10e0-42d7-a971-c05611c5ee63", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3075e5e7-6639-4283-b60a-5ac31f29cf14", "sighting_of_ref": "indicator--315d9977-fb9e-4e39-85b5-1807225ab62c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e351157-36e9-44c5-9e68-10f57cf1eca8", "sighting_of_ref": "indicator--315d9977-fb9e-4e39-85b5-1807225ab62c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f6f78fb-900c-42f0-b516-c843c475f541", "sighting_of_ref": "indicator--6ea7418f-7134-4c10-8008-fc0a29865369", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531522c1-29c1-4929-963d-5f8bb37900ec", "sighting_of_ref": "indicator--313a7834-a233-4794-abc1-1b163514869a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f4efd7-a266-4642-84eb-6b8bb2177175", "sighting_of_ref": "indicator--e1cc9c8a-6365-40cb-94c2-30edf982bc2a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0a4bbe0-1d89-40f6-9680-e02bf40c7adc", "sighting_of_ref": "indicator--b9384d15-7f4c-4f5c-8853-81000cd375cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cc78ec8-dcc4-4eaf-bc8e-d5aea78357f1", "sighting_of_ref": "indicator--b9384d15-7f4c-4f5c-8853-81000cd375cb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990ecfda-507e-4eeb-83d7-863e7eb48648", "sighting_of_ref": "indicator--bad35197-f8d5-496e-89b6-b32556866b08", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a10a39-950d-45d6-8927-302a45e73e9a", "sighting_of_ref": "indicator--f21781a8-4aec-456c-b7f3-928e35545b46", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662eebf8-f98b-4977-acb0-aba8fc45af38", "sighting_of_ref": "indicator--ca909ecc-5f2e-4343-b995-749de39a2daa", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978f2a5c-3aff-4bef-b52c-1b2bff2d0660", "sighting_of_ref": "indicator--bf030063-5287-434f-a660-097732063bbd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447d553e-3627-451b-9453-48e9521596f3", "sighting_of_ref": "indicator--bf030063-5287-434f-a660-097732063bbd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585034fa-0a19-4899-94cd-d4589bcf341d", "sighting_of_ref": "indicator--065f2aa2-3bdf-4a40-aea6-c8fe072325f1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac8fda6-0b30-4343-abf5-faf461f85afc", "sighting_of_ref": "indicator--81f95e4e-ca21-44ff-bc0e-79b7aaee885a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb25d87b-1e02-49c2-ad9c-13de40bb75f3", "sighting_of_ref": "indicator--b55221e4-9b6b-4ed6-bf22-377de0f6a53b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5116dc-e28b-421a-9dd0-87c1fff8b665", "sighting_of_ref": "indicator--b55221e4-9b6b-4ed6-bf22-377de0f6a53b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d8c366-7242-465d-8fad-581985fb415a", "sighting_of_ref": "indicator--dca03ba7-d104-4d10-b388-7bb631a234b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6ea4e2e-4789-470c-b65d-54e7f97102d3", "sighting_of_ref": "indicator--dca03ba7-d104-4d10-b388-7bb631a234b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033fcfcc-4085-4f16-bd1f-3fa3eabeba57", "sighting_of_ref": "indicator--cc5b7735-b8dd-430e-acda-cfdbb229842c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1088d35-12d4-4da9-adc0-8b243eef4935", "sighting_of_ref": "indicator--e99b9e89-bd1e-4ae4-a8d6-d8411aa6c72b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158d7cbd-2620-43a6-bb5e-9a3b5e3935f0", "sighting_of_ref": "indicator--c6cd3e17-5296-4677-b775-6eaf241909f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5792d6-7803-4678-938a-e4ecb958e4f0", "sighting_of_ref": "indicator--c6cd3e17-5296-4677-b775-6eaf241909f0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615ec117-1a95-4f2b-9d37-f66b023ee93a", "sighting_of_ref": "indicator--42d8735f-d92e-4f97-894a-735a17c7f0a4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809824ad-fcbd-459d-86ef-1fe046c19dc4", "sighting_of_ref": "indicator--515ad25a-ee21-4ba4-a747-a8a254ed583d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74316446-c274-4a53-96b4-a6def926d4b3", "sighting_of_ref": "indicator--515ad25a-ee21-4ba4-a747-a8a254ed583d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d21094-cdd0-42b9-9ecc-fe45571b7535", "sighting_of_ref": "indicator--491442cc-98d3-4e1a-a35f-369c78302af1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211e513c-1b09-4900-bccc-6e16dc16fe82", "sighting_of_ref": "indicator--05512335-7378-4ee5-ab3a-8b1eea6fc3b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7af5bd-0ea6-4a88-a522-17c7d1c4dd03", "sighting_of_ref": "indicator--a4ae90af-a3f6-42ab-bf05-c966bef8943b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60d2599-db42-42e5-8f54-f663e5bc28f0", "sighting_of_ref": "indicator--a4ae90af-a3f6-42ab-bf05-c966bef8943b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bacb9df6-8641-450c-b8b5-766cf145479b", "sighting_of_ref": "indicator--5038f9e5-6bab-409b-b963-6be70143e841", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17799fbd-ee6d-4af1-a276-7265c26468e6", "sighting_of_ref": "indicator--5038f9e5-6bab-409b-b963-6be70143e841", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f413dad-ce7e-426d-974f-c94358e5ae26", "sighting_of_ref": "indicator--c2eb2bb8-f812-4876-9f2b-49de5aa303a3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb135c5-a714-4d26-bfe4-5536bc833d94", "sighting_of_ref": "indicator--96ccb27f-375b-434c-abdf-8d169140dcde", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8c88fb-e1b0-4ec2-b865-7c721840d665", "sighting_of_ref": "indicator--5c9c7864-7307-4d5a-bd1d-c23cbbf08642", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d39784c-cf5e-470b-8e31-4195c400311a", "sighting_of_ref": "indicator--e4d961a2-0f6d-47ae-bd1e-bc9c74afe5ce", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f932f0c-a56e-4536-8051-7c681dc561ea", "sighting_of_ref": "indicator--6f2ffc80-2da0-4ca2-a306-f6efef761298", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1cf0736-44a9-45b4-9ff3-281a79a065c2", "sighting_of_ref": "indicator--1a7e44dc-b44e-4f16-8928-9d1e62e5d337", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4260e74-1235-483e-9737-015db778fc09", "sighting_of_ref": "indicator--593e59d5-98b8-4a75-9f3c-de0336fcfc90", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf3c23c-b1b6-4b08-8873-c7b15b991785", "sighting_of_ref": "indicator--a172cf06-7a8f-4026-97d9-db78dc91a930", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddf349d-3f6f-4404-be43-859bc21609b4", "sighting_of_ref": "indicator--a172cf06-7a8f-4026-97d9-db78dc91a930", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3751fa7-832c-41bf-bbfc-cbe216b292cd", "sighting_of_ref": "indicator--b7655785-6956-42d2-a4a3-86f5a81eee20", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd43eaf5-e20e-420d-b5ed-6acd7bad7705", "sighting_of_ref": "indicator--b7655785-6956-42d2-a4a3-86f5a81eee20", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f60b30c4-efff-4ad8-bb4d-df20ba832a8c", "sighting_of_ref": "indicator--e2044ffb-1f54-4e2d-8770-b1949a242e32", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c66031-9da6-4eb5-bb4b-c86ea28b8e8a", "sighting_of_ref": "indicator--33e1ce41-850f-4aef-8f87-7dc6c48d7dc4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04037245-8d0b-467f-a4e3-e9fb3d3a0e35", "sighting_of_ref": "indicator--67c295e7-3d16-47dc-a904-d93ee056c600", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03ce31eb-27ac-492c-af0e-3b1c0d360546", "sighting_of_ref": "indicator--b152ba5e-5234-453c-ad9a-48cd05370a30", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764c65a2-a7f9-45ea-ba64-ee846bc7a364", "sighting_of_ref": "indicator--8858973b-4b66-41e4-8d0c-75786873ff08", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0cd3605-ca08-4f92-8817-fb5062840cb0", "sighting_of_ref": "indicator--4a633453-5f52-4e74-883a-8615c1922f90", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c06cb0-103b-4208-98e3-772ab9772bcf", "sighting_of_ref": "indicator--4a633453-5f52-4e74-883a-8615c1922f90", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ff4467c-16d6-49cc-833c-2b96d6704876", "sighting_of_ref": "indicator--e4e2912d-5f85-4f4b-be10-5173a5293923", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fbd413f-8ab0-4bdf-ae62-f02149ab7206", "sighting_of_ref": "indicator--42b76c73-a8f5-4140-888a-85e789011ad6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0a8d86-bcab-4574-82ef-fb6e46817603", "sighting_of_ref": "indicator--42b76c73-a8f5-4140-888a-85e789011ad6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd291d6-1e81-4c53-921a-5c548dd4edcf", "sighting_of_ref": "indicator--d5df657c-3d9d-449b-92cb-a2f387d9f74c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63dc071a-c91c-47b1-8aa5-f9006289fae5", "sighting_of_ref": "indicator--d5df657c-3d9d-449b-92cb-a2f387d9f74c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--595bd8d1-7689-4290-93f6-03097d89ab36", "sighting_of_ref": "indicator--dcd76f5f-0ffc-4569-bdeb-2cd6e5e08ba4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98afdd60-e00b-4046-8269-ee0c56899fb5", "sighting_of_ref": "indicator--e7f1d51f-12e9-4690-9537-abfe713c5663", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6c40de-a7d0-41f9-8959-3ed22bdf5797", "sighting_of_ref": "indicator--e7f1d51f-12e9-4690-9537-abfe713c5663", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a23a76b-ff30-4499-a6e4-545be00cf446", "sighting_of_ref": "indicator--81a5cd94-4aa3-4249-9992-385a26d1df08", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843dac8b-ed66-40ab-afa0-bde162b486b8", "sighting_of_ref": "indicator--eea25f17-ea36-4402-956f-bda597fbe479", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b77cbbb-74d4-4d51-ac76-569798df44dd", "sighting_of_ref": "indicator--eea25f17-ea36-4402-956f-bda597fbe479", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8a74148-5aed-4f85-bb58-cd29a6494f51", "sighting_of_ref": "indicator--c2ac70c8-9310-4ae8-a99e-f67ea2094445", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53c0509-09a5-4b3b-aaf1-acafab49ccc8", "sighting_of_ref": "indicator--8fd21681-4ec1-424b-ba3c-a2a76d970ba9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e181f1-075c-474b-91a9-0f344072afd1", "sighting_of_ref": "indicator--4b50edc0-e8ae-4cf0-b61e-23f225210980", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94120bd7-f8b6-4eae-a1f8-dc867aa42e36", "sighting_of_ref": "indicator--50b83021-470a-4c5d-b9c3-3ef46980c911", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--584b2f99-9504-4b79-8955-d5c898960d47", "sighting_of_ref": "indicator--50b83021-470a-4c5d-b9c3-3ef46980c911", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2f770f-0ce7-40b8-9f4d-7441a02e2267", "sighting_of_ref": "indicator--554cb5e3-e922-4f09-93cc-144fe4788f43", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4391d314-95c5-41d0-b05d-730799edcbb8", "sighting_of_ref": "indicator--9478fd01-272a-4347-844d-395319971b1f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e5832f-6cf7-4bc8-b105-bde76dc9d34d", "sighting_of_ref": "indicator--9478fd01-272a-4347-844d-395319971b1f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49510ee-919e-4688-91f8-d09b64e455d8", "sighting_of_ref": "indicator--a4cf9534-1033-4643-b137-25dbe80695bf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b806d2f3-4378-4c16-b4da-5033016fb01a", "sighting_of_ref": "indicator--a4cf9534-1033-4643-b137-25dbe80695bf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbbe3b1-1258-4334-b091-2373dfe518c4", "sighting_of_ref": "indicator--7dbbc069-12f1-4f08-b850-164fd54e005a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d468dd63-9d20-444a-9681-5e65757cd12f", "sighting_of_ref": "indicator--661ff23e-b0c3-4269-845a-dbedc51690ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d2b99d-6f7a-44e8-9b9a-34bcd4893418", "sighting_of_ref": "indicator--6b28f56c-68af-4bb9-b582-e45c55ae8721", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2bc4dd5-9893-4818-bdb4-e3043de1b7ae", "sighting_of_ref": "indicator--6b28f56c-68af-4bb9-b582-e45c55ae8721", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15d7dc1-6b6b-4155-9b22-f46e9b90505f", "sighting_of_ref": "indicator--b974a682-732b-453a-96c8-cae7d3f8c921", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0af4ed-af24-4892-a7e6-c742d7355ccd", "sighting_of_ref": "indicator--b974a682-732b-453a-96c8-cae7d3f8c921", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c050a9d6-e8bd-40bf-bc93-72126f75878c", "sighting_of_ref": "indicator--24985198-54da-435d-b1f3-8b302180d0c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1347baca-70a1-4f92-a3a2-e34f789c22dd", "sighting_of_ref": "indicator--24985198-54da-435d-b1f3-8b302180d0c9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c152dab-c2a9-4341-bfc8-9e8e1984f678", "sighting_of_ref": "indicator--b6708f3b-4184-407e-80a3-21b40702689d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e58597ca-a507-41e6-a1d8-fa472942a95e", "sighting_of_ref": "indicator--b6708f3b-4184-407e-80a3-21b40702689d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdac231-6034-418f-81cc-8d5a826e8840", "sighting_of_ref": "indicator--c669aabe-7c7d-4361-8f1d-67ce5f026b2a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8cc2edc-601e-4749-a08d-71837997b721", "sighting_of_ref": "indicator--5c05fa61-d0cb-4620-9e29-312c69288b2d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427aa91c-48f8-4834-b21e-19aef6e1a17a", "sighting_of_ref": "indicator--d54461ee-a706-49f3-8018-a6a2be13efba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4c4756-69de-4358-b3d6-ed11bf7634fc", "sighting_of_ref": "indicator--ea80e97d-3b83-49c8-a7d7-e1fe2382c718", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27273ac-373a-4d9b-ba7e-5f26cc3dfcb5", "sighting_of_ref": "indicator--6fbec674-0877-46c0-a755-96d7a3595fe5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb46d20-36bd-480d-a4a0-15d9ade6fb5f", "sighting_of_ref": "indicator--6fbec674-0877-46c0-a755-96d7a3595fe5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7868f27-d34e-4304-9781-4ae7724103c6", "sighting_of_ref": "indicator--63ec19a9-79d8-482c-8f05-939ee959f73f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e7c4c67-8f0d-4e07-a111-ea6004950950", "sighting_of_ref": "indicator--dc0792a3-9b1a-43b1-ae7b-c6dcffd0ef20", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9acdf8-77bb-43f4-aa9a-916ea21ae65a", "sighting_of_ref": "indicator--bd6f6aa5-17fe-4b3e-bdf8-d37b5fdd348f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51837e13-135f-4872-bec8-08b6a3d280c3", "sighting_of_ref": "indicator--225e0092-14a1-405f-b24b-0f6fc6a71994", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19355b3d-d86f-4e4a-940e-6376f4be004d", "sighting_of_ref": "indicator--225e0092-14a1-405f-b24b-0f6fc6a71994", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2358bd4-5b11-48cc-91a3-c521bc8427a4", "sighting_of_ref": "indicator--bb44d30b-d2b7-457f-9fed-ac0d415f0d64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b656bb-72f4-4456-96ae-7fa4ce15b390", "sighting_of_ref": "indicator--2ff6611d-0e0f-4004-9701-4dda8fa99e47", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a37448-571c-4a31-978c-1f34ccdf5064", "sighting_of_ref": "indicator--4d57408f-2241-4fbb-8150-e73383e5252a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141486c2-1a21-4355-8d6f-ae118afbfb2c", "sighting_of_ref": "indicator--29f737bc-7dda-448b-8079-d484a3a9d3e0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4796d4-908e-4126-959d-3bac229d1c7d", "sighting_of_ref": "indicator--1ea3b5e3-6ac7-49f8-ae6e-fb2b74b8b88b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a115d3-ed98-482a-9875-09b6c804f0e0", "sighting_of_ref": "indicator--485c94ca-107e-4f48-8bbe-9318a3aacfde", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1660177e-7774-406c-81e9-cf9ffde264a7", "sighting_of_ref": "indicator--5308e10f-36bd-4e49-bb2a-ac5da64c094c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a0f263-c8e4-48c6-aac3-ea2ed962520f", "sighting_of_ref": "indicator--5308e10f-36bd-4e49-bb2a-ac5da64c094c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322fdd97-7f88-4734-8138-de66b61d5181", "sighting_of_ref": "indicator--8679a87d-58ea-48c0-a0cb-0ce888a2558f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68e0c3b8-03ab-4826-b624-764beb949cd4", "sighting_of_ref": "indicator--43f01c87-9656-4329-8916-4925ece8ef82", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef7cba2-b0c8-4259-9317-c270b2ed9275", "sighting_of_ref": "indicator--43f01c87-9656-4329-8916-4925ece8ef82", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13503d1-2dce-490b-88c5-405ed47d36dd", "sighting_of_ref": "indicator--1a1bd1e2-4ac9-4418-abd9-18ddb8bc4f9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b50c2e-194c-4915-a87d-ff453e7f937b", "sighting_of_ref": "indicator--e6f402dd-9626-4658-92cf-5014f8834acb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2ba19c4-cd24-4202-9a62-68ad592b45ba", "sighting_of_ref": "indicator--bf0bca13-3deb-4c9f-93a6-b66a8e3cef24", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1edcf3e8-bc79-4a60-8181-7a7329051409", "sighting_of_ref": "indicator--858601a8-89ec-4199-b6a3-de05edc7f31d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c6db15-d493-4db1-b492-eadc3b7c3b27", "sighting_of_ref": "indicator--b21401a5-8dab-45c7-9d2c-cb8f54a47706", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0828c8a-6805-43c4-8a84-58f19e5d7225", "sighting_of_ref": "indicator--b21401a5-8dab-45c7-9d2c-cb8f54a47706", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08885c15-1862-4dcd-a78d-e4c4ee511f37", "sighting_of_ref": "indicator--027c9475-8525-4337-9c8d-e265a06e2b82", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc36fd08-6f08-4239-b4d8-5e521f9c529e", "sighting_of_ref": "indicator--ae7bd514-d159-4501-bb93-624f653c01f3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105dee3a-0646-45ed-a6b6-03d3be0d16a4", "sighting_of_ref": "indicator--b30f57b9-266b-40fe-a9b0-8440daa6f0c5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ce803a-687c-46c9-a002-604ef44c31ab", "sighting_of_ref": "indicator--b30f57b9-266b-40fe-a9b0-8440daa6f0c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf85449-f7a4-44c7-8cfe-d22b0ff330cc", "sighting_of_ref": "indicator--2741a108-eb31-46d3-8611-225c66c59653", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efca3b09-426c-4d53-8ec6-bf5ca52c0501", "sighting_of_ref": "indicator--50bf0618-ea91-482d-9e45-0f948fe21ab8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b268e97d-f241-4a2c-b7a1-065a5f484a8e", "sighting_of_ref": "indicator--50bf0618-ea91-482d-9e45-0f948fe21ab8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5adaa9-4056-4ddb-aefe-ef991d951c82", "sighting_of_ref": "indicator--a73727f5-892d-4a2d-b3b5-bf6c80fcc4da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9086cf-c0be-4944-8d55-1980da305ef5", "sighting_of_ref": "indicator--ffbdbd3d-264a-4a77-b3ac-b7b39346a97c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2769373b-be20-4cf3-8a78-d4acbf175d7c", "sighting_of_ref": "indicator--c472bf4f-e73e-4cd7-963b-a61235e628b6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c738f99e-6fb6-4042-bf77-747e90b2c287", "sighting_of_ref": "indicator--c472bf4f-e73e-4cd7-963b-a61235e628b6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17001c03-5366-461e-b24a-1e824678fa8d", "sighting_of_ref": "indicator--f7937be8-a12a-4c1f-98b1-792814121bf6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db39fc36-dfb6-4823-a168-c9f1ad691a07", "sighting_of_ref": "indicator--3a088ab5-e496-499a-853f-dc5512be7e98", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b6f4b87-f36a-435a-be9e-ea252cbecf1d", "sighting_of_ref": "indicator--3a088ab5-e496-499a-853f-dc5512be7e98", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e555e6be-fec6-4610-a049-7ff0aaad9bb5", "sighting_of_ref": "indicator--ada0474d-e862-40be-9fc5-31c4bde2d26d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adecc9da-050a-4c21-9df3-a7191abb17ed", "sighting_of_ref": "indicator--ada0474d-e862-40be-9fc5-31c4bde2d26d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4acfe201-c0af-4ec6-8658-1424e2b945ea", "sighting_of_ref": "indicator--829b1fdd-f3d1-411e-9624-587b9c05007d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f47a864c-0ebf-485d-9993-bf5109d9ca89", "sighting_of_ref": "indicator--a6c996b2-66ca-46ce-8c9c-cb8eed09bfe1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab363a2-51f2-4f6f-a3b6-251cc9bad567", "sighting_of_ref": "indicator--7322ce30-c532-41b7-8309-a3a941535fa2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaf1574-472f-43bf-9784-8dee133dac12", "sighting_of_ref": "indicator--9dff8f20-ed8d-452a-8c22-6a0c8d349705", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28dcc024-2a3f-4c3a-b457-cb12c41eac17", "sighting_of_ref": "indicator--644e78f9-1e6a-4270-acf0-eb1aeca80596", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1cf1af9-f01b-4a06-98c9-9a5ecf6eb581", "sighting_of_ref": "indicator--03b5716c-1fd6-44c0-b8c9-684791140dd4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75158fc6-5ed8-4164-8736-7e48e52b4fec", "sighting_of_ref": "indicator--96f0b6ef-0890-45df-adf9-dc14d06189b4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87853918-5add-42ee-a1db-f2368ca25636", "sighting_of_ref": "indicator--96f0b6ef-0890-45df-adf9-dc14d06189b4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dd29fd-e6e4-400e-883b-2782d3a1d6d8", "sighting_of_ref": "indicator--5443d360-4ef9-4190-aff1-80c8e987c723", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb03f1fb-f1a8-4419-8e9c-69f02f6cefa4", "sighting_of_ref": "indicator--5443d360-4ef9-4190-aff1-80c8e987c723", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba8865f-b15c-41c3-af1b-c74301538b69", "sighting_of_ref": "indicator--86b8b784-1bc3-4623-b646-1e9bfdb0d0ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487f042f-6cc9-42ab-97b9-e74dbf9dd56b", "sighting_of_ref": "indicator--86b8b784-1bc3-4623-b646-1e9bfdb0d0ed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b1cdd1-f767-4bf8-8ab2-193542e44c5b", "sighting_of_ref": "indicator--397b1b6d-11ef-4bde-b826-d32ef236d123", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c9ad224-1713-424c-8c57-a2618419b6a2", "sighting_of_ref": "indicator--fd75aca8-8371-43dc-b2b5-226aece3b61d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5807c7b4-fed0-493f-93ec-17a0883a1002", "sighting_of_ref": "indicator--e58dfe06-28ff-42ef-8e39-ea17d8c39687", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbd1b6e-04a6-472f-8607-4d088072b65b", "sighting_of_ref": "indicator--7c883e9b-4342-49f8-abb2-dd0264e281d7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f876d4e5-1e48-4b10-8152-f0dcf77dccd9", "sighting_of_ref": "indicator--94f654ef-a157-4721-bcfe-4829e679ad3d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb61b20-3a95-48f7-9b30-a4271922a40e", "sighting_of_ref": "indicator--f9c38542-62be-4ee5-997f-3894bdc00a5c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eadda4b-49eb-4cae-b465-eea4aa3bd64f", "sighting_of_ref": "indicator--f9c38542-62be-4ee5-997f-3894bdc00a5c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73616a21-6a6e-4e1f-a13e-e78ed414448f", "sighting_of_ref": "indicator--1dbf0066-9d0a-4cca-b963-0e242b23826e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d8c5dd-fb1c-4f62-93cb-c08dc1719f24", "sighting_of_ref": "indicator--1dbf0066-9d0a-4cca-b963-0e242b23826e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6a28bc-92a3-4d3b-8457-3c6c8d48ec5d", "sighting_of_ref": "indicator--ae20dca8-b8b3-438b-8577-ba353e041407", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daafac7c-6d81-42d8-bc67-1b6c1287eea9", "sighting_of_ref": "indicator--ae20dca8-b8b3-438b-8577-ba353e041407", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561d4724-b3b6-4656-a267-fe6b5e43989c", "sighting_of_ref": "indicator--03985e54-29d1-400e-aa81-66955b00d2ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3a865e-8a61-4611-8458-ec4205c5e6f6", "sighting_of_ref": "indicator--03985e54-29d1-400e-aa81-66955b00d2ac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0a435d-d360-4e11-8114-e53db125a0ed", "sighting_of_ref": "indicator--a2f3deab-3614-47dc-8067-e764ff1274ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21db85b-5f7f-4adc-81f1-e314a764b66c", "sighting_of_ref": "indicator--e249b2ae-3068-4025-a8b9-b24cb4fd3b2b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359f304e-af9c-4ffd-9b9a-ebb9c7a4c2e5", "sighting_of_ref": "indicator--f445d813-cbc3-4c1f-8ce8-f4f525f2cd0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd53c995-27db-49e2-a18b-08f631a5de5c", "sighting_of_ref": "indicator--6a0a05e7-0963-48a2-abdd-7eca25d88d45", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5950c125-74c1-4930-8a3b-95691f5d1dfa", "sighting_of_ref": "indicator--6a0a05e7-0963-48a2-abdd-7eca25d88d45", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85ebfdd1-7f98-4d80-b62f-91a1e24a1420", "sighting_of_ref": "indicator--69e786e6-6fe5-466a-b854-dc68d4235bb8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a4176f2-7203-4b05-9427-f0b0852671da", "sighting_of_ref": "indicator--f1881c99-0377-45bd-9502-6364d1cb4d52", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4136e73-ff91-44f6-8326-b183f4859c34", "sighting_of_ref": "indicator--b8ef0bb4-f5f2-4d8f-a3fe-ba9154c8599f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc15be1-1c2e-46ec-afcf-e78316d57569", "sighting_of_ref": "indicator--1a157ab8-a172-4757-b09f-3150507558e4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf842d4d-971a-4b86-a292-a79dd65746e0", "sighting_of_ref": "indicator--47f555bb-a266-4f1c-b8be-ea9376722af4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f1569c-0371-4ee0-8abe-1a1d2a2b54c1", "sighting_of_ref": "indicator--35b9deea-9da2-4323-9d23-12c7c6086971", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0830973-56c5-43c1-9787-90ae6998282d", "sighting_of_ref": "indicator--35b9deea-9da2-4323-9d23-12c7c6086971", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942b722b-a34d-4819-9ca0-0862858b2549", "sighting_of_ref": "indicator--9255d7f6-7920-445a-b52f-aab79ed7186d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c472871-257f-4cff-8550-819ff04c3acb", "sighting_of_ref": "indicator--cea86ec2-f61d-442c-ac94-629147e827b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58358e02-9ce6-4a64-8a8c-fce4192ef130", "sighting_of_ref": "indicator--cea86ec2-f61d-442c-ac94-629147e827b1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d16d16-0ee2-46e8-8b49-860b3b8430a4", "sighting_of_ref": "indicator--1502d939-e6a0-4f35-8894-c0463b90a16a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ade0b2e-dd76-4f43-8117-cc0039e173ae", "sighting_of_ref": "indicator--2e4cd543-1303-45cf-a7a7-b92f27dddf72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77a2e9c-771a-4e85-a7d1-0f406eb6480c", "sighting_of_ref": "indicator--2e4cd543-1303-45cf-a7a7-b92f27dddf72", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adde26d9-5cf1-4825-af40-a11354e2311e", "sighting_of_ref": "indicator--72e8824c-a0b0-479f-9ad6-dbb0e777ca6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4367a8ab-234a-48bb-924a-37e5251696c4", "sighting_of_ref": "indicator--72e8824c-a0b0-479f-9ad6-dbb0e777ca6b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500288d9-076d-4e4f-bb62-89001d168f30", "sighting_of_ref": "indicator--b32459d0-f9df-4a16-bfdf-815807958afc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dca1756f-6d1e-463b-b5f8-ce1eec526e2c", "sighting_of_ref": "indicator--b32459d0-f9df-4a16-bfdf-815807958afc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97882055-6f94-435c-8c6b-e0205c150017", "sighting_of_ref": "indicator--62d0f28c-6e15-4c21-b51c-9d99b320eee9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c27ec89-92d8-44d3-837d-baa5ec6121f2", "sighting_of_ref": "indicator--62d0f28c-6e15-4c21-b51c-9d99b320eee9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83741480-5dee-444c-998d-810c0ce05169", "sighting_of_ref": "indicator--9a2afcfe-e23f-4bc9-bea3-11601134fa0f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48558960-f6f0-4727-88a9-39f0d3b0d3e6", "sighting_of_ref": "indicator--eaf0d724-3296-456b-b533-096661baa4cf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91a76d2-c780-4159-a37c-6623136c42a7", "sighting_of_ref": "indicator--87d5175e-f383-4fc6-b258-2363745c7e55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821db840-dff2-4df8-9136-154071b3bf8b", "sighting_of_ref": "indicator--87d5175e-f383-4fc6-b258-2363745c7e55", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dd2d314-2872-4c8d-8e2c-50dab4bbf11d", "sighting_of_ref": "indicator--086454ce-7f06-4e7d-a9ab-c5f6865e8c75", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9f9b368-b064-4d11-85e7-3a94342663f2", "sighting_of_ref": "indicator--086454ce-7f06-4e7d-a9ab-c5f6865e8c75", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a0444a-d95d-4452-a23e-7206447d534b", "sighting_of_ref": "indicator--77cf3ec1-388c-4ecb-ae81-14686dea1b6f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f6245c-1748-41e4-8d08-b66a76b4b984", "sighting_of_ref": "indicator--75cd0a72-ad50-4136-992e-f117ab668095", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c79d7d84-d748-4b24-8ae8-984e821d7044", "sighting_of_ref": "indicator--0b76a25c-b106-41dc-a521-785b2ffb6d03", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d71051-f958-4e75-ad74-e90257ffa8db", "sighting_of_ref": "indicator--503d19cb-4570-4ff9-8d81-a49dc4b5ba7b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be40e308-99fe-49d4-9735-fa45aee2d670", "sighting_of_ref": "indicator--299de424-6533-45a5-b771-9c78b3a14d37", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ad1cfa-6d67-4b42-a447-aff7e98d612a", "sighting_of_ref": "indicator--299de424-6533-45a5-b771-9c78b3a14d37", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdb9cfd-4d2f-41ee-b253-bdb590c7b260", "sighting_of_ref": "indicator--eeec0199-65b3-49a9-8b3a-63a505d61a4b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a327994-99d6-4768-b55d-30e8a1e6ff8d", "sighting_of_ref": "indicator--0c2b0a50-be4a-47df-8d29-9a7088a1ce6b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379977e5-fcdf-4c51-b398-d41c84159782", "sighting_of_ref": "indicator--7fba3fdf-781b-41e1-9fef-ac01b60e781e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04592d7b-e494-456b-a2c6-c6735577a245", "sighting_of_ref": "indicator--d713f416-4c71-4558-b3d5-cef82eac9324", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceffbd33-0ea7-406a-bb04-f33191747dea", "sighting_of_ref": "indicator--17d79750-5131-4a3c-ab0c-c877690e6fc2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f87b6fda-b503-4473-837e-da7bc50e4c09", "sighting_of_ref": "indicator--cc2db3e0-9c33-4fcf-8f0c-954e0b0b10c4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24123dd-c87f-42b5-80bf-a64037e588c3", "sighting_of_ref": "indicator--0316d9c0-6397-45ec-b8ad-3bef1212853c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e3fc51-0c27-4983-bb01-8df44c059c2e", "sighting_of_ref": "indicator--975cbf76-7841-475f-989d-712d7f941ff6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed88c1ea-6d73-4f0d-bad0-14e6e854350c", "sighting_of_ref": "indicator--6702f471-5045-4c41-b1b6-ae424634820f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99122bf-1fbb-4730-86ac-a054561a5cb2", "sighting_of_ref": "indicator--9fc0cb71-6635-4f4e-b054-1c04b848cfca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa27a90-c9bb-44e3-abb8-7bc1d4b6ebf1", "sighting_of_ref": "indicator--0bedac48-1f27-4da6-bdc6-b46dedba5955", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d2593e-dd70-4a3d-9ff1-d8a4d571ffab", "sighting_of_ref": "indicator--a8cc28b5-ab89-497e-888e-bb0c9e206660", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35254647-f6cd-4186-a381-76d524791543", "sighting_of_ref": "indicator--bb570c76-6973-414b-b615-7fa82c7ca803", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62dc96b3-3850-42ce-b027-619f4b171ce5", "sighting_of_ref": "indicator--41eb026c-42d7-4620-acce-e50ea59c39e5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ce6517-1140-47c4-85a0-6033ef32e296", "sighting_of_ref": "indicator--41eb026c-42d7-4620-acce-e50ea59c39e5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de124a83-e2c0-413a-88e9-51ee1e909739", "sighting_of_ref": "indicator--240873da-32c9-4898-a0d8-288b0397c945", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc971c21-4095-4849-a15a-6f6e1016f9c4", "sighting_of_ref": "indicator--240873da-32c9-4898-a0d8-288b0397c945", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--645d4d60-cf9f-4f81-b56d-666d0e19cb7d", "sighting_of_ref": "indicator--4c32a6ed-0795-4b1f-9d1e-3baaf83a6ded", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc75b76e-05ad-4357-8b58-b7ba0f9fcb1c", "sighting_of_ref": "indicator--f0acb0df-fd93-410e-ab9f-f70760f26b89", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58ac6ee-97a4-485b-979e-5872470be725", "sighting_of_ref": "indicator--f0acb0df-fd93-410e-ab9f-f70760f26b89", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ce537b-60b3-41d7-8e78-34d7662619cf", "sighting_of_ref": "indicator--75046c9b-5495-4fff-a681-d7454bea7543", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df18d186-0d36-4ebf-bf3a-d900d943427d", "sighting_of_ref": "indicator--75046c9b-5495-4fff-a681-d7454bea7543", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd706e1-c991-4bfe-b6e2-020da90da7a6", "sighting_of_ref": "indicator--8f284d05-a832-45ab-90e0-dfa7dc40fcac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d60d05-c749-4e8c-83fc-6205ec3b1b2b", "sighting_of_ref": "indicator--e81112d3-9bec-4b8c-a168-0cdff68dede1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3342b25f-dfee-44a1-90fd-db242701e2dd", "sighting_of_ref": "indicator--de02dcf5-5d94-47fd-95ad-a8c8d17489c4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d8dd6a-b797-40e9-80bf-19e39e44716b", "sighting_of_ref": "indicator--74873f23-cd97-44f4-bef5-8c867b60b808", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a308f4-4ed2-4fc5-9133-30d578bd56fc", "sighting_of_ref": "indicator--74873f23-cd97-44f4-bef5-8c867b60b808", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5e07dd-35ec-4ec7-a92d-3eddf5fa9ded", "sighting_of_ref": "indicator--c1de8fd6-8042-43d7-82fe-18b08f7f1479", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d762f90-2116-4127-89f6-3e259a08ae28", "sighting_of_ref": "indicator--c1de8fd6-8042-43d7-82fe-18b08f7f1479", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7dc7591-d302-45e4-83a3-b8332a52ea05", "sighting_of_ref": "indicator--31d8c834-2c18-4441-825e-918b25331aa4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c3af244-2105-4160-97d2-0c373b008680", "sighting_of_ref": "indicator--6e2fec2c-5410-43a7-b58c-5bbcfb195aab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d397e39b-4f1f-45b1-885e-b0e2923736f7", "sighting_of_ref": "indicator--8c76565a-78ba-451e-b0b8-de63e3fa7786", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111a4272-3aa6-454c-9039-c314678d5277", "sighting_of_ref": "indicator--8c76565a-78ba-451e-b0b8-de63e3fa7786", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d7a631-aee0-4c1d-91ca-2c225e27c42c", "sighting_of_ref": "indicator--5111e6e2-4a1d-455a-8cf6-ec9717574093", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6bf9cd0-3cef-4e3d-92a1-7a33569a1eda", "sighting_of_ref": "indicator--5111e6e2-4a1d-455a-8cf6-ec9717574093", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5feb8876-97fb-4895-b9f5-69d081abaa2b", "sighting_of_ref": "indicator--5e627818-8844-412f-b69d-9548c8a35e61", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a702225-ff17-4792-a838-44ac1c3d8347", "sighting_of_ref": "indicator--3b3b09d2-2ffa-4bd2-87c7-89a99d2543cc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c000c352-4dbd-4223-998b-c21444fdfd34", "sighting_of_ref": "indicator--b34dc984-97e3-4742-8f52-e0f4517d89f7", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabce289-0a4d-4ad4-bbd3-00b29c39b097", "sighting_of_ref": "indicator--72c83704-52b2-4c27-b0f6-61cb0d74a350", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--475e7ea3-bab6-410e-ab42-cc921aae8544", "sighting_of_ref": "indicator--84bfb6bb-4590-4c7d-98a7-c695c5484d6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4976e8-a9c2-43ab-95fc-a7c07c6fcff9", "sighting_of_ref": "indicator--84bfb6bb-4590-4c7d-98a7-c695c5484d6c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e8b03f7-6fe9-44fc-9740-a4c74cf0b600", "sighting_of_ref": "indicator--3247a198-bbd1-45fe-81c5-1e66abab77b9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c754952-73bb-4d21-b20e-ee203d39deff", "sighting_of_ref": "indicator--dff1bef3-1d3f-4de6-bb85-e707a77bb5da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e67606-da94-4686-b83e-eca357ae82a6", "sighting_of_ref": "indicator--dff1bef3-1d3f-4de6-bb85-e707a77bb5da", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf9a029-1e42-43f3-9844-b730914dc219", "sighting_of_ref": "indicator--ac28191f-195a-4a9e-a906-114ed1ccdcda", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9dd64e-9293-4206-98a0-9942ba76f829", "sighting_of_ref": "indicator--29eb0069-74de-4bab-a581-9c970ad3fd71", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5f2071-f5a5-42a2-a6f3-4cdf2de737bf", "sighting_of_ref": "indicator--29eb0069-74de-4bab-a581-9c970ad3fd71", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d97fbde-4eec-4154-a31c-2abfcee3523e", "sighting_of_ref": "indicator--b8dd87b5-4208-4d78-a22f-082e709b3c74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef72f9d-5a2d-40aa-86b2-b7c239b9a78b", "sighting_of_ref": "indicator--b8dd87b5-4208-4d78-a22f-082e709b3c74", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99f12ce1-9883-40a3-887a-5b122c547a20", "sighting_of_ref": "indicator--639a39e0-c9ce-4820-a0ba-474449d61f28", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bca0de1-15db-40fa-a057-3a222401bdb0", "sighting_of_ref": "indicator--209870b5-eb1a-48dd-b480-a307672c43fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d19aad-05dd-487a-83ef-3a637fcf7d9c", "sighting_of_ref": "indicator--2dc7cbf7-b069-47ca-94c0-5b02852e0fdc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06233183-3fce-4fbc-9815-0f554c523e37", "sighting_of_ref": "indicator--1d85b828-de84-4abc-ab2d-044fde81960b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd15428d-d52e-4eb0-994b-61b9889ffe78", "sighting_of_ref": "indicator--2215afd0-6149-4377-89a5-17178ae8b0ca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92f7db15-ca4a-4455-ab43-490ad4b4c33e", "sighting_of_ref": "indicator--01df4eda-c9d6-4e37-b1ac-b502ff248139", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2095ce23-2a4a-460f-ae35-c1f833ca5df9", "sighting_of_ref": "indicator--fb66cff1-ab70-479d-a638-5dc44bb7ae5b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bd8201d-f4f5-4528-93e4-0fcb056cc892", "sighting_of_ref": "indicator--4da6cad1-3657-4170-a250-694e9b7bc6fb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b70b2c1-847c-4735-bfa4-1a14d0c3b53a", "sighting_of_ref": "indicator--c29953d9-a905-4c63-99a7-7ae43d9b6e26", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e483e0c1-2671-4502-a5d3-61bdebc75e69", "sighting_of_ref": "indicator--52d7b866-e344-407b-bc61-1658497e55b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090335f7-c356-4956-917a-0c2bc1927c96", "sighting_of_ref": "indicator--51042345-f8ae-4cce-a2d6-cc2ba2f44163", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cd71f1b-1c8b-4582-ac33-9b1d15bf5f3d", "sighting_of_ref": "indicator--d7a097c0-747b-4820-bc0a-e099febf3331", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1243ae1e-d738-478c-9168-92e53a408050", "sighting_of_ref": "indicator--b4995f69-cbbd-45e9-aa9a-2972602e825d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da36a09-791a-44e1-82ef-fc59eeb3ac65", "sighting_of_ref": "indicator--e3bd9bf5-1939-464c-83df-e292d4a46149", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0812910d-4fe6-487e-94d0-96753b2b4a93", "sighting_of_ref": "indicator--f1ad7bd7-581c-407c-b50a-77923c974559", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d78958-27d8-469f-9a55-a8cf5dbf4bf4", "sighting_of_ref": "indicator--617a0cf0-e45e-4aa7-a0c5-4b0397240fd8", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3d66c3-97cf-4ac3-b944-81b001a6b03e", "sighting_of_ref": "indicator--617a0cf0-e45e-4aa7-a0c5-4b0397240fd8", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08257152-f58e-455b-a664-cfe806fee705", "sighting_of_ref": "indicator--6868fa4d-184a-4b4c-8ad4-8b7255c26602", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca151e4-438c-436d-b65b-6c53857c4203", "sighting_of_ref": "indicator--8fed6545-7064-4f49-a714-5c1509afac4d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adf1d1f-7f0c-48c8-8e31-86faa7ce4a41", "sighting_of_ref": "indicator--285ef571-29f8-4ee9-8f4d-defd91a785e4", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f711f6b1-c8ac-4bbb-ad5f-95644e50e106", "sighting_of_ref": "indicator--58ebee3f-d690-45aa-9d4c-71ef2a609b6c", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--663d607a-376b-41b5-bc02-ae26efc1fba5", "sighting_of_ref": "indicator--fc801cf0-41d4-41c1-94cf-06760919b903", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fb7ec6f-e67f-4918-82cc-e07bb64f0e5b", "sighting_of_ref": "indicator--1a9c51a7-3541-4143-9c0e-e26236ba4180", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9d272b-a616-4cf3-839c-3b0ad8ddd1fa", "sighting_of_ref": "indicator--0c32b1da-fdad-4431-b125-189e1af8c334", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9315117-7279-4368-a1a8-9ad5a9c107ac", "sighting_of_ref": "indicator--e9181757-a63c-4125-aed6-84df5060c2dd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc20d26f-d7b6-47e3-9269-ebfc1f74a975", "sighting_of_ref": "indicator--63624b2f-5cd2-4271-bac8-dee68e4d2cd5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3003b6d0-549c-42be-ab77-630b12e31f35", "sighting_of_ref": "indicator--cd3eb199-4858-4ae4-a2b8-9d1737fe29be", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47d119d2-362b-496f-91f6-3883977f8974", "sighting_of_ref": "indicator--d14284af-b65f-4b85-a01f-1279ce7d66f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc54af63-4916-448b-84a4-d2f564e97765", "sighting_of_ref": "indicator--4657888c-d313-403a-8d9c-473d80bd7bfa", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea59b78-7e77-4c20-9709-eff64fa7fe9e", "sighting_of_ref": "indicator--2bb59406-05cc-46ac-89c0-7e305b62de29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cf50bb-167f-4433-b271-a989efe1ab81", "sighting_of_ref": "indicator--bcd74dc9-381a-4ef6-bf7d-9e2de2dd5a6f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a570d85f-5cb8-41ed-a35a-083467a47dee", "sighting_of_ref": "indicator--ec2fca7d-ba49-4346-a7c3-a27dac8d2ea3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128f9408-e33d-409d-93d9-b66cc395802b", "sighting_of_ref": "indicator--5f9539d3-69b9-40b1-bf8e-8e16865f169b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886f65cd-7bd1-4eca-a8e3-4084cf2a0db6", "sighting_of_ref": "indicator--5f9539d3-69b9-40b1-bf8e-8e16865f169b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721ff0c8-8b45-4f75-b486-92a75b93454d", "sighting_of_ref": "indicator--48e6f445-e08c-4676-b37a-3948cc9f1578", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d217e2-1e2c-4544-baa2-f16d2fa57e53", "sighting_of_ref": "indicator--cb1a5052-3eac-46bd-9b7a-e19a0c9b2fb7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97800028-9011-450a-8566-5c339c98de35", "sighting_of_ref": "indicator--ef1ccd99-a354-4e7a-8b9e-fb0c5ad33bcf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68280a84-640c-4cc4-b414-840839e74d6f", "sighting_of_ref": "indicator--c3eb5e6b-98b6-4a58-ad18-3db2cd0f43fe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe9c046-3c9b-4203-930c-f341b56449bd", "sighting_of_ref": "indicator--636416e8-4777-4407-b6b0-567cc64144ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45310db-90bf-4440-b848-ea9aff6f84d6", "sighting_of_ref": "indicator--fc1ecc89-5d38-4305-ab2d-d60923d36e7e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5feae3-fc64-48f5-9568-410da877efaa", "sighting_of_ref": "indicator--38675f93-bcf7-4580-b726-6f889719755d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee09c0c-7b44-4cc2-b6fa-396830b1e2dc", "sighting_of_ref": "indicator--4ac34859-43fc-42b0-829c-27203df03922", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499aa557-bf11-478a-8547-522b981cbc6b", "sighting_of_ref": "indicator--ddd0eb17-d677-4970-8107-a63cd28b1670", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9318d3-4399-4493-a64c-a30f531ccf9f", "sighting_of_ref": "indicator--ddd0eb17-d677-4970-8107-a63cd28b1670", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34403e8f-628f-4d37-a913-1e53131690c8", "sighting_of_ref": "indicator--f572688c-1f68-47dc-b03b-1ded1bbe8898", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--059e97c8-e3b8-48c0-bc06-d3018974fc61", "sighting_of_ref": "indicator--f572688c-1f68-47dc-b03b-1ded1bbe8898", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--599faefa-4c70-49d1-9231-beb23d93140e", "sighting_of_ref": "indicator--7208fb2b-909d-4bb6-ba58-b322a3098a2b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdd76c0-2df2-490d-9ddb-b03ea15ff01e", "sighting_of_ref": "indicator--7208fb2b-909d-4bb6-ba58-b322a3098a2b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50dbb8a-1364-451f-9dff-b844e93d3338", "sighting_of_ref": "indicator--59ededce-e72d-4e1f-8432-36a8f03fc95c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7646356d-dc66-4ae2-8d70-e3d5eac1defe", "sighting_of_ref": "indicator--59ededce-e72d-4e1f-8432-36a8f03fc95c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed0f6f7-41f6-4537-b7d2-4844779d35ed", "sighting_of_ref": "indicator--ecb6db2e-55e6-42a5-9f67-eeff7b9570b0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf0eb2f-3f48-4ea8-a0f7-3f5ff0bd4f77", "sighting_of_ref": "indicator--ecb6db2e-55e6-42a5-9f67-eeff7b9570b0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5909dee-06e0-4d9a-bfa7-89e0d96e010d", "sighting_of_ref": "indicator--45c36dd8-0395-48b7-a0aa-d53777206b55", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94c8a6a-879f-410d-b02a-05aa762323b7", "sighting_of_ref": "indicator--45c36dd8-0395-48b7-a0aa-d53777206b55", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193b1751-8a7b-42ff-be51-1a81e8c12195", "sighting_of_ref": "indicator--1362d95a-d04a-481d-b232-f1a2e8dfd9cb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9417e6a-360c-48d3-a528-a8286e8622be", "sighting_of_ref": "indicator--7c532c9c-eb83-4e43-9355-74cb68d0aac6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab4c455-1efd-46a3-a00b-0f64544e7007", "sighting_of_ref": "indicator--7c532c9c-eb83-4e43-9355-74cb68d0aac6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de58d650-869f-4a63-b416-374510d8a35b", "sighting_of_ref": "indicator--f31bfd91-e4c8-4fc6-a5c0-fd21edee77ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbc0c33-5d2a-475f-b8fd-ef2d3453922f", "sighting_of_ref": "indicator--f31bfd91-e4c8-4fc6-a5c0-fd21edee77ed", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82715183-7c1f-4dee-9e54-3f57c35276f9", "sighting_of_ref": "indicator--2f379bae-3e80-4ce3-92c7-bbd174963c9e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7189842-5c36-40b8-97e0-e9a31f7c5e8a", "sighting_of_ref": "indicator--2f379bae-3e80-4ce3-92c7-bbd174963c9e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e504cc-4988-406f-9a7c-5ab10725a0db", "sighting_of_ref": "indicator--86182014-9b3f-4789-bc3d-3d305dc316ac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386d8781-a4a5-416b-9e37-8f1885d387a9", "sighting_of_ref": "indicator--86182014-9b3f-4789-bc3d-3d305dc316ac", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6c30dc-a2f4-4ae4-b07e-72a48e2fb957", "sighting_of_ref": "indicator--ca9170bb-baf5-4c53-83a2-466641ece669", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9eca30-9b32-4b17-ac85-0e2e1e959a35", "sighting_of_ref": "indicator--9ac570db-969a-401d-94cf-86c821e94531", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145d1140-d906-4c40-8bb0-5617d58ba33d", "sighting_of_ref": "indicator--9ac570db-969a-401d-94cf-86c821e94531", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952e2214-1d08-45cd-916a-4c26f1a81985", "sighting_of_ref": "indicator--b5c16883-ba0f-4ca1-b28b-831b9fa07892", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02563209-c0d0-4721-ad43-a8fac069946a", "sighting_of_ref": "indicator--fb025bba-a263-4bf6-b11f-ced343ff691e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df55df5-d83b-404c-bdec-b4a9b3030528", "sighting_of_ref": "indicator--fb025bba-a263-4bf6-b11f-ced343ff691e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a4afe3-80e5-45b9-b0f2-ffd82609953c", "sighting_of_ref": "indicator--9e945f64-cf1f-4538-b2d3-a3f4815e39e9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14922f0e-89b2-4fb8-8da9-19034d5cf2ba", "sighting_of_ref": "indicator--ce908f3f-370d-44f9-91df-e6eb1ff6dfe3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4bb84b-4547-4d8e-ba2b-d8c04e96d5ae", "sighting_of_ref": "indicator--ce908f3f-370d-44f9-91df-e6eb1ff6dfe3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5019c044-8cbc-4d69-8a4d-ee71a13c0afb", "sighting_of_ref": "indicator--bfadf96d-b977-4dcd-91b8-4d96917cd910", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0433a542-1f4d-4082-a65d-1fcf139a7e0e", "sighting_of_ref": "indicator--10fd83ec-a2e5-4fd5-96b5-a71c2009f3fc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb4e499-bdef-4ee0-acd9-5a3491513c32", "sighting_of_ref": "indicator--10fd83ec-a2e5-4fd5-96b5-a71c2009f3fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b678bc9-2609-48cf-9791-d48521662b52", "sighting_of_ref": "indicator--7d835836-f71c-46b9-8232-786c6b3ba261", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a25803e-50db-48af-baa1-49263917d063", "sighting_of_ref": "indicator--c69cca8c-dec4-4bd1-bef2-c08e551e8245", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe354ad8-5b54-4ab5-8c79-368e25ab8894", "sighting_of_ref": "indicator--c69cca8c-dec4-4bd1-bef2-c08e551e8245", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab1ab48-a871-42f4-b7ea-2002438005a0", "sighting_of_ref": "indicator--bf2a5fad-812e-44f8-8b64-fae00012bccb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d06d59-47b6-41be-af25-494e5077403f", "sighting_of_ref": "indicator--bf2a5fad-812e-44f8-8b64-fae00012bccb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f86c890-f670-4d20-90dd-edbb279a3187", "sighting_of_ref": "indicator--fb150d76-961f-490d-8b7e-b6c2509b8e59", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19164df-30eb-40ea-91dd-23e8fb75fbd4", "sighting_of_ref": "indicator--fb150d76-961f-490d-8b7e-b6c2509b8e59", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--911afdf7-d697-4bf8-a72e-c2755d65a2de", "sighting_of_ref": "indicator--7b658ae3-c8ca-443f-8b56-790e215b2194", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a25d12-9be4-4787-9ebb-fc1c3fadc1aa", "sighting_of_ref": "indicator--7b658ae3-c8ca-443f-8b56-790e215b2194", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb5dee6-8699-42a5-98e5-fedd3dae9531", "sighting_of_ref": "indicator--200b8ea9-c5d9-4571-867a-2adfe8f4b678", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f54fcb9-be02-49e6-8d89-e0b5b5e11b5f", "sighting_of_ref": "indicator--200b8ea9-c5d9-4571-867a-2adfe8f4b678", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f70779-709d-45e3-8101-f19861c7fce6", "sighting_of_ref": "indicator--5fde3f9a-f2ad-480b-ab21-7059c3a85d4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10da77f9-16b2-4c5a-be4c-b7ce8bb62fc3", "sighting_of_ref": "indicator--5fde3f9a-f2ad-480b-ab21-7059c3a85d4f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32fdc15-8bef-4ca2-b89d-b0b586d496df", "sighting_of_ref": "indicator--8b79330c-bcca-41bc-ae84-02da4abcd9a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1dc200-2ba5-40df-9d9d-6b52631e345c", "sighting_of_ref": "indicator--e4829aea-3fd7-4ba6-9a10-1fe26390a608", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e98945e-306c-42f0-9c00-d36596178dab", "sighting_of_ref": "indicator--e4829aea-3fd7-4ba6-9a10-1fe26390a608", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc32d450-67ef-49a9-9f8b-8043bb79c623", "sighting_of_ref": "indicator--44a855ec-11b7-4a32-a867-bde6ef614744", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c63bc5-eb90-424d-9701-c926084bc9ed", "sighting_of_ref": "indicator--731e0e6f-3d02-4202-91af-e0e9cdc3110b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5f17b17-5e1b-4590-bc5b-ee9d5903e93b", "sighting_of_ref": "indicator--0c9a66c5-ccb4-4445-a2a0-c1676c0579f9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c89e3b-81ff-4b65-8e53-a8b12926528c", "sighting_of_ref": "indicator--0c9a66c5-ccb4-4445-a2a0-c1676c0579f9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b69cf4-63e1-4323-a518-6ecd47b9ba69", "sighting_of_ref": "indicator--fb040869-c19e-4d0b-bb38-1a19f308c4e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570a86c4-7acb-4d4a-9cf4-b6510a910241", "sighting_of_ref": "indicator--fb040869-c19e-4d0b-bb38-1a19f308c4e3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6c47c6-6738-4645-93bb-30dcfebef5cf", "sighting_of_ref": "indicator--eadbb18b-ec41-4ce0-9c59-7eab946fa892", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec31480-2a83-4bd3-9181-863e5111f72a", "sighting_of_ref": "indicator--eadbb18b-ec41-4ce0-9c59-7eab946fa892", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f81f051-d6ed-4366-841d-aaaec5832ec9", "sighting_of_ref": "indicator--acf2dcec-401e-4a62-877e-9a7a228b61a5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34306fc-f686-4db8-86e9-0cec66015228", "sighting_of_ref": "indicator--22c0f66e-9dfe-48e1-81a6-051baef89ff8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf67394-5eb4-427d-bba0-76c82406c688", "sighting_of_ref": "indicator--22c0f66e-9dfe-48e1-81a6-051baef89ff8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24109e45-b6f4-4c60-809a-9e4695452940", "sighting_of_ref": "indicator--2313234e-5c08-4f3f-b9c5-4d76dc83cc8b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c7b920-17b4-426f-a01f-6f6ebc52a6f7", "sighting_of_ref": "indicator--ccc139bc-f551-408d-8d18-8d3be6b75b02", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113c08df-a2a1-4815-92e7-f91bf1d9b46b", "sighting_of_ref": "indicator--ccc139bc-f551-408d-8d18-8d3be6b75b02", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c163e63-1218-4a1c-90ec-c0bdb31d1b10", "sighting_of_ref": "indicator--e2e8e7a6-14ec-42a4-befa-f3db578b20ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fee8cc-bee5-4afc-9e8b-99937df97ecb", "sighting_of_ref": "indicator--e2e8e7a6-14ec-42a4-befa-f3db578b20ef", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aefade4-4bc5-4563-8bc0-473b922e78ed", "sighting_of_ref": "indicator--42a51fbc-cbde-4848-b815-3e75762b5613", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58fd8e2-24e0-406d-9bb5-01d992799026", "sighting_of_ref": "indicator--42a51fbc-cbde-4848-b815-3e75762b5613", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a5a0972-2b47-42e9-adac-11101e5a1a17", "sighting_of_ref": "indicator--7284fe45-9a65-4cc6-91c3-1e342274dc31", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--931f93b6-5ab5-44fd-9ae1-c6872a57a456", "sighting_of_ref": "indicator--7284fe45-9a65-4cc6-91c3-1e342274dc31", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc53605a-7a26-408b-bbaa-22140d3f4419", "sighting_of_ref": "indicator--3fb1e6a0-e494-45f9-a706-c1f5825e6136", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a8ef6b-711b-4c09-9ee1-0d2c0ae732a8", "sighting_of_ref": "indicator--3fb1e6a0-e494-45f9-a706-c1f5825e6136", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85525254-991a-4c64-af83-c77844dda878", "sighting_of_ref": "indicator--28625c02-8d8c-4d05-9c18-f0079d62ae80", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dace4e90-5698-43fb-b24f-55443067244b", "sighting_of_ref": "indicator--2a077e7a-9d19-44b6-bff0-2627e5cde9bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98554786-2e29-4eee-9029-dca40f807fd6", "sighting_of_ref": "indicator--2a077e7a-9d19-44b6-bff0-2627e5cde9bc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea3ca50-f264-4a95-9901-0d7c7430e8fd", "sighting_of_ref": "indicator--8b677fc8-eb62-4d01-96f7-56f2a306196d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dc5dbb-e4ab-4457-9b1b-25a55145dc09", "sighting_of_ref": "indicator--8b677fc8-eb62-4d01-96f7-56f2a306196d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b855d0b-7a3f-4ea1-bdb8-dcff93f57ad8", "sighting_of_ref": "indicator--c0bd285a-3ac9-4faa-b24c-5555a2cd244e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da7d611-e3d2-4c43-a002-718dc2e0bbf5", "sighting_of_ref": "indicator--47d11482-77c0-459d-a3fe-99a2b6a8391c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9d6c27-4f17-4f04-8a17-41bca7876af4", "sighting_of_ref": "indicator--47d11482-77c0-459d-a3fe-99a2b6a8391c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9664a0c-77a9-457b-9d4e-cc4e44d03f7f", "sighting_of_ref": "indicator--75e0c8b2-df48-4052-9f69-f0c7e3164158", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e21c210f-d4cf-4d95-8aeb-03438f836641", "sighting_of_ref": "indicator--75e0c8b2-df48-4052-9f69-f0c7e3164158", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba4f928-6a1d-4c19-9e3f-3801bc68152a", "sighting_of_ref": "indicator--5257aa18-d1c7-49b4-a0ec-a0b775b695f5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3531687-e9e4-4b75-9f8e-bbe27b628069", "sighting_of_ref": "indicator--5257aa18-d1c7-49b4-a0ec-a0b775b695f5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150edf84-b57d-4dd9-8458-119c9dba72b7", "sighting_of_ref": "indicator--facdcfeb-2aa1-47c0-82db-fd6326bc1623", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58af38cb-14d4-45c0-b04d-fa3bd639acca", "sighting_of_ref": "indicator--facdcfeb-2aa1-47c0-82db-fd6326bc1623", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412c8df6-81db-4e8f-af65-1e724740ee07", "sighting_of_ref": "indicator--0137a5cd-99aa-435d-8997-152c91a187e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8914b4aa-7d86-4784-b4d2-2d292c92b596", "sighting_of_ref": "indicator--0137a5cd-99aa-435d-8997-152c91a187e7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecd1744c-efd9-4791-9147-e1296109e0e0", "sighting_of_ref": "indicator--9edfe724-eefd-4c52-9e8b-f4ff70ddf177", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3dd9a5e-7b60-4982-8bf3-7e7bf374dab7", "sighting_of_ref": "indicator--9edfe724-eefd-4c52-9e8b-f4ff70ddf177", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55e53b7-b175-4efe-806c-c1c6f35b939a", "sighting_of_ref": "indicator--ace50946-d438-4e2d-9892-aa4075ffbb35", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd09d32-91ce-4ad3-b717-458c4a21980f", "sighting_of_ref": "indicator--ace50946-d438-4e2d-9892-aa4075ffbb35", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0538b8f5-a7bd-4a90-a2b2-6c02b2c3bf14", "sighting_of_ref": "indicator--732d67ba-6194-43f7-8168-5767a1b5858f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3f40b5-5f89-4172-bcbc-984e0b9455f7", "sighting_of_ref": "indicator--732d67ba-6194-43f7-8168-5767a1b5858f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51098e36-5104-41d5-b301-1b53aa10decc", "sighting_of_ref": "indicator--5a76eb34-549a-4a4f-bcb8-28366c904e64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126e3ffd-00ad-412d-be44-3141ac4fa9b0", "sighting_of_ref": "indicator--5a76eb34-549a-4a4f-bcb8-28366c904e64", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265d0e54-a98f-4c37-a61f-9f30274e14b4", "sighting_of_ref": "indicator--5050f9c0-587e-400e-881e-682e29348a73", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396731a8-75e6-4381-bd8b-dc853f3f235a", "sighting_of_ref": "indicator--5050f9c0-587e-400e-881e-682e29348a73", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1017d64-69b4-480a-ae77-b96ddff107c3", "sighting_of_ref": "indicator--3ca623c9-7856-4d41-8c59-0ac2e460d069", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56be898b-0b28-4c91-817b-37b8f7f26cff", "sighting_of_ref": "indicator--3ca623c9-7856-4d41-8c59-0ac2e460d069", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--493f76d4-c88a-4731-96bb-cbccd69ac12d", "sighting_of_ref": "indicator--20524f59-ef1a-4de9-a331-14145dc755c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db64551b-c28d-49d6-9c33-7be5d445b87f", "sighting_of_ref": "indicator--cdf02845-8450-41c3-b092-ecb8f61a716b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ab4e0e-a7d2-4399-a3d5-1827ea9fe27a", "sighting_of_ref": "indicator--cdf02845-8450-41c3-b092-ecb8f61a716b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08e302e-8a49-4815-8d42-185420bc757b", "sighting_of_ref": "indicator--4a0e9227-a223-4190-ae41-c33d95426769", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523bf6d0-cfe6-4c17-b9fe-6b2c2f7ce2cf", "sighting_of_ref": "indicator--4a0e9227-a223-4190-ae41-c33d95426769", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a984fe73-99a2-4266-8b18-850e917d925b", "sighting_of_ref": "indicator--981996c1-5140-482f-8eff-2dd260b1e524", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6551ebfd-49d3-4ed4-bb59-8f7c45dda991", "sighting_of_ref": "indicator--981996c1-5140-482f-8eff-2dd260b1e524", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3730ef41-efa2-4e2f-897f-fcfcbd816b64", "sighting_of_ref": "indicator--9699bf39-acb5-4004-af6b-4d6a6d4fafc0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7830963c-05b6-42fc-96b1-aa9bfd5c829e", "sighting_of_ref": "indicator--9699bf39-acb5-4004-af6b-4d6a6d4fafc0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ad00c7-03c1-49a3-83fc-b213d54a644c", "sighting_of_ref": "indicator--061dc617-6875-4a04-a9fc-912d14ecfd72", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031c2afd-ed8d-4c33-aca8-afa1f6ddc733", "sighting_of_ref": "indicator--f6a71976-6db4-4d2c-a332-fb171fe6859e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed6e3b3-39e3-4e69-9323-0470d4ca040a", "sighting_of_ref": "indicator--f6a71976-6db4-4d2c-a332-fb171fe6859e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6809a9-e54f-4145-8291-d6d8a2692760", "sighting_of_ref": "indicator--996945a1-f612-4c24-85c9-81e10d8901b1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412bcbde-eb34-4c79-994f-09d2e8ebc0dd", "sighting_of_ref": "indicator--0544da12-f3b6-4896-879d-cbfd7c38929a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b22b551-023a-4ea2-99c1-eb9f9a36c87b", "sighting_of_ref": "indicator--79e73703-7218-42ea-8ca8-af2d717310a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f32c80d-211c-46cf-9aae-4080cabce1f7", "sighting_of_ref": "indicator--79e73703-7218-42ea-8ca8-af2d717310a8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d9f1bb3-afaf-4007-ab3f-e00cfe713bfb", "sighting_of_ref": "indicator--868a6701-51ef-4569-9f30-fe6dc35b6615", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbe5799b-e820-4eed-9c6b-ffd6b25df890", "sighting_of_ref": "indicator--868a6701-51ef-4569-9f30-fe6dc35b6615", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c8b2faf-5a38-4896-9f6b-60b439ace213", "sighting_of_ref": "indicator--9223027f-2670-4899-aa7b-30bd7a503089", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f1cf41-995f-4cf8-8559-289c409c2b70", "sighting_of_ref": "indicator--e5ad3d15-a0c4-4164-add8-b443d0e586f7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602cb50b-3fc4-4de9-aae4-7c28b1b2c1e1", "sighting_of_ref": "indicator--e5ad3d15-a0c4-4164-add8-b443d0e586f7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22000d94-507d-4f3a-be49-29e272a57ae4", "sighting_of_ref": "indicator--dd9214f1-d9a5-4ba7-acb3-9ccb0a548686", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14998fbb-aa77-44eb-b241-54c28167a7d4", "sighting_of_ref": "indicator--dd9214f1-d9a5-4ba7-acb3-9ccb0a548686", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55966ab0-5084-43c5-a97e-8a0c56e5add8", "sighting_of_ref": "indicator--381c2b2e-2aad-489d-830b-90b1ef4d85f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c35267-f2f5-4e91-8507-1007e68fec7d", "sighting_of_ref": "indicator--381c2b2e-2aad-489d-830b-90b1ef4d85f3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb53345-7af8-4366-988b-22f3dae88596", "sighting_of_ref": "indicator--825bda51-9805-4524-bf44-14a83226c76d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--230913d4-aa5b-4b61-96e3-54c10e7439ce", "sighting_of_ref": "indicator--825bda51-9805-4524-bf44-14a83226c76d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3cc09e7-e4f7-466e-bdb6-ed4e6e4c860a", "sighting_of_ref": "indicator--0d09512f-7d4e-4cbc-a76f-f37904933ccb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3727cb40-3b43-4413-905b-17b77bfecbbc", "sighting_of_ref": "indicator--0d09512f-7d4e-4cbc-a76f-f37904933ccb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d62907e-3273-48ea-90ed-3cd156bd7293", "sighting_of_ref": "indicator--ffc9f590-7b61-4db9-910e-eaab8f5ae151", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6fb47f-e46d-47bd-9a4b-e86b530d5a71", "sighting_of_ref": "indicator--ffc9f590-7b61-4db9-910e-eaab8f5ae151", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c7bd05d-8bb5-48a2-a350-bba8544d076b", "sighting_of_ref": "indicator--cb536a7d-7089-404c-b900-902efba47102", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01795109-78fd-47c0-821f-7eaf7f713b45", "sighting_of_ref": "indicator--7b04826c-b68b-4e0e-bd48-91c971b20500", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66bec320-2278-4352-b345-d5aafa0fd133", "sighting_of_ref": "indicator--7b04826c-b68b-4e0e-bd48-91c971b20500", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13317bb-7662-41b9-8df5-3f3c4f0e3699", "sighting_of_ref": "indicator--f3537673-c0d1-403a-8ad4-8c42f81facac", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4620ac82-eddf-464e-92cc-1f67505502d1", "sighting_of_ref": "indicator--63cdf4cd-649f-433f-b4b9-8d3e93a52902", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--790e057f-bd7c-4826-aecd-c8d1d68e8631", "sighting_of_ref": "indicator--63cdf4cd-649f-433f-b4b9-8d3e93a52902", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25dca012-9e85-48cc-9c56-5afd131316d2", "sighting_of_ref": "indicator--1d91ff33-8f9b-40e5-bf78-dc743baf2d9a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3125b48d-2f60-4291-b1c0-20836d4bf50f", "sighting_of_ref": "indicator--1d91ff33-8f9b-40e5-bf78-dc743baf2d9a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae55242-1e7a-4a27-80a2-0dffc350c588", "sighting_of_ref": "indicator--cf2b83d4-3157-467d-9010-aa0aed86f482", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abe5917-1436-4c3b-a934-d311d7acce3c", "sighting_of_ref": "indicator--4e449697-a9eb-4cd3-ad05-a48e768baab5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7e7352-6a6d-46a9-9964-3dcd3616b0a6", "sighting_of_ref": "indicator--cec79a16-cf09-4acc-81e9-95ce889d4069", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237fb10e-7ad7-47f3-95de-3a5826441ae5", "sighting_of_ref": "indicator--cec79a16-cf09-4acc-81e9-95ce889d4069", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370c4fc1-89be-4f2e-ae11-8d2acabd9af4", "sighting_of_ref": "indicator--4f119bdf-5179-4c35-8b16-b6e9333c01be", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccbcaa4-9fba-4501-9d72-71970db6c53e", "sighting_of_ref": "indicator--4f119bdf-5179-4c35-8b16-b6e9333c01be", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11932ef-dc9a-4cc5-b49b-94d580431b55", "sighting_of_ref": "indicator--caeb26ac-423e-49e7-b39f-93725d70060d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fee4c52-5f47-4189-beeb-e4e9687b6d95", "sighting_of_ref": "indicator--caeb26ac-423e-49e7-b39f-93725d70060d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c5a046-a24b-4edb-9c64-3f5924aeed62", "sighting_of_ref": "indicator--fa1bfe9e-dd43-419e-8da4-ed68f9496c05", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf815f6a-7edc-4b60-8777-72ba6d9985c3", "sighting_of_ref": "indicator--abfc9726-e90e-4c4e-bdd9-75a6796024e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499f677f-7a43-4386-8048-8127e226c740", "sighting_of_ref": "indicator--477cd66c-3b87-4e94-a66c-4b4038ac790a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8693fd7b-f905-4e7b-992f-73bbaa00600b", "sighting_of_ref": "indicator--477cd66c-3b87-4e94-a66c-4b4038ac790a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06beec42-f578-49d5-8c4d-208179d3beae", "sighting_of_ref": "indicator--4197ef66-ff5d-463c-be20-dcf2a23debef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a2d735-dd3c-417d-9ae1-3837b42100f7", "sighting_of_ref": "indicator--4197ef66-ff5d-463c-be20-dcf2a23debef", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f17c3934-ce82-47e8-979e-21c964157255", "sighting_of_ref": "indicator--84432595-8db6-422d-af20-724febe41a83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd038fc6-1c2b-4f56-9034-65b8f21369c3", "sighting_of_ref": "indicator--84432595-8db6-422d-af20-724febe41a83", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0fe3ca-2130-486e-b470-1fe5edf4ff18", "sighting_of_ref": "indicator--9c1b3981-8bcf-4873-8aae-75171866b3ef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aec4e30b-af59-4a3d-9dd6-b24b42eec343", "sighting_of_ref": "indicator--9c1b3981-8bcf-4873-8aae-75171866b3ef", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058462cc-e31e-48bf-aeb4-4f52fcd04bce", "sighting_of_ref": "indicator--041bed3d-5441-4b72-8133-a9092554e0b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e363b72-c7dd-439b-8560-dcaf370372b1", "sighting_of_ref": "indicator--041bed3d-5441-4b72-8133-a9092554e0b3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc8f4faf-783d-4a92-b687-64abcddd208a", "sighting_of_ref": "indicator--939d09ce-e508-4a6c-89e4-d1627a637e79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61092f4d-5fff-4db5-85f3-33144d1286dc", "sighting_of_ref": "indicator--939d09ce-e508-4a6c-89e4-d1627a637e79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e87606-98c6-4d72-9988-2546ee40d9fa", "sighting_of_ref": "indicator--8711f9ca-e8ea-4ff1-9d49-17f1a2a4a91b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7594e4f6-cca4-4c14-abcc-2a69d5a9f827", "sighting_of_ref": "indicator--8711f9ca-e8ea-4ff1-9d49-17f1a2a4a91b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39935253-3a76-4ab5-bcc6-7550d91186de", "sighting_of_ref": "indicator--a858124f-d813-4ea7-be5b-9c52998864da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e408368-1bb1-4cb2-89a9-26fba0ad278f", "sighting_of_ref": "indicator--a858124f-d813-4ea7-be5b-9c52998864da", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b668e9ae-72f8-481d-8b00-b531ee89881a", "sighting_of_ref": "indicator--ac817d9e-6abb-4e3f-9142-ec27c797b64d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c3ec56-665a-452f-a1f9-e6947c3b2187", "sighting_of_ref": "indicator--ac817d9e-6abb-4e3f-9142-ec27c797b64d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899944b2-fb7e-46b3-ba9e-c09b489ed717", "sighting_of_ref": "indicator--f80acf26-975f-4abc-8edf-ed566d0cd031", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82cf4ede-d74c-47f4-81fd-107e6c9b8e19", "sighting_of_ref": "indicator--d9fdffd9-3b38-4f70-afc9-df2bdf10c078", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3af199-a004-4fb3-9683-080020ebc10b", "sighting_of_ref": "indicator--a94dbb5f-df1f-4119-b755-4df02e68a6a4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d645ba-7ea8-4d31-9a0b-a5d28b4cd8a2", "sighting_of_ref": "indicator--51f6dcca-0481-4e88-9531-afe02e021f2e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eae621-c040-45fd-982e-231c3a52e602", "sighting_of_ref": "indicator--51f6dcca-0481-4e88-9531-afe02e021f2e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f50cf1-4866-4376-8cde-77b5f23b1d4c", "sighting_of_ref": "indicator--c7f8053b-45c7-4698-be54-b26b27c71965", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0d1272-b637-4402-ba19-7504ab7955ae", "sighting_of_ref": "indicator--c7f8053b-45c7-4698-be54-b26b27c71965", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d902acb-b763-4207-92ba-3273112476e9", "sighting_of_ref": "indicator--bd4b68d7-2132-4793-9894-f5bc7deb3da6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e000af7-0ef6-462f-ad76-e1e5605b9886", "sighting_of_ref": "indicator--bd4b68d7-2132-4793-9894-f5bc7deb3da6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5819de41-4fc8-49f1-9c46-8d41210e27ae", "sighting_of_ref": "indicator--74a76225-af87-4de5-8588-9e159cbc111f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff1e580-2a04-43e7-9679-5a19b80ed101", "sighting_of_ref": "indicator--18fcf2a7-5b72-40eb-bd21-617efb0765d6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88890e6-540a-40fa-ad8e-f7f67415337f", "sighting_of_ref": "indicator--18fcf2a7-5b72-40eb-bd21-617efb0765d6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d49b7b1-52dc-4a0b-a532-b53f5cde7d95", "sighting_of_ref": "indicator--55c0af6d-55d1-40cb-9a4d-fdeeaa15e8c1", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae259eb-864d-41da-97e9-0cbfdbdddfa5", "sighting_of_ref": "indicator--ec300e11-901d-4698-a6ed-9a69c3df3694", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ebadd1-63e0-412e-927e-456c14b1b794", "sighting_of_ref": "indicator--63fda5aa-f7f4-40ac-b4fd-64c907faf613", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a671a9a-7b55-4459-affa-61d107376ce8", "sighting_of_ref": "indicator--f2908fdb-13db-49c8-b1cd-2e737919e539", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f4d18c-b2b8-4a45-809b-4c87fab656a6", "sighting_of_ref": "indicator--46d0f07d-a435-44dd-b67a-b5b6e5b4e3c2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5d1236-4f8c-41d1-882b-6be3401370b7", "sighting_of_ref": "indicator--a7097cd2-6883-43d1-b378-37bea202bd0c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca46b98-ef6c-4e9c-8df0-1a2b5305fa5d", "sighting_of_ref": "indicator--cc2ed98b-178a-43eb-a120-74386be6edae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efe194e4-c1fc-4dfc-9202-24979853e75d", "sighting_of_ref": "indicator--a65a7ffd-d4c4-45f5-add9-32a3d887b351", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9100c05-4db7-400b-854b-065fd04d31fe", "sighting_of_ref": "indicator--a5cfcd22-2a3c-44e4-900f-3aee95077553", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2252a59e-2b34-47e8-a460-676c0b0c52bc", "sighting_of_ref": "indicator--a5cfcd22-2a3c-44e4-900f-3aee95077553", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d8fdfa-fe77-4933-b04c-e62565abb4bf", "sighting_of_ref": "indicator--2e64279c-42e5-4113-ab69-c75c11df2b31", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a359ed7-5ba2-4646-aeb7-55c010430fb0", "sighting_of_ref": "indicator--188b216b-b3e6-4d31-a7db-63b9a5f3302c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d9d982-f643-4c5c-9dc5-a56ca40d570f", "sighting_of_ref": "indicator--188b216b-b3e6-4d31-a7db-63b9a5f3302c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e07dde9-2611-4809-a9b1-a5d8041efd9f", "sighting_of_ref": "indicator--b224ce4c-f9c3-414e-8b2a-3c286ad6d7d5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81cb909c-2704-4d11-a78d-40c4f7feb189", "sighting_of_ref": "indicator--50549478-2aa7-490d-87f8-dd3e76d9bcb4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f2df697-c52e-4692-b1cb-18d19542f245", "sighting_of_ref": "indicator--cf62ebad-aa0e-41f9-be51-52d9d09afcb8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27b4072-7ca8-4fa3-8b1d-68f814c221ae", "sighting_of_ref": "indicator--0f59c099-f34f-44ae-9b28-ae3c91064a76", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26f7678-07e5-460e-ba64-f58ad799e343", "sighting_of_ref": "indicator--b60af681-9317-4743-a3dd-363c0433206a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc0cf55-cedf-4219-a5cc-6120898ad1f9", "sighting_of_ref": "indicator--b5f51246-70c7-4729-91b6-582c6dd9d73a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6b2920-7e58-4b34-b0a6-0bcab35160cf", "sighting_of_ref": "indicator--b5f51246-70c7-4729-91b6-582c6dd9d73a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb857405-0716-4b49-aa38-6329e9dc0b93", "sighting_of_ref": "indicator--de0d885d-5ce9-4986-bd98-f98fac353cc5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3c656d-13e7-4e66-9a55-1a7b91cbbe5c", "sighting_of_ref": "indicator--4be584dd-6a82-48ab-889a-5b0a7f82b650", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc356183-559a-4262-90ee-2f94229e04b5", "sighting_of_ref": "indicator--8dfb8002-808b-47bf-a43d-74c871f3c509", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11102cd5-8305-4d20-8a27-e431e9ef65c4", "sighting_of_ref": "indicator--afac8d23-69bf-458c-8047-504cc8d0e023", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dcebbee-c2a8-40c0-aac8-bbcd354f9034", "sighting_of_ref": "indicator--d5e46f17-3bea-4a97-abfb-14b636a13399", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d792f1-33d7-47f0-bb95-ae03aed4a27f", "sighting_of_ref": "indicator--43f424b8-7bea-439a-adcb-2f4483a3f4a9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a609a6-576e-4f6b-8cbe-2e4e4c5acd7f", "sighting_of_ref": "indicator--f1d97911-2570-4e80-b2e6-f087d3fa7936", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb5ecf8-be41-4e36-92fe-4f4974cf1927", "sighting_of_ref": "indicator--a227323a-e098-4195-b945-242a2a52a241", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42b550f7-5b86-4497-975a-3c365b42d154", "sighting_of_ref": "indicator--a227323a-e098-4195-b945-242a2a52a241", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff56d92-41de-4acb-9753-2e0c819cfd2a", "sighting_of_ref": "indicator--292f52a6-174c-45b7-b717-cc211cbeb79e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da5baa6d-f85a-460b-96aa-6046be4adfc9", "sighting_of_ref": "indicator--8612ae04-7e83-4165-9879-cd425a7302a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca370ea-3241-42fb-8f26-9ee976595a8c", "sighting_of_ref": "indicator--8612ae04-7e83-4165-9879-cd425a7302a6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d6d2d1-3d06-49fb-b972-6b94b8aea927", "sighting_of_ref": "indicator--2a2bfdfa-1fbb-444c-82c2-dca1f9cd3572", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb524b5d-c29b-4757-a076-9d1a382c6f2b", "sighting_of_ref": "indicator--48b0133a-cb67-45b0-b6f1-97ccbe4e7ffc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db3aec3-f48d-4a8c-a4c4-fc2e769c45d1", "sighting_of_ref": "indicator--e354fd3e-06a5-4d2b-bd0b-a744e418b964", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcaaaedb-15a1-402f-844f-47bf2d55235e", "sighting_of_ref": "indicator--09f12ab8-3ccb-4fec-b00b-36ee25f6949c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7012ba5c-87ff-403c-a301-d3a3e0288037", "sighting_of_ref": "indicator--151847c0-3ec9-4ff1-8c6a-695cdd00085a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5db9021e-5ccf-4bf6-b2fc-6bb7c1a77168", "sighting_of_ref": "indicator--2134c167-d26f-4612-9c7f-cd5832155cef", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86b422a6-14cb-488e-8994-4e294f4071f8", "sighting_of_ref": "indicator--bc99be7e-dcb2-481a-9169-de571e19c633", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b774ae00-e72b-4426-9ad5-e7938135a999", "sighting_of_ref": "indicator--49886c9a-9304-4049-b00a-df8c3adc0282", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf33a72-133a-45d5-b902-d3c2231757b7", "sighting_of_ref": "indicator--edc54ea6-cac4-4e77-824e-21e6fb41c0d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b389ae-5669-4ca9-93d3-6dbf802f85aa", "sighting_of_ref": "indicator--de81713b-6feb-4100-89a5-27ff0f910bb6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df30ec12-d322-4ae3-8289-babca73cc635", "sighting_of_ref": "indicator--435316d9-bc96-4ca1-8017-9d9c0cec30ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2224a4e-9a3f-4a51-9bd7-1b4d14705e71", "sighting_of_ref": "indicator--8e44e14e-b3e0-40b8-8566-afe06c6d4555", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc3b5c07-956d-40a3-9215-965099643c4c", "sighting_of_ref": "indicator--9ea4ba58-3237-499a-a6c3-997c75ce0e17", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2cd441e-376f-447d-9d8d-7150ff9974e2", "sighting_of_ref": "indicator--b76bb17c-f43d-41d2-84b9-df293b66ab45", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b5f482-ee1c-40dc-ad73-3da594568cd5", "sighting_of_ref": "indicator--80b89edb-cd0c-46e0-bf86-a6b6211795a9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c02e3c-9e96-4f5a-99ef-de589b03d6ef", "sighting_of_ref": "indicator--6180c80a-2f32-4cc3-98b5-739ae2cf5b7f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aceb6bde-5bac-4161-9b8c-545b823418eb", "sighting_of_ref": "indicator--ed38fa00-d67a-42aa-950d-ffa3d49617ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b23538e-3e62-4378-adf7-98ab04e367e5", "sighting_of_ref": "indicator--601e1854-93bf-49c5-bf3d-1e06fa4a7ae5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8e37d8-bac4-4b8b-b2ca-5fbd23efc011", "sighting_of_ref": "indicator--21875dd6-4d64-46b7-9408-156144f9a364", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246ed5fc-d229-441e-88cc-82314cd4c55b", "sighting_of_ref": "indicator--f3471443-3601-40c6-985c-1757088b03cd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88bd748f-239e-49bc-ba36-e2da63763460", "sighting_of_ref": "indicator--686253a7-ff92-46fb-8fea-623b093ba9b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c97f3b1-308b-4653-ae1d-f8bf62ce9528", "sighting_of_ref": "indicator--74417410-3bd5-4ff1-bf1f-6d619436c06c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d75aff2-9e1d-4de5-b354-335dc56f999f", "sighting_of_ref": "indicator--2cd05152-e4df-4c0e-872e-da94a465da29", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3242b9c6-df0c-4142-91d3-5ffc9ef6164d", "sighting_of_ref": "indicator--a60eb249-450b-4000-94c1-007b0414364f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11ea9f37-c26c-4bed-b7a1-fe23fbdb2e9c", "sighting_of_ref": "indicator--9f7a2e64-7823-4f1c-9001-32fb6be5386a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48bdcbac-3742-44bf-99e8-090d5355e0c6", "sighting_of_ref": "indicator--9f7a2e64-7823-4f1c-9001-32fb6be5386a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26c4518-f7b3-4f43-9ede-dccc2e3303fb", "sighting_of_ref": "indicator--c9d2609d-3dcb-4df8-a3f1-ec3fd6962f77", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93add43-7948-4825-848d-e658982f43af", "sighting_of_ref": "indicator--7e3d9f2c-9cd9-43f7-bac5-50667311459e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6ef81e-a4ff-47b3-b3fd-3ed001b48850", "sighting_of_ref": "indicator--f6326162-b2bb-44a9-8fa3-c9214142acda", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcfe0d2-0bda-4746-993b-712641a5697f", "sighting_of_ref": "indicator--19238d67-7688-4579-b56c-355884a5ce1e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3cd275-5a90-4c5e-bf90-4dd00930b893", "sighting_of_ref": "indicator--30809e07-32c7-4866-b930-5a2747a4ab93", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b156c3-ff60-4543-8b63-ce1618251d9e", "sighting_of_ref": "indicator--dd1642fb-49fd-43ce-a9d8-bf2b08f70502", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c64e3f6-101e-4772-ada6-dfc57f32eee6", "sighting_of_ref": "indicator--480b45bc-ff0f-4c53-917d-3d417f2f77c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed111c00-8e70-46a8-b022-9fee229f8a96", "sighting_of_ref": "indicator--bcb700f1-df89-4bcf-a1d6-eee3d15604f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722dd87f-40fc-4070-bc45-ce6aefc9d8fb", "sighting_of_ref": "indicator--07bf89ae-214d-4b15-9810-0d85b2107358", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975846f0-b5a6-47ae-baaa-ea871ee62462", "sighting_of_ref": "indicator--a473e8d2-1060-4f63-96a2-12bc0706fdad", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c93b722-d9eb-4fb9-8440-58e6261ab491", "sighting_of_ref": "indicator--0cbe1e80-2c4b-4679-8b4c-82bc7486e1ae", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd337af4-b478-47ee-ad91-b01b011e4a1a", "sighting_of_ref": "indicator--4800dd28-a59a-4cda-b672-65d6cf5b97dc", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0a8c42-fc4f-45f5-9774-530d118fa920", "sighting_of_ref": "indicator--9111c9a2-998a-403b-b37f-85fe977f3f89", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f997f75-bc6a-4d34-b05b-8677bd2a70f4", "sighting_of_ref": "indicator--c68fee33-7bf9-460c-b272-c19c602d9956", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6fc15f-203f-4b4e-b021-04035ea5646a", "sighting_of_ref": "indicator--86003246-a0df-4789-9d96-543f577e0eb0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28040835-6932-4a79-9143-1fb71572f464", "sighting_of_ref": "indicator--392c41f9-2591-43da-ab9e-bc0f375d6000", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb39804-b1b5-4409-b894-5da06c18bd8d", "sighting_of_ref": "indicator--8a53cedb-7b91-4777-b4c0-089d035f51e6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abad2489-360c-41bd-9a8c-8b9e0c24a7c8", "sighting_of_ref": "indicator--8a53cedb-7b91-4777-b4c0-089d035f51e6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca58f95-cda7-42a2-af5b-ae1eb63f3f60", "sighting_of_ref": "indicator--35a31d3c-f6a1-42a1-8efb-2157863ec186", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b12df7-8307-46c3-b8d5-8328f8d39dd8", "sighting_of_ref": "indicator--9b993f99-8c64-4633-8600-30ff25c1b8de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c111b4c-f693-47c2-920f-98184f6aaea3", "sighting_of_ref": "indicator--0c4e15dd-3afd-4d24-8efc-40584f3e4687", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e60c3e-c934-4f68-8498-8ad8f28f71ac", "sighting_of_ref": "indicator--de85b1d4-c648-4d7c-8727-45a96a19bc38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d58d2d-5030-4f41-91b2-927d23d8477f", "sighting_of_ref": "indicator--de85b1d4-c648-4d7c-8727-45a96a19bc38", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f04c53-5f73-4718-ab62-9be516639f72", "sighting_of_ref": "indicator--571c2f4b-91eb-4b2b-a032-e015e4d97145", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e58b547-a3a6-46ef-ab0c-87ef1effe429", "sighting_of_ref": "indicator--0a683b58-b08e-4f3a-80d9-9d165bd8ff1a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473421ff-8a10-4453-80e6-7618cc1dfaa6", "sighting_of_ref": "indicator--f6e0b7bd-ffa2-4723-9524-8d56a165eb83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f3df23-30d1-4b81-9ffa-7fcf6380a4b2", "sighting_of_ref": "indicator--f6e0b7bd-ffa2-4723-9524-8d56a165eb83", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d00034-db04-4d6e-8c06-3db99a188bc1", "sighting_of_ref": "indicator--10750add-6e8d-4570-8822-c39f167fd355", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01a0920-39dd-4961-832b-5c1522ef7bea", "sighting_of_ref": "indicator--ec7c2f7c-cb99-4265-b024-d019a0e6abdb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6adaaa-524f-4db8-aee0-841f58b884f9", "sighting_of_ref": "indicator--6756594c-c771-4c3d-b7fe-e839e7921de7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c526bd71-2c1a-4875-8ee3-9ffc96edf29e", "sighting_of_ref": "indicator--5ab2ff18-8865-4dbe-8ff7-fe56564af25e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388f9036-b1e0-49c7-8bae-8130f72d6f52", "sighting_of_ref": "indicator--42922114-75ad-444d-84c8-3f881941e2fd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1dada56-f1e7-4478-a590-1222433f5a1c", "sighting_of_ref": "indicator--f2963786-b9a0-4df6-b3ca-94a933af0683", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5598d705-2ed2-42d5-9329-ce99d25d83ca", "sighting_of_ref": "indicator--a4e1558e-d227-4e31-9a4f-213489d992f8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e196fe5-6072-4596-8cc4-33bf8521c362", "sighting_of_ref": "indicator--a4e1558e-d227-4e31-9a4f-213489d992f8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0e532a-c5a6-4d71-b3ef-fc95b8d3fe4d", "sighting_of_ref": "indicator--67e97be8-af5f-4218-8ad8-70ce9b81f344", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cb8ffe-5745-4a1f-88de-ff144f8ff846", "sighting_of_ref": "indicator--67e97be8-af5f-4218-8ad8-70ce9b81f344", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc5c13a9-dd52-4b5e-9132-251ffc329abb", "sighting_of_ref": "indicator--e8e132e2-31e8-46af-8ec6-5ddb80f7e12d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6058ce08-fb72-42c2-ae78-d1dfcee46d89", "sighting_of_ref": "indicator--c2e6eb43-9e4c-4736-bbce-ed9dc72c3d62", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46aa81e-691e-4d1b-9c50-f081ea9a82a9", "sighting_of_ref": "indicator--c93b002e-62b5-4af2-8b64-70f771426d46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6d5f84b-b27d-4072-98e0-266da6b0a6f2", "sighting_of_ref": "indicator--c93b002e-62b5-4af2-8b64-70f771426d46", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a17e716-d1aa-4889-9366-2c2404b7a2e0", "sighting_of_ref": "indicator--e87e64f8-61e0-4496-9340-7be4df4f6bbe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8c6459-09a6-46e8-addd-18061693f1ad", "sighting_of_ref": "indicator--e87e64f8-61e0-4496-9340-7be4df4f6bbe", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ca66c3-4127-4262-ba80-929b15cc8bde", "sighting_of_ref": "indicator--6d8df704-c77a-472d-81c1-6baa4766512d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e899247e-2760-46d7-b1ec-6b347cb2d70f", "sighting_of_ref": "indicator--6d8df704-c77a-472d-81c1-6baa4766512d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba8244a-8572-4caa-8243-624454ea73b3", "sighting_of_ref": "indicator--abb3f518-59df-4ba2-8b1f-de2e977ffcdc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a84d09-b1c3-4412-b3d1-4df70aac7ab1", "sighting_of_ref": "indicator--abb3f518-59df-4ba2-8b1f-de2e977ffcdc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--919cc914-0f27-499b-aab1-d947f2b34763", "sighting_of_ref": "indicator--b6007309-2b86-40c2-81de-b1fd2359358e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa5f11f4-6cee-41ab-8c20-c852d21e5623", "sighting_of_ref": "indicator--b6007309-2b86-40c2-81de-b1fd2359358e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b86129-4335-4bed-ac37-558be730cc19", "sighting_of_ref": "indicator--fd490c89-ceb9-42fe-af57-179aa9aed6de", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1a4e52-0646-474c-9975-e82d27c47fc5", "sighting_of_ref": "indicator--fd490c89-ceb9-42fe-af57-179aa9aed6de", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ba1abc-246d-4de0-9141-020471377226", "sighting_of_ref": "indicator--6d7d7bd2-e8b3-48d8-8239-66645b3909d1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5068d4d6-1592-4740-ba10-d5178f0efb37", "sighting_of_ref": "indicator--ecffe5c9-1214-4677-8599-081ac90504ba", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d25b188-ff49-4549-8290-2dd251bccbf7", "sighting_of_ref": "indicator--083db33c-7a1e-4182-9618-05bf20954229", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b2af6fc-f36b-484e-8b33-071ee80d8985", "sighting_of_ref": "indicator--ff5c340e-2516-4209-846d-8f7fbd497117", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6482b9a9-2813-4093-8c6a-e2a35d9aab40", "sighting_of_ref": "indicator--d5b2ea3c-6ae9-4f4d-841d-c06d0c65668a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7f13b2-f992-4b6b-af8b-4bb9f41ba900", "sighting_of_ref": "indicator--094d3957-7eaf-4d6d-9f25-4df36afc523c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7f6b58-a544-4e68-a971-cb66cc4b9462", "sighting_of_ref": "indicator--094d3957-7eaf-4d6d-9f25-4df36afc523c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64957a31-ce5e-459f-8df6-3cddcff8cb29", "sighting_of_ref": "indicator--a0dbddef-974d-4399-97c9-987c18b75986", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5453f52a-9ae3-43b0-97f0-716ec656b8a1", "sighting_of_ref": "indicator--7a0312f9-943a-4ac2-8f2b-3257068440a4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553b6d90-3034-4172-9989-0eac5f599380", "sighting_of_ref": "indicator--7cfffa7a-132e-4188-9487-fa34dbf37ffa", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933de422-8d0d-4b55-bd10-ed3273e7d27d", "sighting_of_ref": "indicator--09b2cb88-e619-4937-a869-07eaf8795f3d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ef7b0d-d68f-41ae-a1a5-1a05c533048f", "sighting_of_ref": "indicator--09b2cb88-e619-4937-a869-07eaf8795f3d", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657f7073-bcb7-4e1a-9d38-2caca2a0685e", "sighting_of_ref": "indicator--967b24e0-1b9d-41ec-a140-301bb1bc8ccb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5952a7-e4d1-4b1a-a11b-45fec4dac8c1", "sighting_of_ref": "indicator--1006f1d1-380a-448e-b3a6-d0e38ba356a9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1da57b-d498-4749-b1b6-83a560726c1f", "sighting_of_ref": "indicator--270d23a2-5193-4d8b-b67e-e6f9d98c37a2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63beeaae-72a2-4960-8e34-3e4fdabded50", "sighting_of_ref": "indicator--270d23a2-5193-4d8b-b67e-e6f9d98c37a2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62e50d7c-1bd0-4726-816b-844e56b53d83", "sighting_of_ref": "indicator--6d2d4b0c-d072-4197-bd3d-b9acd29d66da", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba4ce70-52dd-4f51-b209-1fabe9f52eb3", "sighting_of_ref": "indicator--7b2142af-ce7a-4182-8f4d-bed8cd2bad73", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e44d737f-06e1-4717-abe2-3dca10a14ba8", "sighting_of_ref": "indicator--7b2142af-ce7a-4182-8f4d-bed8cd2bad73", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e599b7-9103-4a9b-8008-1a285cdeffdd", "sighting_of_ref": "indicator--5ece8dac-1517-41a2-8c74-c80ca072f149", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f019a48-8e3c-4743-90e6-30dbb3e61af1", "sighting_of_ref": "indicator--2e9c0552-6344-41f1-a555-ed5fc42337ca", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d35f530-37ef-40a1-93f5-161e7b025e62", "sighting_of_ref": "indicator--2e9c0552-6344-41f1-a555-ed5fc42337ca", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f061365-23bb-4043-8be9-098de2023f55", "sighting_of_ref": "indicator--b4643c3c-df08-4039-8b43-f566fd14b8e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a66fbf3-6781-4450-8edb-a11b42e332f5", "sighting_of_ref": "indicator--b4643c3c-df08-4039-8b43-f566fd14b8e4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3579f9b4-c2d8-4727-91c0-5c0be1f7a731", "sighting_of_ref": "indicator--c6e78b29-1602-49af-8c1c-3aa9bc904df1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5fa6d1c-6e0d-4424-a10d-464d6726097c", "sighting_of_ref": "indicator--c6e78b29-1602-49af-8c1c-3aa9bc904df1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0c8bd4-88ac-4948-897d-a9ddc353137b", "sighting_of_ref": "indicator--4c348a47-a528-44ec-aaef-7a357ad45231", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e944c6c7-4839-4da4-bcf6-f3c48fb8140e", "sighting_of_ref": "indicator--4c348a47-a528-44ec-aaef-7a357ad45231", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91165479-a308-4c03-b5f9-c04d1cc3fb29", "sighting_of_ref": "indicator--424b8666-676d-45ba-a27a-99d4f8e85319", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acf9087-a613-4781-b02f-e46be75d1b06", "sighting_of_ref": "indicator--424b8666-676d-45ba-a27a-99d4f8e85319", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b03081f-8074-4abe-baae-1f180f0182fe", "sighting_of_ref": "indicator--35a7a6ad-0546-4a49-b387-72317d6a62a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500ed960-1a08-4ae5-90ab-aed64a026417", "sighting_of_ref": "indicator--747e9469-d048-48f3-a3c5-ffc420c84c18", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12880645-4331-4b7e-8748-70a766f30cd4", "sighting_of_ref": "indicator--747e9469-d048-48f3-a3c5-ffc420c84c18", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beb95313-85a8-4f4f-a9a7-d0e1b2642344", "sighting_of_ref": "indicator--7d246383-a0ea-4f0a-8992-8bb6554b8183", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616a47b8-b1e1-440e-9025-a188702c9d24", "sighting_of_ref": "indicator--7d246383-a0ea-4f0a-8992-8bb6554b8183", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d77f50a2-bce9-4f7e-8c67-36a6d30102b9", "sighting_of_ref": "indicator--fca60355-6318-4375-a989-890777dd978b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6347706c-0d56-4784-a261-e557bdaee4de", "sighting_of_ref": "indicator--fca60355-6318-4375-a989-890777dd978b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829c8607-e702-4b6f-b889-883a41d153e7", "sighting_of_ref": "indicator--ee248955-11b5-47e7-8f98-168464117426", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2c894a-9a3c-446e-a2d0-db8e7d73cd09", "sighting_of_ref": "indicator--ee248955-11b5-47e7-8f98-168464117426", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02417ba3-4c53-47e9-9096-ea720fe142d5", "sighting_of_ref": "indicator--a483b0e8-e347-40ea-a134-347e42647416", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb838b4-3451-4701-b9e6-5e4f9f1833b9", "sighting_of_ref": "indicator--a483b0e8-e347-40ea-a134-347e42647416", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b24e513-f4ec-475a-bf9a-b8aa11aabc05", "sighting_of_ref": "indicator--d6073ce6-a46d-4aea-a6a2-641cace7b550", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedc5146-0aac-443b-9d0d-273289e86578", "sighting_of_ref": "indicator--d6073ce6-a46d-4aea-a6a2-641cace7b550", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d622693b-dcbf-4366-8d08-30343d8a5f71", "sighting_of_ref": "indicator--9f961d87-8f8d-49c5-82f0-06671e92598d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd64104c-3382-49ca-bded-52f3989fd19f", "sighting_of_ref": "indicator--21a60f77-7c0e-4f70-8032-3c6d9ecc9418", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca058db-9884-4b41-bafb-8ca941ab9b60", "sighting_of_ref": "indicator--e8bb46db-8709-4566-b578-5c6e34193103", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439a220c-c80e-48e1-baac-37769f3ee0fb", "sighting_of_ref": "indicator--fb0dcd90-620e-4b0d-a867-2b94ef74e0e3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e14957e-7a0c-46a2-9fb9-e3b24fcfc4de", "sighting_of_ref": "indicator--b00d376a-ea23-4d92-8693-fb3c4017c921", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e806fbc-9a09-42f1-8e77-69e9e222bc8e", "sighting_of_ref": "indicator--2d54aea6-10ed-49f3-b121-6e2a2dcd74f5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d7f39df-f004-44bc-b88d-cf51fb0eb7ca", "sighting_of_ref": "indicator--f69a3f2d-f195-4b12-9fb6-bb809bd1235e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--883878cb-0423-4a14-bb14-baaeda3234fe", "sighting_of_ref": "indicator--25104cc7-dbfe-49f8-b773-2f827873be1f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1447b2bc-ef30-4d00-ab5e-5af3383666c5", "sighting_of_ref": "indicator--80b3c9c4-77bb-441e-9e9b-d44c1deae4a6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45994601-e733-4e05-b33a-c8ee7fbfa8fd", "sighting_of_ref": "indicator--80b3c9c4-77bb-441e-9e9b-d44c1deae4a6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056dfcd7-08d5-4b4e-8db4-1b83204671e6", "sighting_of_ref": "indicator--f9d98b36-d182-4390-ad7f-a08430ff19c0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac7723a-2ad5-46a6-b109-9c57c3c72ef6", "sighting_of_ref": "indicator--2ba1f15b-bcca-4317-92ed-3f7b73de1830", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d01724-dd77-46fe-ba06-ecea395c066b", "sighting_of_ref": "indicator--dca916c2-9e5e-4828-99fe-870423f0ea6d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--425d1d37-a05d-4dcf-901e-194b18a3bea0", "sighting_of_ref": "indicator--47e66490-9da5-4a3e-8ebd-e073a14bafe2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feae8606-b905-438a-b90a-d5f8db41aefd", "sighting_of_ref": "indicator--f8b5811d-fac5-4759-bdab-0dafd072ac8c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940468ff-a01e-4bb6-9bb6-c3dfb6f0b490", "sighting_of_ref": "indicator--48e71422-f708-4f05-b963-f7ba45e8cec6", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c0a225-0eeb-4a2f-a7be-5fb0c9ac60a1", "sighting_of_ref": "indicator--bc7f07f5-d060-4df6-a691-be9ac22becec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615e214b-f372-42ef-a3f1-e2f20171deb7", "sighting_of_ref": "indicator--29822829-e5e1-4bed-ad3c-ae2efa40698d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545b9c76-6b8c-4310-b8f2-b8cd80d0d907", "sighting_of_ref": "indicator--eb2bc3f6-d7e8-4c82-a426-4b54fa2fec23", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d796c84d-9e02-4df1-951e-9273a6658b74", "sighting_of_ref": "indicator--18e0b710-5b6e-4a48-8ea8-b80b5e3f7c84", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8023c45d-f4b8-437e-8d03-29fef62c91a7", "sighting_of_ref": "indicator--5cdfcd12-a020-4c49-a9aa-8416ec304a83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be354d96-b0e1-42c6-89d4-f88b0a50e34b", "sighting_of_ref": "indicator--d5ee086a-6cac-461b-a286-3f8a70e7b856", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8a81f2a-5ad8-431b-8206-fbec7c655a0d", "sighting_of_ref": "indicator--e245bab0-96d0-4ff9-9a9a-a0244c47ae19", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18d9146-9e6b-484a-8b8e-1ea68a9248f8", "sighting_of_ref": "indicator--216e1458-e830-445e-b13c-e3e46f9e0ebf", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee1e27c-bcd7-46b7-9064-d2a75e2a68d1", "sighting_of_ref": "indicator--888083a4-6a7f-4e98-85d2-2f8d20ee1b71", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3827f31-29cc-477d-a4e5-d67b199dd014", "sighting_of_ref": "indicator--921a79c3-c78a-442e-a9fd-9ab1fb811574", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25c26610-d1fa-45f8-8525-a54ff5a725db", "sighting_of_ref": "indicator--4a3fc190-ce99-475c-9ac8-76f36cca48eb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd303044-8ce2-4162-8882-24f55ebf4125", "sighting_of_ref": "indicator--a610fbae-123b-476d-bd7e-5ca1f0af4f36", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5733218b-4dab-452d-8b56-c64ddbd8e1c8", "sighting_of_ref": "indicator--d9d12b41-730e-4d7c-ba3f-fe0901765393", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750c9601-40f2-4e98-b1db-347ab0ae0513", "sighting_of_ref": "indicator--d9d12b41-730e-4d7c-ba3f-fe0901765393", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03b47e62-2267-479a-b235-f4abefc728a9", "sighting_of_ref": "indicator--0b9cb5d9-f10b-42e8-863c-fa187a64b08a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b26ec871-43dd-45a0-a0af-620dbbd49b7a", "sighting_of_ref": "indicator--f63f4a11-094c-45fa-b886-b8ab82a40c74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c45743-2a47-4277-ba63-8ad4551160c8", "sighting_of_ref": "indicator--c52c227d-6b48-48e1-ac47-92a32bb5c45e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--466ad5dd-d3d3-40a6-a3bd-092072a34598", "sighting_of_ref": "indicator--cf7cc5c4-9314-4bcf-97d9-400da1b33ba7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52785fc0-c7e8-4f79-8742-dee4b5f7586b", "sighting_of_ref": "indicator--62ce8544-5f23-419c-8562-ef78915b9f21", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ef99ba-7ecb-4952-ae4a-11bf3e576d9b", "sighting_of_ref": "indicator--9a019079-302e-4d5f-b6d7-e2f0be4eca32", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5ac75f-1a5a-4efd-a5a6-d3136ec19c55", "sighting_of_ref": "indicator--d5eedf33-6029-4794-9e33-f37224f1c078", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82909659-9329-482f-8feb-fb37f9343cb7", "sighting_of_ref": "indicator--7008f3f4-4703-45e5-aab7-5dac08fa629c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--899e8129-3309-4d61-bef6-f8da8daa4961", "sighting_of_ref": "indicator--2b3cb518-f479-49ff-9732-c7a3f83c50c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fdf5d57-5abd-4518-9d63-bb5ebacc5589", "sighting_of_ref": "indicator--83a56c66-702b-443c-9e15-db7d96ea7bff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07462c11-13aa-4def-a854-3fd0a28c320d", "sighting_of_ref": "indicator--a2b7fbf4-066d-4b7d-ae92-54bfe1b3fda9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4b4ed7-9b22-42db-8bb4-265db6ae8b41", "sighting_of_ref": "indicator--b0464a2e-ef7a-4c2e-9731-29a70be08f83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b347e69a-eca7-49f1-bce8-9911de85edf4", "sighting_of_ref": "indicator--62bf5995-ee40-4fa0-a8c9-da3f09612053", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa596959-f813-4624-9e2c-fd8409446d55", "sighting_of_ref": "indicator--2f1e876a-aa88-4bae-bb2a-ccdbf96aedb3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7977292b-078d-49f4-861e-20657570cdba", "sighting_of_ref": "indicator--31f70038-25e0-4a4d-bffa-a7736439f232", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2cdb43-dbce-4272-8a76-5932f1132fd7", "sighting_of_ref": "indicator--bec0657e-a213-4ab5-b321-5f56b289fb40", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86458d66-5c67-4d8d-a0d3-d944c600484d", "sighting_of_ref": "indicator--8643729d-351a-4e9d-860e-ee77f6ba9a14", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f66e1c0b-c1e2-4064-92a1-1acd9126ee12", "sighting_of_ref": "indicator--7f765061-f9cf-431a-bd90-86326d8daaec", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67582eb8-6bed-4385-a68c-f823a6375048", "sighting_of_ref": "indicator--ccd13949-dd84-48aa-bcc6-0017e9d41edb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd4b895-96ab-4df6-9fa1-910875680181", "sighting_of_ref": "indicator--47ac1d32-1118-44ee-aa12-e1f7cfbc9e90", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c9a82f-59e5-4546-a595-cf8e7dd2fd13", "sighting_of_ref": "indicator--2062c8c9-a395-427b-9b5f-cbddd8d81897", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad313972-1ce1-4a4f-aafb-e3050f307db7", "sighting_of_ref": "indicator--70ba8e7b-556c-4856-a884-1d850d7dc14b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830cb423-a7a4-46ae-aec9-3cdd47fdba7b", "sighting_of_ref": "indicator--b2d68c43-7076-4b0d-ad53-3481c747d438", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf10d51-e40d-4f7a-bf55-56c13c81d4ef", "sighting_of_ref": "indicator--601f7a5b-58b2-45ec-a64e-1fd571bfcb93", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9cd6f5e-0a06-4ac7-9216-ee9ee362e126", "sighting_of_ref": "indicator--bf3bb9da-5dc4-40db-b08f-23906c44d3f9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b515b617-9cea-43d0-b0e4-9992ca4f956f", "sighting_of_ref": "indicator--9a3a47b4-d6b9-477f-9741-5c7ee04459b9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636da680-9ddd-46d5-9dad-f313d6517794", "sighting_of_ref": "indicator--b1022c8a-3d27-495b-bc53-6eee37fa3e44", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827947c5-3e05-47ab-ba1c-4a09af698abe", "sighting_of_ref": "indicator--d0d090ac-1247-4f78-a800-0ee0d7e351d5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c746a1d-4085-46e1-bd92-e090de16588e", "sighting_of_ref": "indicator--f8a8e4de-086b-4a6c-84ae-d45e5c4ac21c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0c57497-4402-4c37-af83-eda5bffe3463", "sighting_of_ref": "indicator--cab62947-6fa4-480a-a305-bf5c47dedef4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703220e3-7265-45b7-8399-16c36373b9ae", "sighting_of_ref": "indicator--66bc1c84-4a1b-4e73-8c91-b49f92b68f33", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3326da3-432d-41cd-b25e-1d9713f7451a", "sighting_of_ref": "indicator--75259a76-29b4-43fc-b7ca-307af8615ff2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f967692-cf98-4b3b-b0a6-59e81c0a63d4", "sighting_of_ref": "indicator--ea044890-fee6-4333-bc9b-ea800b4f4cb3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4da2e401-1f54-4533-95ef-970459afed9c", "sighting_of_ref": "indicator--48655d1d-28d0-4f55-a8ba-99adfdd821af", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6efa892d-736a-4645-861f-abc9402bf4bb", "sighting_of_ref": "indicator--314298ed-56f8-4b9f-9119-04e8bfa5286e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad8473bd-45b8-4761-8024-754df4d70617", "sighting_of_ref": "indicator--ccf831ff-6f7e-49b5-9ac4-bd10dbafd4cc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befb3321-79ff-464f-908e-b5310e22583c", "sighting_of_ref": "indicator--a4cf1160-21f2-4aa3-9f3c-012c5f64b7e5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0bb195-843c-4ff3-be50-2eaf589bf6e5", "sighting_of_ref": "indicator--0232b398-fa77-4935-a4fb-9736b63cc21f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcff48b-cc71-4a9c-a90f-354165d658ff", "sighting_of_ref": "indicator--20116626-4d4b-423b-989c-949bcd1eabe1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1390e42-50a3-4b0b-9c59-78a5b3524fad", "sighting_of_ref": "indicator--f9369603-9085-47a0-87da-26d0ed2f2ed2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb5662a6-47f8-40f5-b3e2-41b4a494d690", "sighting_of_ref": "indicator--f9369603-9085-47a0-87da-26d0ed2f2ed2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a27719-0b6a-4974-89ac-7d9f7aac6fca", "sighting_of_ref": "indicator--f3d11a7a-d943-449f-8ae7-5077135ba959", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ddab1e-9135-4552-ba43-5fbd2f19d9f3", "sighting_of_ref": "indicator--0dd96aa4-7a23-4690-8fb9-1c989915327b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9172038e-2ffe-4c0b-a829-8b132509d000", "sighting_of_ref": "indicator--f3bd3f52-240b-4aa0-bb90-fd8f183bd48d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6be74f-1268-49f9-b651-8d51af14a8cc", "sighting_of_ref": "indicator--9a6efde0-f262-4c55-ad11-46d1dc8a2d1c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e94f10f9-b6da-4991-b739-a84b08bab950", "sighting_of_ref": "indicator--fbb063cd-d9c3-4e9e-84ae-ab346fda8b74", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be1fdcb-fe2b-41e1-9f5f-0197dcb5de0d", "sighting_of_ref": "indicator--83fad016-7b2e-4f57-820f-239ec95aacaf", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f30ab02-c88b-4989-a7f2-de36eb133286", "sighting_of_ref": "indicator--cd01b417-71d2-42a8-9995-fc9ae536ae89", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2fb4a89-f900-4afa-8567-d19d8d2cf7d7", "sighting_of_ref": "indicator--a25d1153-c1c4-42f4-a598-64f5a8e3b4e4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c9238e-90d6-41eb-97b8-b9df91486c46", "sighting_of_ref": "indicator--c4444f78-66b9-438f-9f35-4c42d6bbbae9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffc9a19-850b-4677-ab2d-6a250904a7f8", "sighting_of_ref": "indicator--948c7d8d-0207-4c9b-bb8d-98a0074316c6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9085f0eb-e00b-4adc-a429-eee6ea6408ff", "sighting_of_ref": "indicator--f1d1149a-6656-4fe6-92f7-cf391e825be8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1c8e8a-3b4f-406e-9f89-2f63599f5937", "sighting_of_ref": "indicator--4047a64f-3b72-4df6-8d05-3d07716f15c1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b9de60-7624-4ffa-a8b1-b5987ad6099f", "sighting_of_ref": "indicator--700d7842-fc17-42d6-9f24-e263dc86a00d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c2a053-bae2-4452-aaa1-60c04ffba10d", "sighting_of_ref": "indicator--bc391d39-2b5f-4885-b3ca-793c781c5108", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0083c6cf-cb3f-41d1-bb7b-752540d407ab", "sighting_of_ref": "indicator--020a855f-2660-412c-94b1-44dff5f3523b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434f2a8a-5489-4127-b9de-33caacd4d874", "sighting_of_ref": "indicator--f11089df-8a18-4662-a0f3-42234fa5f925", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a3eb7f-914a-4d06-8703-13b83c3d884a", "sighting_of_ref": "indicator--fc02d9df-47d3-4c46-a013-d25025d10ad8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9aa615-e528-4def-b9b0-f8679c7fdfcc", "sighting_of_ref": "indicator--5a4ef405-3b06-468c-a88b-896721a7b554", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d90ad8-82d0-4a96-9902-b240ffc34a04", "sighting_of_ref": "indicator--85122845-3de9-4681-822a-f11eb941351c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a15363d-4c7a-43db-8a33-3cf1664aa129", "sighting_of_ref": "indicator--a45f4380-579c-4fc2-8bd0-ce113e8496b9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a99979-2200-4a2c-aa57-25e951419319", "sighting_of_ref": "indicator--8a3d2a81-de2a-42e8-b3f0-1bf457236409", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0abec60-c885-4df7-812d-f192dfc85bea", "sighting_of_ref": "indicator--ae729114-824b-402f-8f7c-3f56fc45cd27", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd223903-2f06-4d90-82db-5ac2c9daccd6", "sighting_of_ref": "indicator--fbb8db0e-18be-4317-9171-43590b4b5b0b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--438651d4-e2b4-42c3-8555-81c75b43b2ef", "sighting_of_ref": "indicator--e5bf9030-305b-411a-9f48-8a3224c02416", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c05d48-8e9f-4d9a-8953-39b89b278933", "sighting_of_ref": "indicator--48210468-2a44-4f3f-a31e-8443ba0099b2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--763a5c51-7890-44f3-b471-729ad7d9c89e", "sighting_of_ref": "indicator--48210468-2a44-4f3f-a31e-8443ba0099b2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c1512a-6d55-4dd6-9eaa-76ba3bb56aa8", "sighting_of_ref": "indicator--33454c54-e006-4f5d-b729-71a93afeabbb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea3e843-8fb6-416a-9ef7-37982732e8a4", "sighting_of_ref": "indicator--68deda8e-614f-4dab-a08c-2adf698e298d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ae3d42-f3ca-46df-8d38-09c18ee385a7", "sighting_of_ref": "indicator--858545ed-b4ad-46a5-99d7-803482c21ea7", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--521f8385-4e11-4e2b-92ea-c56c8d78fc7f", "sighting_of_ref": "indicator--204e923a-0075-4670-bae9-b513ddb8e767", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291a0284-ca6e-432e-8362-3257c3016b14", "sighting_of_ref": "indicator--204e923a-0075-4670-bae9-b513ddb8e767", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--582bc2c2-f056-4f67-8be8-2833e214375a", "sighting_of_ref": "indicator--e90f5c74-cd06-45df-8526-fd95e7483ad8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2459a6f-575e-49e2-98ac-224d5b7b31b0", "sighting_of_ref": "indicator--e90f5c74-cd06-45df-8526-fd95e7483ad8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6156dec7-47bc-42eb-8ac8-26e3b65c7a42", "sighting_of_ref": "indicator--302b641c-8c31-49a8-a3d5-0569c8f06a20", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2add0907-4e3e-4568-969f-982a3c53f73a", "sighting_of_ref": "indicator--138c322d-f20f-469f-86d4-9bb3e644db0d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f9a0ae9-3cef-4a44-abed-e79ce152efaa", "sighting_of_ref": "indicator--96510f7d-46f5-4339-8aad-3bafffaffccc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801614d2-a9db-4ab1-bce7-41a31b96fb92", "sighting_of_ref": "indicator--42f80511-2a8b-4818-91d9-328cb30d1e5d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fd8d2a-bd42-40e7-9cf2-23a4c7afd364", "sighting_of_ref": "indicator--619c153a-5445-4266-9765-7a627dda50d0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a43785-5ec0-449e-ad05-166adcce639a", "sighting_of_ref": "indicator--619c153a-5445-4266-9765-7a627dda50d0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--283a1068-6e32-4cae-a298-183e9bf44677", "sighting_of_ref": "indicator--619c153a-5445-4266-9765-7a627dda50d0", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7cb1d4-ec60-497c-903e-6de3957aeada", "sighting_of_ref": "indicator--8a7af4f8-2f2c-4f76-86aa-21d704adecae", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8870100-2815-4efa-891c-922c62612870", "sighting_of_ref": "indicator--8a7af4f8-2f2c-4f76-86aa-21d704adecae", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a97d9f2-bf52-4835-940f-fe9d520e8ec0", "sighting_of_ref": "indicator--8a7af4f8-2f2c-4f76-86aa-21d704adecae", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300b3fa7-ada8-4d4d-a08a-3cd5ba2bc28b", "sighting_of_ref": "indicator--b45391c3-57f3-481b-adbf-3a0843edd83b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e955f0dc-ab54-40ac-bd4b-63bf7e9e488d", "sighting_of_ref": "indicator--b45391c3-57f3-481b-adbf-3a0843edd83b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c2726f7-3f2e-4fe7-b8d1-26c25f330aa7", "sighting_of_ref": "indicator--b838a533-d132-4438-aa75-a2ba3e4cfa0a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf01830f-67cf-490f-a5d7-478bd02f1037", "sighting_of_ref": "indicator--b838a533-d132-4438-aa75-a2ba3e4cfa0a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e4819b-8d4e-4d89-95b8-66830ad4164d", "sighting_of_ref": "indicator--b838a533-d132-4438-aa75-a2ba3e4cfa0a", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1038dcb2-15ce-4773-9aff-cec0697cafa8", "sighting_of_ref": "indicator--2a2e690f-8bac-48aa-9fc4-7d653fa09604", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25a3726-b754-4210-a612-a9c5b24e253d", "sighting_of_ref": "indicator--2a2e690f-8bac-48aa-9fc4-7d653fa09604", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d269c0d1-7b94-4c26-9803-65d083b93de6", "sighting_of_ref": "indicator--2a2e690f-8bac-48aa-9fc4-7d653fa09604", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cfe3b78-5475-414c-ac58-6b1f869d98f6", "sighting_of_ref": "indicator--e0f618c8-e4cd-4154-a0b8-3da10dc80973", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c638c71d-25d9-41de-bf72-d4abeefc65ca", "sighting_of_ref": "indicator--e0f618c8-e4cd-4154-a0b8-3da10dc80973", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5c6b01-b924-4556-a8f6-67e6441186a3", "sighting_of_ref": "indicator--9b957839-3d6c-4051-8b02-cc6f8a96a0c5", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01b1f0de-ad38-4268-adbd-917354c54a63", "sighting_of_ref": "indicator--9b957839-3d6c-4051-8b02-cc6f8a96a0c5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446fb3e0-2f1b-466c-8be1-b2ae8cee083b", "sighting_of_ref": "indicator--50a806b3-23d8-4207-9586-72229623e46c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63d5782-61f4-448a-97fa-a4f48b760355", "sighting_of_ref": "indicator--50a806b3-23d8-4207-9586-72229623e46c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88881aa8-8fa8-4d5b-8cdc-0df5086cafe0", "sighting_of_ref": "indicator--e317c799-6707-4879-95a7-c3962ed0fd07", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ff4ad5-f343-4ed6-93f3-59076190aa99", "sighting_of_ref": "indicator--10e1d10b-182a-4d5d-a2dc-0d9b2a46e753", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9e81de-c4b6-4881-b890-b4b498065386", "sighting_of_ref": "indicator--10e1d10b-182a-4d5d-a2dc-0d9b2a46e753", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29844579-124a-40c2-aaf0-3afbef10242f", "sighting_of_ref": "indicator--f35d9d0b-3021-41fe-8909-2827ad86d9c9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25e3699-7ee3-410c-83ae-6fe1a6d23e03", "sighting_of_ref": "indicator--26a0bb0e-b3d9-4526-95a7-c0426188c836", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094b944f-a00f-4ff3-bcb1-ad7bf563f987", "sighting_of_ref": "indicator--26a0bb0e-b3d9-4526-95a7-c0426188c836", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8810252f-c693-4097-b3a8-bb095a6808f0", "sighting_of_ref": "indicator--f672ef0a-c278-4c5c-92f9-424f8a3bbac9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12f3589-ef64-4998-a051-e805e4e3a1e5", "sighting_of_ref": "indicator--314d19c5-f0db-4499-9d31-f48e66928925", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c47790b1-8096-463e-9daf-f32075b9cc8b", "sighting_of_ref": "indicator--314d19c5-f0db-4499-9d31-f48e66928925", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09912f4-b081-4a00-bde7-12e8861d4ed9", "sighting_of_ref": "indicator--314d19c5-f0db-4499-9d31-f48e66928925", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cd33598-95cf-42c9-9f20-1920dc5ec0d1", "sighting_of_ref": "indicator--314d19c5-f0db-4499-9d31-f48e66928925", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d529d9-a80f-4b1f-844c-364d927f6c06", "sighting_of_ref": "indicator--314d19c5-f0db-4499-9d31-f48e66928925", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177b594f-e517-4c9d-a3f5-054034ce3afd", "sighting_of_ref": "indicator--4b1d1e29-628b-4edc-8e50-e76741d641a1", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33054aa-1414-4cd2-b03d-360c7fb72e82", "sighting_of_ref": "indicator--4b1d1e29-628b-4edc-8e50-e76741d641a1", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b53340-d743-42b4-b8d2-68b715137b3e", "sighting_of_ref": "indicator--4b1d1e29-628b-4edc-8e50-e76741d641a1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcb885a-1161-4fdc-82f2-fee4d2678853", "sighting_of_ref": "indicator--4b1d1e29-628b-4edc-8e50-e76741d641a1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b352685-f39e-48e7-918c-52b305dcbdaf", "sighting_of_ref": "indicator--4b1d1e29-628b-4edc-8e50-e76741d641a1", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d589f35d-ace6-4f9b-9e8a-3939c5b1875b", "sighting_of_ref": "indicator--4c493d94-ee18-4838-a4e0-c84f7b6b1c64", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab079be2-72d1-44bb-b72a-e245cc3d316f", "sighting_of_ref": "indicator--4c493d94-ee18-4838-a4e0-c84f7b6b1c64", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--927d308d-fa4b-42e5-bd8b-16411407ad82", "sighting_of_ref": "indicator--b962aeed-afe2-4384-ac5f-558aa0a7e3b4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0228ada6-09b9-471c-aea5-e94fb8f4c9a8", "sighting_of_ref": "indicator--e6e1442b-4d65-420e-a0a4-61f3f6cc619c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8edf5cac-b42c-4fa3-b2ec-af8399ce8ac0", "sighting_of_ref": "indicator--ec446a42-cb0e-4005-876e-b387d8a4dd96", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e33f4421-29a4-4c8d-a66a-8d048e6b3287", "sighting_of_ref": "indicator--6989b54c-4b44-4670-bc51-48de7c3d8993", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f325d0f-b5e6-4c19-9022-f130625ed205", "sighting_of_ref": "indicator--426d544e-4a5a-4bc2-9703-8cb4265e2ae2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96c6356-f414-4ce8-baff-05df1be87f80", "sighting_of_ref": "indicator--d5bdfb53-abe1-43eb-9c08-dc6bd75d9f45", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2feb2a-46ae-418b-8b3e-ed4cecb09ef3", "sighting_of_ref": "indicator--fae61d43-04b7-41ee-9682-f173414f4dcc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8bbf84-1cac-456a-bab7-a572cf76592f", "sighting_of_ref": "indicator--92dc69e6-8c62-47cb-a603-acc7afaafb97", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5abc82cd-24ca-430d-9c7d-f34cd6df2036", "sighting_of_ref": "indicator--ef7cbede-38ef-4c73-a5ef-9bbffe2790d7", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4516d89-5e10-45b2-a0be-be24082cfe8a", "sighting_of_ref": "indicator--ef7cbede-38ef-4c73-a5ef-9bbffe2790d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ca422a-07a9-44c5-a613-9dc900a126b4", "sighting_of_ref": "indicator--80510e2e-04a2-465c-9244-9b4d43a30181", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eda5456-7925-4859-a1da-f98d0b887129", "sighting_of_ref": "indicator--de39200c-ee2d-4fbc-9fe4-0b1d08388417", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cde410bc-940b-403a-8fbd-7aa29d5165be", "sighting_of_ref": "indicator--88b3e24e-851d-407a-b99e-718585987521", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734c0249-70de-4b39-b939-621d5c743c38", "sighting_of_ref": "indicator--e5c052a6-072a-4c49-aa9c-ea71b486ca13", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f798711c-bc36-407c-856a-797c5212ea8a", "sighting_of_ref": "indicator--e6923326-bb3b-40ef-9b9e-2810b996d607", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16271912-f292-4f97-8092-4682ea35a70c", "sighting_of_ref": "indicator--3505efb7-6d72-4ea6-85b7-4cf6a96474d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f128f4-28e0-4dfb-9ebf-c1afc27296a4", "sighting_of_ref": "indicator--46e4f9be-00d2-4d47-b139-b283186d0e6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40071750-fc6b-460e-8536-233e3bf6ed14", "sighting_of_ref": "indicator--fe76c2de-c082-4ad5-9542-4c20f7d83a40", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b641ca81-45f8-46b9-bef1-f289f9519cdd", "sighting_of_ref": "indicator--6ea54ea4-5f0f-48f9-9273-0e7320c14e5a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a994ba-d038-4f01-9119-c1368c49eca7", "sighting_of_ref": "indicator--958afc9d-700e-4b3f-bcdd-9b44ab88ad6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb315cb-43c0-4cd0-93cb-5d325647cb7d", "sighting_of_ref": "indicator--4af32d9b-2598-4213-a500-20a87b6b746e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50554653-a731-4a58-9609-2d8a8b2f1fb1", "sighting_of_ref": "indicator--5d1a7b41-44f4-4a60-82d6-3467b35bd7e9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41f9d3d-955d-46c4-8365-6a6cc68aea17", "sighting_of_ref": "indicator--a64220de-886b-4c0f-9b24-2f76786828e6", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebebbc7-9595-4014-bbb7-e9cbb167678f", "sighting_of_ref": "indicator--4bc0e402-562c-4c17-9f6f-796c26261175", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf42409c-f9b5-4cb9-8aa8-106d70b9ce1f", "sighting_of_ref": "indicator--4ed64c96-b27d-46e0-9292-2e610a2be36c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21e742a-a6df-4f45-b3bd-0e6039cff72b", "sighting_of_ref": "indicator--5e5bb193-0870-4765-af13-c227086509e0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372845a9-46da-4305-a74b-322e84a39b9f", "sighting_of_ref": "indicator--2d69e06a-4ac6-49c6-9633-140b09197f2b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2e507c-ce3a-4f3a-8b96-6025d1554f5f", "sighting_of_ref": "indicator--d5ae3300-007f-418b-96b3-9040757e9a84", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a51471d2-57aa-4c6e-8ddc-fb0a4706bacf", "sighting_of_ref": "indicator--d5ae3300-007f-418b-96b3-9040757e9a84", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd704bd4-a665-424c-a91f-188265eecdf8", "sighting_of_ref": "indicator--4648e6e9-3526-4f71-b817-c42036bf6f7a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55fc3351-42fa-440a-8243-271444b20014", "sighting_of_ref": "indicator--ebe64352-cc9d-4674-90e2-7847be5ebdcb", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b0ea8f4-44fb-47fb-900a-bbb02ddbe0b6", "sighting_of_ref": "indicator--ebe64352-cc9d-4674-90e2-7847be5ebdcb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d24a07-1898-435b-ad58-4d39f8990651", "sighting_of_ref": "indicator--7093e3d2-7333-4982-92a1-f4a70a8b7979", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d439652-cf7c-4c34-89be-3d2e3ec40d57", "sighting_of_ref": "indicator--7093e3d2-7333-4982-92a1-f4a70a8b7979", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393fbfc4-fab6-4fa7-b2e8-d39bd1e6c62d", "sighting_of_ref": "indicator--34107e2c-f546-49ec-b7f4-588a1f81d27f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5339d33a-5272-48fc-bad9-2b0256b96f7a", "sighting_of_ref": "indicator--c3acafdc-bb44-4575-804f-a46f1b856ea5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4ce45d-36fa-4d56-8f27-5e3744a631ce", "sighting_of_ref": "indicator--c3acafdc-bb44-4575-804f-a46f1b856ea5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54894f0-0a00-408b-b16a-d6d313cd1e0a", "sighting_of_ref": "indicator--f319fd74-af00-4254-84a4-a6444122e57f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc9f3de-aeec-427d-b173-6fe1ed20eafe", "sighting_of_ref": "indicator--9450cf79-4e2b-4044-a56e-04c53a62bcb8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f314705-1103-45be-b267-d13ca93a6103", "sighting_of_ref": "indicator--e94d9f00-1808-4a77-9456-76b0f506c79e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23879039-7435-4b22-8b74-a8d68fa747fa", "sighting_of_ref": "indicator--66bacc09-0023-4cc0-a67d-4f6648b0f56f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f07d5c5-e32f-48f1-b555-3f16469c5e99", "sighting_of_ref": "indicator--af80266e-1a0f-446a-b6c8-389e9dfa8c49", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa638b6-dc59-46cd-a797-6d4794ffd111", "sighting_of_ref": "indicator--df4744fc-0c17-411c-9b6e-6a11e19aa176", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a1a394-aa86-4cc5-9b23-0d3046baa781", "sighting_of_ref": "indicator--d8084824-4e69-4061-a8b6-4863b36ce590", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da36419-061a-4ffa-a408-42753cb6c45f", "sighting_of_ref": "indicator--107adc40-a9d0-413d-a770-fde34146c7f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfffa651-e368-44bb-93a1-36ce93a27217", "sighting_of_ref": "indicator--dea3ea3c-6350-4e8c-b877-4d95c4d327b8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885afba9-1316-410e-a18e-d3a41ef746a8", "sighting_of_ref": "indicator--e6da8329-5f56-4a2a-a052-504d35594aee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd13c67-daca-456d-9866-87693fde3a9b", "sighting_of_ref": "indicator--1d921eab-322d-43ed-abf7-ccb1aae9841c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66794e64-fcde-40be-a573-da7dc0cf183d", "sighting_of_ref": "indicator--462e6985-5a39-4ae7-a091-2844dc791c7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91aca093-1f85-487f-81b8-7ab7dfb4ad99", "sighting_of_ref": "indicator--77bc9ea4-d950-428c-9679-11eb3f8aa8e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93edc626-8692-46f6-9621-ecf25eda8bf5", "sighting_of_ref": "indicator--6d154476-c24e-40d4-84a4-c573649866ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb36dff9-b68a-4351-9eec-6eeceb80d899", "sighting_of_ref": "indicator--8c3746de-056b-4939-8f1a-8feee05914ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7203ab86-0bc3-4b2b-83f6-8e08c3f11d27", "sighting_of_ref": "indicator--508f9a43-7a6e-4bfe-8b86-c9e92fb70ad3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e700b25-2d78-4da4-a349-380cd4cccc7c", "sighting_of_ref": "indicator--27f2d695-bd6b-497d-b3b6-e6bec5079fdf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d9e26e-909a-47a8-a135-3e6f5fe45253", "sighting_of_ref": "indicator--6a05c60e-11b2-4473-934a-d47769faa594", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1fc61a-479b-4cda-af37-255896563203", "sighting_of_ref": "indicator--285304be-bfe1-4d77-8ff1-9d86d982006a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e07b8df-0fb1-4b3c-8406-ad19f23950cd", "sighting_of_ref": "indicator--51a5e596-1343-44d8-a078-979ae9bb3cb4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031e3807-affb-4a4b-9cf3-58992cad6679", "sighting_of_ref": "indicator--8d58a593-7a5f-4924-9858-0bfc56a3aeea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da8df8b4-7287-48bf-b14f-b1652f8d97a8", "sighting_of_ref": "indicator--4b72c0a6-184c-4782-8d08-da2a2f5bc015", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570c4fae-a329-4e54-a4df-afa61923b57f", "sighting_of_ref": "indicator--a3608330-b726-4a46-a14f-a0d0861cbd37", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549df396-90e0-4642-88a4-746de014803f", "sighting_of_ref": "indicator--940b6900-df1a-4d73-a721-5b1d4e45aa66", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db86f36-4756-4973-8e56-4c54ea4d8f5a", "sighting_of_ref": "indicator--5468f502-50c2-4759-acb7-e578e96e9f4c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31b16200-d078-4abe-98bb-b0913f8cdb1d", "sighting_of_ref": "indicator--37acb698-178c-409d-9dad-ad876d825008", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5165923-5b07-4872-b378-7d40e22f30a0", "sighting_of_ref": "indicator--72f23af3-09e0-44d0-9ffb-cf515492567b", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b2dbc2-ce5a-4b6c-a021-97dce2ddfd1f", "sighting_of_ref": "indicator--690961c1-bc47-4df4-84eb-ab17db238675", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb6c3ed-6595-44b6-a7f3-39f52e67563c", "sighting_of_ref": "indicator--7ab07dc9-69b7-4385-aa37-b3c0cb1a865b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cacc37c0-71fb-4972-a147-0251cdd9851f", "sighting_of_ref": "indicator--7ab07dc9-69b7-4385-aa37-b3c0cb1a865b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3590dba-5fe8-43a7-bc53-0833b9c2cedf", "sighting_of_ref": "indicator--62ee7634-22e3-434d-84df-c5a2cc76d283", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f022a6-f540-489b-b131-890a0f2cb935", "sighting_of_ref": "indicator--be2ab199-ac6a-4a26-b879-9353cf8c6a2e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aff76f7-b545-44d8-8cfd-737700655c68", "sighting_of_ref": "indicator--be2ab199-ac6a-4a26-b879-9353cf8c6a2e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--021c3c18-7ef9-4d64-9209-b7639ade8cdc", "sighting_of_ref": "indicator--04435354-f8ff-4751-bb8b-7d1df5478f75", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a67b46b-7195-42be-a5fc-7098c0233d45", "sighting_of_ref": "indicator--04435354-f8ff-4751-bb8b-7d1df5478f75", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d518525b-5a23-4175-9d78-03d16d102a7c", "sighting_of_ref": "indicator--5762987b-128d-40d7-b264-69bbfdcf0567", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9546fb-28c1-40bb-b67f-1ed6594e0701", "sighting_of_ref": "indicator--2f0c2f25-ee08-437d-bf18-36558272dd27", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fa2829-9a9c-4546-a257-320758f904c8", "sighting_of_ref": "indicator--2f0c2f25-ee08-437d-bf18-36558272dd27", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8308d00-9161-40ac-9d7d-c767aa600e60", "sighting_of_ref": "indicator--09fb8ae0-5df4-4804-a9c6-9544b605d51a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dab9ad7-179b-4679-b693-cbebc8f8268c", "sighting_of_ref": "indicator--1a350003-6b45-4734-b493-4e92615f443c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4983da3-b437-4c1b-80e8-af988fdf0374", "sighting_of_ref": "indicator--e7589518-a665-4cec-b64e-81080857aab3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcf83aab-1827-4f4b-be05-51aaffe3dd1c", "sighting_of_ref": "indicator--e7589518-a665-4cec-b64e-81080857aab3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b99066-ec53-4119-990c-95d85f2e5ca8", "sighting_of_ref": "indicator--adba2a29-d641-442e-adf7-6b8f6c50d555", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328d1782-10fa-44ef-936f-c5d6b22960b7", "sighting_of_ref": "indicator--0c955fa5-a56e-4e64-be59-412ff6a77e72", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdebf33e-248c-4607-9a59-da78cb27e53e", "sighting_of_ref": "indicator--0c955fa5-a56e-4e64-be59-412ff6a77e72", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca2d738a-0312-4e84-9945-c0a569f169d0", "sighting_of_ref": "indicator--cc7ede12-e438-4219-bdcd-8c0b32f06dd2", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b713538e-1a7b-4abe-b617-ec64de320a1a", "sighting_of_ref": "indicator--8697067a-446c-4bb0-83b5-7be2131b2d6f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ab5100-a4f1-4fd5-a03f-a60be6c9f6ad", "sighting_of_ref": "indicator--518a194b-c319-4bba-82f4-8b78eaf36dbe", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9411ff10-17b0-45da-828e-46ca5402ce01", "sighting_of_ref": "indicator--21cf4cfa-54ac-41d5-bfee-8e43b7939e9d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f211b7-65e2-4bdf-ad97-aaf3872669dd", "sighting_of_ref": "indicator--c1b806c8-ba2c-4ea2-a757-412e1560338d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e01b93-2f44-4213-8d0e-05fa158d19c0", "sighting_of_ref": "indicator--c1b806c8-ba2c-4ea2-a757-412e1560338d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5835cfb3-63bf-4855-8de3-0f4202ba5736", "sighting_of_ref": "indicator--27a5fc04-0ffa-45d9-bb42-3a2607f56a4f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90af8927-ceb2-44db-8cfc-b09f4881eafe", "sighting_of_ref": "indicator--27a5fc04-0ffa-45d9-bb42-3a2607f56a4f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5860f3c2-0764-4471-b413-00e96e249d23", "sighting_of_ref": "indicator--d8add884-64d6-4276-92bf-7bf8644b9b00", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2216b22e-84bb-4402-bef0-f098255178d0", "sighting_of_ref": "indicator--d8add884-64d6-4276-92bf-7bf8644b9b00", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84074e04-0b69-4300-803c-2727c8a38de5", "sighting_of_ref": "indicator--1ab40a4a-9608-40aa-98d0-966d2e3c89e7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e6a4ff7-d93e-4838-b656-6d6776664c8e", "sighting_of_ref": "indicator--1ab40a4a-9608-40aa-98d0-966d2e3c89e7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daaeb9d8-1af7-4480-a431-09fbe83c8f52", "sighting_of_ref": "indicator--aa0b6744-ac0d-4cff-b98e-b08e6f748201", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3f699a-f92d-42cd-932a-5a5102997d88", "sighting_of_ref": "indicator--aa0b6744-ac0d-4cff-b98e-b08e6f748201", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157ce7bc-799c-4d48-96d4-c3578757875d", "sighting_of_ref": "indicator--4ee5af54-c074-40e9-b263-f442b4f92306", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6b09ff-f34e-4342-a9aa-989a45fd3946", "sighting_of_ref": "indicator--4ee5af54-c074-40e9-b263-f442b4f92306", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de91ef98-c85a-4d55-81b0-4125c88e9178", "sighting_of_ref": "indicator--28294261-fd90-48e3-bd67-54105ad49638", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080793d6-0df6-450f-a9d0-ae3bd7bb7162", "sighting_of_ref": "indicator--28294261-fd90-48e3-bd67-54105ad49638", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c7cba2-6627-413d-a748-d5cf6d425e36", "sighting_of_ref": "indicator--259cb37f-c8f4-49a2-9493-44edef30f587", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f0f21cb-495d-4b68-a8c5-a636980c0de5", "sighting_of_ref": "indicator--2821b5c5-e769-4baf-b87e-58e89cd9f505", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddf0a88b-b90b-4701-b535-b20b8c4caa5c", "sighting_of_ref": "indicator--88acbe89-cb71-4f9c-91c5-eac3a71278f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--821e6bbb-9e83-419d-a078-c308b9e52294", "sighting_of_ref": "indicator--b08f4693-478c-45b0-9def-2c98ce8ce8b7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1385ceb9-39f8-47e3-82db-22596336f83d", "sighting_of_ref": "indicator--b08f4693-478c-45b0-9def-2c98ce8ce8b7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4021449-9bd4-4b93-b5cf-710e8ab321ee", "sighting_of_ref": "indicator--c61d9674-5fd7-44cb-8df0-56f991a57e39", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f744c3-e3e2-47b8-8c23-2a52f93599b2", "sighting_of_ref": "indicator--c61d9674-5fd7-44cb-8df0-56f991a57e39", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7ac3f7-950f-40d0-8ae9-0698696f8dde", "sighting_of_ref": "indicator--bfffc9ae-c2d5-4b02-b313-525ec408e851", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1195a074-0680-4fa7-ad4b-330b2b2d0999", "sighting_of_ref": "indicator--4bc4c52d-e98b-4fe4-9eb2-76a83118fe21", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e879223b-1b73-46b2-aefb-0fbc661931d2", "sighting_of_ref": "indicator--fbebae22-0777-4a9a-869e-229972979fb3", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06b9d911-37b7-4961-a94a-b7ddcc94d20f", "sighting_of_ref": "indicator--a742344f-ccbc-483f-8328-7182179152c5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c01fa1-274d-4dd3-8e04-cc78d318c11a", "sighting_of_ref": "indicator--022e210c-004f-47fe-a9f9-d64a68782f65", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7e10eb9-5d5a-4f45-a652-ad6b395793a7", "sighting_of_ref": "indicator--5c7b8d1c-d252-44b2-9237-9b5836520050", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--782b581a-c96f-4371-a8dc-64628ffbf572", "sighting_of_ref": "indicator--4457b2f0-8a1a-4aed-a5c0-2f0da404efd4", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3709c764-1ecc-4d37-80da-d454f6ac5538", "sighting_of_ref": "indicator--de310d81-4643-4509-b1cf-cbaf5b9ca813", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04fff77-41ef-4910-a85f-6663b8d47723", "sighting_of_ref": "indicator--881b3634-1b3c-403b-b543-0db28a5af91a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d24bcb01-a2c8-40b6-9ef5-be3a3d5bdafa", "sighting_of_ref": "indicator--cef49a8f-c101-4c75-ae50-510ee13bfd01", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ce6d04-d340-4c47-9f72-aa37dbc91eb7", "sighting_of_ref": "indicator--cef49a8f-c101-4c75-ae50-510ee13bfd01", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfe955b7-cc3d-4961-aad9-0b3bb471372f", "sighting_of_ref": "indicator--3cdbe243-1736-4567-9e0d-4de5dcdb4818", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99a164d2-8570-4819-a954-b21858ebd899", "sighting_of_ref": "indicator--27e1175d-573b-4671-aa3a-b70ae072a421", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4268d8ed-1e23-49d8-becc-4ac1db409340", "sighting_of_ref": "indicator--9f1a2185-5ebe-40fd-bf4f-1cbb199f4d79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d54221-3336-425b-bfb8-91227e2dbc60", "sighting_of_ref": "indicator--9658d391-de7c-4965-a00f-2189647209d8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28e0da9c-576a-4ff3-a67a-98e26d64a624", "sighting_of_ref": "indicator--1d427e96-4407-42c5-84fa-73d6398f15a8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50976f7e-9c89-45c2-ac34-e14c2e7b7d80", "sighting_of_ref": "indicator--57d8b2bf-81bd-42d5-bd2b-6d27dbd1eb3c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c9f31a-5157-4e37-8ef8-aa1ab2dfa202", "sighting_of_ref": "indicator--c418e644-791b-4f5f-8915-c47f23e55f03", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8366b405-953d-4a8e-8422-8a3e32994fb9", "sighting_of_ref": "indicator--b886ce8c-3816-4eba-a311-29d989b83826", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05183133-0cd9-4a4b-b9e4-e629dffc4d52", "sighting_of_ref": "indicator--d48671c7-ed7c-4363-91d4-5848491d6e5b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a3b934-0a58-4a69-8c86-47c8d215e4c1", "sighting_of_ref": "indicator--d64ecb47-65bc-4884-99e9-3f960f79b259", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e198967-609c-4f1b-a146-266128ad7c36", "sighting_of_ref": "indicator--44aec761-e8c8-4793-b2d5-a74e8c4d7d83", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b292f0f-c6ee-4ab8-afef-c2faa28b60e9", "sighting_of_ref": "indicator--44aec761-e8c8-4793-b2d5-a74e8c4d7d83", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a788c45-e124-4ebd-9177-1e87e050a5f6", "sighting_of_ref": "indicator--1b328b1e-7a88-409f-bfc5-d5716d43bee1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b6c4f3-defb-4d15-aa04-e6cff3dbe23e", "sighting_of_ref": "indicator--1b328b1e-7a88-409f-bfc5-d5716d43bee1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a826b71b-3de7-4185-a16a-d536018190f9", "sighting_of_ref": "indicator--14be7335-003b-40ed-8d7b-4d2897b75d5c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dd3d299-1420-406c-bb7b-a262d3110351", "sighting_of_ref": "indicator--14be7335-003b-40ed-8d7b-4d2897b75d5c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe66d429-d583-49c8-b3e9-7cc9a259862d", "sighting_of_ref": "indicator--9af63748-c051-49fd-8612-91d4222bd84b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbac6ff-86aa-4455-9241-77b8c252b64d", "sighting_of_ref": "indicator--9af63748-c051-49fd-8612-91d4222bd84b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b4feb2-7509-43ad-95f1-0021b403c2ff", "sighting_of_ref": "indicator--a239ea8b-8b1e-466f-be84-8f20f98ae48d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c931c0b-2410-44ac-8a73-14c70000bc64", "sighting_of_ref": "indicator--a239ea8b-8b1e-466f-be84-8f20f98ae48d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b36929-c32a-4d26-bbf9-56fbbb735624", "sighting_of_ref": "indicator--0b2a1a61-5821-4fd2-9dce-777def059402", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d53fdc-4c05-4c78-becb-f657201acb46", "sighting_of_ref": "indicator--0b2a1a61-5821-4fd2-9dce-777def059402", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b277977-32f4-49be-9eeb-247443e37562", "sighting_of_ref": "indicator--b843d2b1-d8cb-48b3-9e79-179ab36cda9b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb085bac-6f16-40ad-99df-46e180da9e05", "sighting_of_ref": "indicator--b843d2b1-d8cb-48b3-9e79-179ab36cda9b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--befb8233-1721-4abd-b0b0-9986b1a3ed6c", "sighting_of_ref": "indicator--ef426f1d-e8b7-4e30-9997-88f7c140d0f0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4db8078-6bc2-46e8-8f90-704cc235e649", "sighting_of_ref": "indicator--ef426f1d-e8b7-4e30-9997-88f7c140d0f0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb38ac7a-8682-4ddd-8155-ec57ce3d6ea9", "sighting_of_ref": "indicator--478ccc43-88b9-474f-9646-39343ee811f3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb73a03b-7ce5-406d-8ff7-29331475d3f8", "sighting_of_ref": "indicator--753062ae-7d64-43c8-85ff-67b2aacf83ee", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c12b367-a298-44fb-86fd-104e1f735d70", "sighting_of_ref": "indicator--d1107cae-2287-4838-a6a3-b346a3a6329f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d6d18d-a9bd-4fae-8819-6e277ca52372", "sighting_of_ref": "indicator--0e7ccccf-2266-4382-89e5-34be7e2a4e0f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfd9158-f57d-4f44-9a80-20e7af609e9b", "sighting_of_ref": "indicator--756710d2-bc93-4b17-a461-82d53d43b407", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f7d30b-6b7b-4b53-ab3e-4412c7d3732e", "sighting_of_ref": "indicator--756710d2-bc93-4b17-a461-82d53d43b407", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2009165-8ccf-4a61-a76d-5b9c3f0a1b54", "sighting_of_ref": "indicator--764a1b78-9219-4ac7-90a2-e3682ee8633d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa65389-b9f5-402c-8fc2-aa0193eadd0e", "sighting_of_ref": "indicator--764a1b78-9219-4ac7-90a2-e3682ee8633d", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff15361-52d5-4d91-ba42-fc1016adea49", "sighting_of_ref": "indicator--423a4671-9685-4423-81e5-71552d478321", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c35960-63d7-4a9c-93ea-501906529d7a", "sighting_of_ref": "indicator--db6114f3-a0f9-41d0-8fbe-5f3a202981af", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa57d2d7-6eb4-42b5-8654-9e95432791a3", "sighting_of_ref": "indicator--c3bcaddf-4d3b-42f1-9ee9-8d973672c39a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4142e0-84f8-44cc-9ee9-babcebb5d12f", "sighting_of_ref": "indicator--1c07c10c-da7f-438b-adcb-a39a7870b5d4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edf85352-b894-4a8e-8947-2b6198e35db3", "sighting_of_ref": "indicator--c55972dd-48b1-4ef3-bfa0-3a58c4474287", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--270b29eb-a3b4-4040-95d5-881c40b396be", "sighting_of_ref": "indicator--9faf37f0-a0ad-446a-8288-ef9612fcf54f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb343e63-d874-48b0-8029-608b4714ac25", "sighting_of_ref": "indicator--619f448a-b0f3-48c3-a363-ec6fc1d0d2b3", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f96d8e-0180-48ca-860d-da73847bd888", "sighting_of_ref": "indicator--619f448a-b0f3-48c3-a363-ec6fc1d0d2b3", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9261c2-d86e-48be-8ed7-17c7f4bba1a5", "sighting_of_ref": "indicator--ea92d99c-ea64-4640-bb1f-ca34e6928d5d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3705970d-5064-427f-ba1d-afff6b2f0ef3", "sighting_of_ref": "indicator--c653ddcf-1cac-4b5d-a470-407f26040c38", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--921419d8-3258-4f27-b390-ac732cc94906", "sighting_of_ref": "indicator--c653ddcf-1cac-4b5d-a470-407f26040c38", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28912a4b-5d93-41f0-b0df-9eae197b6843", "sighting_of_ref": "indicator--16deb694-3c66-4432-95df-49660973718b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6611c695-b804-4889-9133-d2ec4257d6b7", "sighting_of_ref": "indicator--16deb694-3c66-4432-95df-49660973718b", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e406d8-2a75-4278-b1f3-aa67cb86021f", "sighting_of_ref": "indicator--e6bacbbc-5a50-4ecb-a968-e359e103d7b5", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfb81cc-e933-430c-beb4-1bb833de9867", "sighting_of_ref": "indicator--e6bacbbc-5a50-4ecb-a968-e359e103d7b5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d310c4c-b20f-4df6-9aed-723908f51469", "sighting_of_ref": "indicator--b8bd9ba2-4edf-4b80-baca-b7f9fe36e671", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe1cf00-aed2-48d6-86b7-c6e5ba099415", "sighting_of_ref": "indicator--fcc1abfd-051c-4b20-9bce-7089d7eda802", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ed8966-ad38-43c9-97f3-dd6c704a1eef", "sighting_of_ref": "indicator--fcc1abfd-051c-4b20-9bce-7089d7eda802", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ac1cbd-970c-4333-b190-a8337718893b", "sighting_of_ref": "indicator--5528a2a9-c373-49e3-ac93-e69b38aac03a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edacb55f-5587-4b3b-8851-a6e220c37b35", "sighting_of_ref": "indicator--45cb0c52-974a-4b1f-98dd-ad94668127bc", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889c64d3-6e5a-44e5-9cb9-b0d91b5ae981", "sighting_of_ref": "indicator--f31f40c0-87ca-42c9-be01-3b07c85b43be", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e774ae-6a58-4ba2-b445-65c9aa77fe7c", "sighting_of_ref": "indicator--7bad97ae-9658-4b81-bd76-df547f3feaab", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86328ff-aa00-4a1c-9c3c-10d618f75c42", "sighting_of_ref": "indicator--2279642d-b8f5-4419-b35f-f34df3b64db8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c6146f-54a1-477c-9551-49f6949d3a11", "sighting_of_ref": "indicator--0d3cd20e-9384-4728-bfc2-e86abdc515e0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44a6985-1968-4f9d-90ac-8f1ef724a8d1", "sighting_of_ref": "indicator--876f3307-4a67-4643-8c9c-a863fe812053", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc8eb5a-b994-411a-8156-cec8898c22c5", "sighting_of_ref": "indicator--de5242de-307d-4899-a246-1518b60f5353", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--810a240b-41a7-4fee-8404-ddd5e824f3b3", "sighting_of_ref": "indicator--78a45774-c1fd-49f6-beec-3d62c17c50d7", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486bc4eb-ca4c-48dd-a4b3-90a19c7a5cf3", "sighting_of_ref": "indicator--7106de41-8555-47d6-9e13-922ec728fb0a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f422b52-7a95-4022-bf3d-a5ebb7f257ee", "sighting_of_ref": "indicator--7ef0de43-8f92-44da-bca1-8566ea114860", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1aa1148-e8c4-48e0-a521-4388b86aa7f6", "sighting_of_ref": "indicator--7f610338-1123-41fb-98cc-8850d26a7a69", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc444fa-5c1d-4320-9c5d-7cf3259ce644", "sighting_of_ref": "indicator--7f610338-1123-41fb-98cc-8850d26a7a69", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcda8ad6-9d9e-475f-862b-926fce358805", "sighting_of_ref": "indicator--4dba69a0-76cc-4d90-adbf-8d51fbda2764", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59762c1b-f5eb-41ca-8e06-22df5e4da246", "sighting_of_ref": "indicator--4dba69a0-76cc-4d90-adbf-8d51fbda2764", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44de3abd-7c7e-4680-b2de-a140f27897d8", "sighting_of_ref": "indicator--6fd360ea-e27f-4988-a654-78a4124c810f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bce95d-d6c6-4f2d-b2bc-6ab0944bccf5", "sighting_of_ref": "indicator--6fd360ea-e27f-4988-a654-78a4124c810f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079b3789-08f4-4ce9-af50-223611cd12a0", "sighting_of_ref": "indicator--7d270e62-563d-42f5-96d6-f79246c4d2d8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a5e67f-52c1-4c08-8d6d-9568d782080f", "sighting_of_ref": "indicator--347a6907-f0c9-4b18-9349-d708318ff37d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb78ae28-d534-4733-9b3c-133965231a50", "sighting_of_ref": "indicator--7dba552a-9c42-4a33-ac00-5be0f69dfaee", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8309cde-d9da-4e8f-bf61-298a4e1fb302", "sighting_of_ref": "indicator--6b181003-f043-467a-a334-898fa6f4da45", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423892ea-e9bd-461e-8d14-c795bc02fd22", "sighting_of_ref": "indicator--6c52f700-52ac-4a53-8c0e-c323a73ac79e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bf54033-2ad8-4d82-a686-3d8344b33b2b", "sighting_of_ref": "indicator--a43284e8-7163-4bbd-bd89-4a7935b70727", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551e4fc6-fa32-470b-a543-2c28903c4c2c", "sighting_of_ref": "indicator--20eab373-e43a-4b6b-b33a-6f592d819d4e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca9f7dd-5353-4766-88b4-339f29d3f703", "sighting_of_ref": "indicator--6743148b-e264-49d1-92a9-cbd67b63daf4", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b07502-9056-4df8-81d1-6cf4931e1219", "sighting_of_ref": "indicator--2128a544-66e5-4538-b010-b8afd9d19c40", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea5adea-6cc6-4aa6-b924-bcb1193f77ba", "sighting_of_ref": "indicator--2128a544-66e5-4538-b010-b8afd9d19c40", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a1917a-c778-42d8-a8e3-a421d9bb107f", "sighting_of_ref": "indicator--d963b5bc-2e69-43d5-92fc-a03df65c1a41", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b34af3-9522-43b0-a5b2-e7e68ab0a85c", "sighting_of_ref": "indicator--f7c470d4-ff88-4a92-a6e9-246aeb21f67a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a997d8-bcf8-44b4-9b22-1d8ff05ec27e", "sighting_of_ref": "indicator--ff788756-df9d-445e-9b61-907328168291", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6005782-f306-478d-b61f-343386445250", "sighting_of_ref": "indicator--933cca8e-af9b-45b3-9fb0-f34c2f7b5650", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc754f6c-e81f-4bc7-a31d-8515422dd91e", "sighting_of_ref": "indicator--77ab5ec3-ea06-4c2a-bba2-448894223786", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761a94e0-0bd1-4bd1-83be-0ad64fa8f134", "sighting_of_ref": "indicator--8614a09d-5f00-4eca-a180-db99d870d55d", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26068911-f456-4bdb-91ed-39caaea1f5e9", "sighting_of_ref": "indicator--07536821-d818-427e-8ea3-ef5ad59356e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a6a82af-486e-46cc-85cb-a5f0f582478c", "sighting_of_ref": "indicator--ba3c99e0-af5f-4917-87de-f769f7dca1cd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d889c78-6e89-4d78-98d0-e5da53f2feef", "sighting_of_ref": "indicator--ba3c99e0-af5f-4917-87de-f769f7dca1cd", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709b4a05-7d56-4542-8715-3f7eab2ff16a", "sighting_of_ref": "indicator--8e85f43b-ba15-48fe-a417-d59ae63f98ed", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88fc5de-95f1-4e9c-932a-e33eb0e848f3", "sighting_of_ref": "indicator--20dcb6ea-5ea1-4359-b85c-c6f9569a2899", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2925ab24-f792-4e36-82e1-2c69826c92cc", "sighting_of_ref": "indicator--20dcb6ea-5ea1-4359-b85c-c6f9569a2899", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67718b4f-5077-4167-b6fd-7fff46a0e541", "sighting_of_ref": "indicator--a84d4486-0f04-4318-b564-04e4686b2a58", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae9c864a-930c-4813-a4f9-ae71a70ae40d", "sighting_of_ref": "indicator--6eef10cd-6438-479b-ad34-a9c7544fa994", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025763b6-e6cf-4d71-9b92-6b68e6a2c1f7", "sighting_of_ref": "indicator--918e06af-3081-49e2-a373-f7762acd3122", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--207c17f0-ad1f-4721-957e-32fa863dd0f0", "sighting_of_ref": "indicator--a664493c-38b2-4114-a003-5ee1d66720a0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932651ec-e477-4a51-a005-5ce3af7c5f59", "sighting_of_ref": "indicator--a664493c-38b2-4114-a003-5ee1d66720a0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e696c4-a80d-4390-bae7-08164e4be5c2", "sighting_of_ref": "indicator--a664493c-38b2-4114-a003-5ee1d66720a0", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb8d69e-36b5-4102-a7e4-989c60f246e4", "sighting_of_ref": "indicator--6da41d89-b5ca-4127-a408-49890234443a", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f952386-6fb4-42eb-a918-85179bf78b73", "sighting_of_ref": "indicator--6da41d89-b5ca-4127-a408-49890234443a", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb5a9e67-051b-4f07-9be7-a48f204c1651", "sighting_of_ref": "indicator--5704ab55-09eb-43e7-b382-48ef7272344f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4086e3e-e05b-448a-a40c-1dfc6857f941", "sighting_of_ref": "indicator--2b860c92-3915-4b19-a458-71b398a26feb", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebcbb7a-298c-4ed2-bbe0-e78a60786b44", "sighting_of_ref": "indicator--33d4346f-e3a8-4198-9bb3-628b5df55e46", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--300ec72b-8f81-4609-9775-2b18f51e9678", "sighting_of_ref": "indicator--33d4346f-e3a8-4198-9bb3-628b5df55e46", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850f52e1-86a4-4ce3-8295-1e16f0fbb48f", "sighting_of_ref": "indicator--fe4db7b3-9d20-493f-bdf7-85a78eaa9b56", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0197d200-d79c-4842-9ef9-4af39bc171e7", "sighting_of_ref": "indicator--bee5ac1c-60d7-44d9-a0e7-cca81e97c56e", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6d5b1c-4f38-48f9-8423-ea89570e41e0", "sighting_of_ref": "indicator--bee5ac1c-60d7-44d9-a0e7-cca81e97c56e", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268a9e1e-1213-45f6-a5b2-ee62a6f35c97", "sighting_of_ref": "indicator--2da1fdfa-3c9e-4420-94bc-08474c68b8e2", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a171a1df-8835-4150-aec8-906647657b02", "sighting_of_ref": "indicator--b57667e6-6ede-4491-8572-4cad864e4ac1", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c9e2042-f79f-401d-a3e6-70150e299314", "sighting_of_ref": "indicator--b57667e6-6ede-4491-8572-4cad864e4ac1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e0b021-f29b-4bc4-b79a-f99852932398", "sighting_of_ref": "indicator--d7a82a78-24b8-45b5-a4a5-ca4e59d27c18", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4408f2-8444-482b-b5c3-084fa80126e9", "sighting_of_ref": "indicator--d7a82a78-24b8-45b5-a4a5-ca4e59d27c18", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19cb27b-af77-42e1-a189-ae9dfe5a7379", "sighting_of_ref": "indicator--8746f6c4-7610-4b32-864c-45a69b362510", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83b17ca-c7c5-4d5d-81a7-e2bc5739dae0", "sighting_of_ref": "indicator--8746f6c4-7610-4b32-864c-45a69b362510", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73cf91d5-1c56-4d0b-a72f-c45ef9613d33", "sighting_of_ref": "indicator--6bbee2a8-1205-422f-8c4c-1aff40c4439d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63745352-0300-45e4-a11b-22e067866b1c", "sighting_of_ref": "indicator--a909f8e4-d80e-43e1-84ea-e1a06d2d4100", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260c6ef6-e285-4048-aec0-50a690211ea4", "sighting_of_ref": "indicator--df1db174-b2aa-491a-bcb1-398a5354c4f7", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7861c861-3463-46fa-8ad5-69195cd58132", "sighting_of_ref": "indicator--9a6d1860-c8b0-4185-81c2-a54409901448", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f94742c-1f8e-4c61-8859-77a6f2761af2", "sighting_of_ref": "indicator--82533bfe-163f-4d87-9186-3db0c3d3e6bd", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7638778b-b651-4624-91db-addf45e2f45c", "sighting_of_ref": "indicator--45c0e94a-d1cc-4537-ba51-ea18643e2ef5", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a381a5a0-46f1-4d9c-aff4-e485b7c1a463", "sighting_of_ref": "indicator--45c0e94a-d1cc-4537-ba51-ea18643e2ef5", "where_sighted_refs": ["location--c2053441-01d6-43e4-a5e4-1940adbf2e1e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f5df76-a530-4eed-bfdf-fe24cd9b3ce1", "sighting_of_ref": "indicator--980ef835-d139-425a-91e2-97107e7e5db0", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc8dd2c-400f-4cc2-a12a-a2833633a49b", "sighting_of_ref": "indicator--980ef835-d139-425a-91e2-97107e7e5db0", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45adb100-3e72-4262-9652-739023a3f00a", "sighting_of_ref": "indicator--1d9f9e9c-45a5-42c3-ba70-a3c75f8c665c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--992f1408-1077-40ae-8cd3-02b3f24caf06", "sighting_of_ref": "indicator--0f35f3e0-135b-4987-8ba0-3bc0bbac5109", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169405af-afbc-4068-a0e8-ff90a3606210", "sighting_of_ref": "indicator--7a750102-01ad-4cc5-8648-755a02eae148", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a1a543-10ec-42d3-a031-d7e404051f6b", "sighting_of_ref": "indicator--7a750102-01ad-4cc5-8648-755a02eae148", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c4bc82-dcb4-45e4-b7c8-e19ed89b548c", "sighting_of_ref": "indicator--947b389f-3f65-4b3c-8b9b-e17f4922e3d9", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64de5c6f-1bf9-416d-848c-d99d6b179b9b", "sighting_of_ref": "indicator--947b389f-3f65-4b3c-8b9b-e17f4922e3d9", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667229d8-4346-47c7-9b45-d6d664263fe8", "sighting_of_ref": "indicator--60b9277e-0eb6-4f56-91fb-28587ef9e99b", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f7ee55-542c-4bb7-8316-d2219664d908", "sighting_of_ref": "indicator--e9868e02-fafb-4bc0-aff8-efb0dafdd203", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ea53fa3-f191-4473-83f5-b3f74a4cce74", "sighting_of_ref": "indicator--e9868e02-fafb-4bc0-aff8-efb0dafdd203", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8837801-7e97-4a98-9e16-efd96d739f26", "sighting_of_ref": "indicator--d6fb839c-5323-4ae0-ab20-bff75ffac261", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26eaed85-5f05-46b5-9236-39831482d68a", "sighting_of_ref": "indicator--a71c6f17-d51a-4432-970c-7d52e34bc19f", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffd9151-1763-4125-9b87-c6c6ed93573e", "sighting_of_ref": "indicator--08de4983-d52e-4d74-8fb2-82ce69796c79", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef0717b-ba1c-4721-b10d-71ca6e28fcb1", "sighting_of_ref": "indicator--08de4983-d52e-4d74-8fb2-82ce69796c79", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2392f3b-1aad-42fb-9f76-f2692acc6d44", "sighting_of_ref": "indicator--34296d56-e662-4ead-8c40-e1ae6f05508c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26542cf9-6cc7-46d5-91fa-95f935273779", "sighting_of_ref": "indicator--34296d56-e662-4ead-8c40-e1ae6f05508c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012e59b1-d5dc-4b11-a524-e6dc0bf909df", "sighting_of_ref": "indicator--76a0eb0c-be66-482b-8a3b-ff810903e565", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a7e810c-2a50-4f13-bba7-ce09fe50afe4", "sighting_of_ref": "indicator--73f7cc4e-b17a-4bb5-8226-af9254278f6f", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2b21dc2-8add-497f-b72f-09f9bf88511a", "sighting_of_ref": "indicator--d4c2f95d-4ef5-4981-b2df-d090b7091895", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf480dd-3288-42f0-9def-0acfcc97403c", "sighting_of_ref": "indicator--da1ecadc-0481-4fd1-8da1-1553b96e1fab", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9c40bb9-77cc-4447-b7d7-3017d9a31cb2", "sighting_of_ref": "indicator--4c075ea9-5972-4e18-8282-a25b95bd1dd5", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619e6ae1-6459-4e16-8a95-bb660f5b7858", "sighting_of_ref": "indicator--0d5ea0cc-7a49-4832-ba08-b0629a4c87df", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5876fa5d-f9a5-4a0b-a5eb-7e610880f83c", "sighting_of_ref": "indicator--409c64d2-286e-4f58-83a9-50ca9d5132fc", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a297e7c-d479-4aba-8e7b-c24b68fa275d", "sighting_of_ref": "indicator--c613484a-452d-4b66-baaf-4035b7ea73f0", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c973135-8da6-4622-9e76-29ace05aa395", "sighting_of_ref": "indicator--cdb057dc-08a3-4f72-9d8f-eb09948b8831", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f5346c-ea2b-42a9-b32f-eca6e5bbeda2", "sighting_of_ref": "indicator--cdb057dc-08a3-4f72-9d8f-eb09948b8831", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2763e34d-fe31-4d3b-941c-5bbd131aa4de", "sighting_of_ref": "indicator--0b958a7f-dc55-412b-b73d-0167e231f8e8", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c1355c-23b3-426b-87b0-f76724ddd9ab", "sighting_of_ref": "indicator--0b958a7f-dc55-412b-b73d-0167e231f8e8", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c57aaa6-f6d0-4bc7-bc33-7433584ccf0a", "sighting_of_ref": "indicator--92dd469e-5006-49c0-8df2-e71e1631feaf", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a36fc7-0698-4d8b-85c4-1eadeb52c0c6", "sighting_of_ref": "indicator--92dd469e-5006-49c0-8df2-e71e1631feaf", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8865aba4-6ec5-4258-8edb-0e396f4480eb", "sighting_of_ref": "indicator--7707779b-29dd-4fbd-9180-ea65a5dc5452", "where_sighted_refs": ["location--2a5ed70b-4f03-41de-9610-2459ab2b99a0"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7759a7c9-ce0f-4430-bb37-dab848c5df14", "sighting_of_ref": "indicator--68c9a0fa-c87b-4603-809d-dabe184e1f6c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb2beb92-6892-4ba0-9c72-5fb666b61e17", "sighting_of_ref": "indicator--4881cc13-1b65-46cb-9b04-6d2dd81ed4c8", "where_sighted_refs": ["location--440620de-a262-41ea-aa6f-c25bc972103e"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22e550c-b9ef-4609-832c-49ea3cf7162e", "sighting_of_ref": "indicator--d06242a7-6802-4bcd-8814-1d9cccae7ef1", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2f36bc-9129-477e-a0f3-076bb37d2795", "sighting_of_ref": "indicator--35c04ed5-bd08-4f36-9e4d-ff3fb6d24c47", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5e27a0-b4ee-4df9-b3e4-766e2a88f68a", "sighting_of_ref": "indicator--eddb61c6-9cb6-4c17-864f-fa7438ed8a2c", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a900958-5292-4345-876f-3544da62cc52", "sighting_of_ref": "indicator--eddb61c6-9cb6-4c17-864f-fa7438ed8a2c", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e863295b-04fc-4e65-b645-cd549166c30c", "sighting_of_ref": "indicator--eff32313-4b5a-4a3f-ba22-f012793030ff", "where_sighted_refs": ["location--3564de80-bd62-4201-a89d-e0ec7aadad03"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7a0a992-39b6-4d07-8543-5af42ac81669", "sighting_of_ref": "indicator--eff32313-4b5a-4a3f-ba22-f012793030ff", "where_sighted_refs": ["location--f6a38850-6588-428e-ab59-fe61ce21eafe"], "first_seen": "2026-05-31T00:00:00.000Z", "last_seen": "2026-05-31T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--e61dcbaa-3142-4b1b-ab86-0ec0a76d19c8", "name": "Threat Report for 2026-05-31", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-06-01T11:00:01.711Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--2a5ed70b-4f03-41de-9610-2459ab2b99a0", "location--440620de-a262-41ea-aa6f-c25bc972103e", "location--3564de80-bd62-4201-a89d-e0ec7aadad03", "location--f6a38850-6588-428e-ab59-fe61ce21eafe", "location--c2053441-01d6-43e4-a5e4-1940adbf2e1e", "infrastructure--4cf152f7-83b5-475c-9868-4fdb90a2762c", "infrastructure--f9a7aded-cd85-4264-8f1a-af1623b67161", "relationship--d6891977-5acc-4ad9-a4a4-04dd80fd01d0", "infrastructure--d6b8ced1-aa1f-4282-af91-f1cb1240e31f", "relationship--7bbc72dc-634a-444a-b79b-f240d638f34f", "infrastructure--f3c3ad64-d81a-4e33-be5a-e9e6e52c3c06", "infrastructure--56f6fc68-e9f0-45fe-af7d-72991a87efa5", "relationship--1d0c2a29-fd5a-4471-81fc-4b4a6fc36e87", "infrastructure--9d573367-bd6b-4596-848b-30ba64d2dbb5", "relationship--bb1a25ad-a87e-473b-8637-0d2ff54686f9", "infrastructure--bd11a6c3-492f-43df-ab39-bff1d4661b23", "relationship--59e275ba-75c7-4d2e-b93a-880183b891d6", "vulnerability--0aa844a7-7234-4786-8181-cd1e7ec582c2", "vulnerability--81e98968-d1ba-4f74-8fe3-4f81225c66bd", "vulnerability--668dbde8-32b2-46d1-9fb2-5cf4c09d4e99", "vulnerability--a18ddcd4-c910-49c7-b394-de5f3e1b30c9", "vulnerability--4f3d5d6a-75bb-46c0-b417-b174ec310a1a", "indicator--d7e887bc-3d59-4b75-ac07-94368ccceba5", "indicator--06481165-f1f3-4292-a8fe-eee36f601db1", "indicator--8432d565-2752-4373-8219-301b0d1f3b57", "indicator--ea2e38f6-f2c9-48db-b7b4-c55b8da57865", "indicator--8658166e-9ef1-4668-a263-d23b0aa4f30e", "indicator--b04002f9-a607-4f4c-b3d9-b094d5b7c28c", "indicator--a9ceabee-4742-4bcd-93d1-823021b48cc2", "indicator--8067d75f-7196-4b50-9a38-c6166f635c22", "indicator--a92e43e1-492d-4c0f-9dda-a97d46a4ee04", "indicator--d21b475a-00a2-463e-8cbb-6e331b9e27ca", "indicator--274d857f-5cdb-487a-a76c-6c5361f66841", "indicator--48abeb83-b9e2-4e62-9f0a-4874c8220db1", "indicator--e3a0c663-b664-463d-889a-48c380aac9ec", "indicator--8092e951-47e1-4b04-a10d-7a014d4c1285", "indicator--1daf11ad-123b-48f7-91c7-0e21563c365a", "indicator--bfb86cf1-6fb0-4e81-ac83-8b9b5918994f", "indicator--a7d60cb9-3597-4572-8d50-5001f5a40f4e", "indicator--3b8f01e0-db27-4948-b94f-33227b386e26", "indicator--c05a6296-842a-4134-aef3-c5230933f015", "indicator--c981e85a-388d-4ba8-bfa2-0822d8fc1d37", "indicator--98fc4052-acd4-438d-8bce-df3b8700d1c6", "indicator--1a93f4fa-baee-47cc-9b65-0671f78ba0fb", "indicator--faa9cda0-3cae-489c-943f-5d7b811a2af1", "indicator--1ee7c798-579d-4c45-8ddd-9520be0aa65c", "indicator--28072a6a-c0ff-4d92-93e1-ff1cd3a8d28d", "indicator--9230a73f-f601-4968-ad98-e9b1183d8209", "indicator--6c346bb5-cefe-418b-80da-f07d4f3a5a7f", "indicator--80e9b084-12a2-42a9-9b0e-d53409aaf537", "indicator--d49da95e-fab1-4f41-ad07-7f672d779f64", "indicator--a0949220-34eb-40cf-b0b7-179d5e31ec72", "indicator--c052bb91-3ce5-46ec-b6ef-ba231ab345fc", "indicator--cb303496-ce54-4d53-bb34-63362758b4a6", "indicator--e3ab2fe9-7268-4c5e-b288-58390b58429c", "indicator--53af6808-fcf0-49b1-933a-13dd06e1d0cc", "indicator--027886fc-7bb3-4071-8292-400d877aee5b", "indicator--52aa3f83-2776-4f6e-86a3-de6b4d70d9ac", "indicator--2793c356-2803-4f04-a63d-c55c1901a116", "indicator--eb9afbc2-9c45-4838-9cce-0e7607aae7c0", "indicator--a1dd34e0-c49c-4f53-8d08-fa2a710da2ef", "indicator--e4796d08-a471-40a1-8f4c-8d92f9559d90", "indicator--e13b788e-3482-4fe5-8661-276daf518ac8", "indicator--4e4cdaea-d1b4-4091-9f77-0509702e43b3", "indicator--e2e18c06-c72f-4844-a526-65e74bb0e625", "indicator--f80aaafa-0612-4225-94eb-a6ba414502c3", "indicator--9a030e58-561a-41c6-88a1-b28c3bf50da7", "indicator--1329e365-e6ab-4794-8e24-877c789f4119", "indicator--08c12139-c589-400e-a618-1f6bb1aca462", "indicator--499bec74-2089-48ea-9044-b97325004e19", "indicator--70eb7ec0-8b3a-48c4-89a4-70e07b913bda", "indicator--080c156a-da72-489d-95ef-a96157b1de8d", "indicator--075ce14a-110c-4675-aaa4-08e4ec4dc742", "indicator--5d3e04cf-b3b3-4d3b-8846-f4d21580310f", "indicator--0f9d7caa-78e9-4832-91c2-f734c23acde4", "indicator--99f988b4-789f-4204-85c2-531a64dc8e5a", "indicator--b0e1ae7f-7e90-4842-8e79-5b3962946eb3", "indicator--f61b3a3c-35ef-476f-a24d-e691424506e3", "indicator--64dd8d7a-3b76-4458-aa4f-82a5819deb99", "indicator--cf400bb5-45cb-405c-9b31-eb23206d7898", "indicator--0c3934cd-852d-46c8-8785-c7cb266e37a2", "indicator--43280a9d-fac4-4217-a3de-881857215d08", "indicator--673074a7-4aea-44fb-9a10-e93b107d899c", "indicator--c2e75dc3-c010-42e6-8810-3d84ef76f710", "indicator--d670d6bf-025f-47a5-9f7c-a644be852e80", "indicator--9bfc65a9-b225-4630-830d-a25794c5b601", "indicator--b09a5f3d-18a4-45ce-ba85-3d1874f59f9c", "indicator--4d8cc1eb-e272-43bf-bf37-4abc4dc389f9", "indicator--77e31bad-b010-4d6c-85a4-d9529e59f46a", "indicator--c7c24538-bd35-4891-aa1e-32b2b0576dd5", "indicator--4612e347-0237-41cc-9644-d00f979bb958", "indicator--103554e7-df2a-4f92-b2a4-7753e8e7fc86", "indicator--1dbab7f7-ce3f-44af-bc40-dfa9cf949a17", "indicator--f907742c-38bb-45d3-8907-56fd228b5d91", "indicator--26964680-e670-496d-bba0-5b2354248f62", "indicator--38b7f822-4e17-4113-93fe-3eab42dafcf7", "indicator--be1e36d8-0753-4ccf-9f1a-42fd44b81a8f", "indicator--19759a34-3768-4cd4-a701-7febe84dc386", "indicator--1190c37c-21f3-4810-b1db-b1b0b0afaa76", "indicator--a3c81d6d-c8f7-4ea7-a2ec-f76713c87f3a", "indicator--5409547f-c553-47e7-9da0-ec420cc5e43e", "indicator--1c46713d-35ac-410a-a73d-be908743df65", "indicator--e6f1c2fc-d925-43bf-8820-4613ca51bfbd", "indicator--40b4ac92-348d-487a-9849-a10921f9fdeb", "indicator--d2fc0d10-3551-4a1f-8af8-7a750c799f4f", "indicator--0a8b3419-92b7-4e18-b0c0-19ca9909c12d", "indicator--8b3fb69a-818a-40fe-bfd5-f375d814f336", "indicator--1e448767-1d7c-4836-9151-c601dbfce8b5", "indicator--0bb62b43-799c-4a6c-a096-a3fa2abdc12e", "indicator--a0741d50-55d5-434c-ba84-55c9df56b628", "indicator--0bc1ecb6-c5c5-4baf-838c-ff468b478131", "indicator--3ae591c4-a9a5-4cdc-b82f-1b3fb87fa689", "indicator--2fb9245c-3de4-43f5-bc18-cf3a3a80b708", "indicator--4a92a6a9-8b95-4b93-8162-bc8b45448e7e", "indicator--9f24d3e2-d9a7-4ccc-800e-bb40219cf348", "indicator--f6267264-6909-4d15-b71d-43cb3b46641b", "indicator--2e1c8ecd-8eb8-42c6-b3e9-707d853b673b", "indicator--1ecb4ba6-fa7e-4077-af0a-ee8eee2102c6", "indicator--bfdad66a-8a8d-419b-8832-0a94d58774e1", "indicator--4e95d849-497c-461a-9e67-dd3c83561199", "indicator--f9ef2b87-457f-4d8b-ac37-3fffd94e011d", "indicator--2955b2f6-27dd-4ea3-b072-e8f3a98008ac", "indicator--72d49895-b352-466c-a20d-013e175c4750", "indicator--a4c40912-4c26-4d2b-aaf0-262158245d1d", "indicator--7e8a93dc-39f8-48e3-b835-d520b6682f17", "indicator--aec53890-045b-4cf5-9dee-c1fb441aef0a", "indicator--4d9b084f-7d92-4b6a-aa92-05337d592570", "indicator--e067b958-46b0-448f-9c69-4563199b3001", "indicator--f2ab2e4a-14f5-4915-9109-03d505da21ef", "indicator--2e3542c0-d824-4404-a951-025d4f6fc0c0", "indicator--fded9656-eb5d-445c-8020-3313b961ef7f", "indicator--8125b5bf-7bfb-460c-a337-293ad19583fe", "indicator--91f8c1f4-102b-449c-937f-e79f3a7cb655", "indicator--a294b95d-d45e-4ecd-a604-5ff8020e4b44", "indicator--84ec033c-9178-4a47-bde9-b7d3834c11f3", "indicator--6731fe40-76a8-4615-b840-23da4e2f83ed", "indicator--823a45a1-a9c6-4d4f-a8d6-ae4526b44bc9", "indicator--2d4a281a-60b0-46f9-8475-0b72d56a7847", "indicator--325da245-fbc5-45db-bbfb-864b9db0d10e", "indicator--99296a9f-7cf8-4159-b718-07d97491a08e", "indicator--cd076aec-3fff-4109-ba49-5c7a64bfeefc", "indicator--e25dfa31-cc93-40d2-8788-3c2a0d61d1cb", "indicator--fe37c17b-6907-4714-88e4-ae06921ead4e", "indicator--cb395b30-e0cd-4aef-b3e0-db48686417d8", "indicator--6e488f31-4b24-41cf-bc14-71747373dd0e", "indicator--dbb91a5b-8057-4684-bf3e-4be187a4a45a", "indicator--4f131f49-cca7-415c-8c69-3b5696598218", "indicator--62450097-6a4a-4cd6-bc72-728db5cc9662", "indicator--b53e779c-d3b1-4ca7-8986-3e123348617d", "indicator--ef69eedd-4e00-47b9-ad2e-2200a39baf8c", "indicator--fd3ea479-d6e8-4ad2-a8c7-449994c1bab2", "indicator--85873bdf-3a35-41ca-a348-a6e7395f99d6", "indicator--342eb1b2-b0a2-4399-819f-ec2a4889b92e", "indicator--cd240ba4-694d-4205-935f-68c1e61df971", "indicator--b7a938ee-0edb-4e74-8b86-f5d294ce579a", "indicator--eb32f36e-ce11-473c-9859-f0c09b57cf53", "indicator--a465125e-bda1-4e7a-9d07-172603102676", "indicator--33c5f642-ec9e-4a26-9f86-c320443ecf05", "indicator--530b7eda-4bfb-4941-bea0-e1063a7f41c0", "indicator--4cec9d48-9026-4841-815e-ea24edb70862", "indicator--7449d89c-a555-4ecf-b8c8-f314247d4ea6", "indicator--8d8d54ab-22bd-486b-80f1-bed43d5f4963", "indicator--c2537db1-5c70-4d55-91ba-5bc9e82945dc", "indicator--0a7d123e-f79d-4565-8f60-cb054888bda3", "indicator--60f4737f-746d-43f5-b4ef-5712a803a25e", "indicator--3c1cd006-bdee-4469-9056-440a2eabf740", "indicator--57c2514e-bb42-4191-9478-c862b1e98900", "indicator--12917294-ece4-4359-9359-76850c31fe58", "indicator--9434df9d-d211-4757-8cd2-2cc3ac0d00dd", "indicator--e56e9586-7329-4a5b-8937-c4b89bcba275", "indicator--dec562b6-a6f7-4e7d-b697-d4b4122d9c8b", "indicator--52c54d3b-0ca5-460b-a6ed-2fbab6086d6f", "indicator--978768fb-ccf5-4685-9fde-44d091d4bc94", "indicator--3885cf02-fd8e-425d-addf-3b3a3bb71f0b", "indicator--c414c9d1-15cd-4671-99ff-a1f442ade2c5", "indicator--22fabc47-8b5a-4b43-a542-49d41dd011ae", "indicator--f72793bd-fa37-420a-845c-dec1fff09c70", "indicator--78a90ee2-acc9-49e8-9441-2ec45fd6a82a", "indicator--f2781c6f-2fa8-4b1d-bfca-fe388ce39692", "indicator--5d47f730-493e-4a48-89ac-7adec8e1156c", "indicator--7cfed725-2eec-456d-bf73-6ffd4f513f9e", "indicator--438ad4cf-1630-405d-a3d6-085543ecc932", "indicator--90e5eef7-bb0e-4594-8390-1987b87d8905", "indicator--ded34da7-c5d2-4a82-9e25-cc8f956a1004", "indicator--67cf45fa-754c-4986-b50a-fc9f476c2dff", "indicator--1b112763-10bc-48be-b946-c8ef664c5056", "indicator--3f90af0c-829d-4850-8341-377842705afd", "indicator--fad870e7-d7d1-45ff-8047-0a129a26331a", "indicator--8a34acc3-36e4-42e9-9d40-a4604348d4d6", "indicator--cf528ef4-d572-4c1b-bb4b-7c994956a0db", "indicator--a6eedb2d-2b23-4643-b41f-938beac0359f", "indicator--de4d5dbc-e760-445f-b021-3b7f39b29f71", "indicator--87f065e4-b3a7-4277-9c21-8ebf63147a2c", "indicator--837d7e0d-e4d3-4087-b828-387e5e0167f6", "indicator--ede827a4-c2e2-4adb-b352-af0d6c958b23", "indicator--653e449c-7e98-42be-9a79-5fd42aae8a0f", "indicator--9110b025-da95-455c-9185-505f31bbba35", "indicator--867812bd-0255-473f-9f86-917053e03b46", "indicator--a095b92d-2325-44a8-ba70-524428ce4df4", "indicator--6d8b3a0f-3ea4-4bf4-bab8-bf86b56f6aeb", "indicator--04922e96-0454-4423-ae9e-ac70e4168af4", "indicator--a17ee3ab-b88a-4cde-9a52-629b1757b5b3", "indicator--df51a4bb-081d-427a-88e9-c63321d21ba6", "indicator--821d14e0-cabf-430c-9359-60e5e799b37d", "indicator--058f086d-0539-4cc9-95d2-a95bb722263f", "indicator--630d5679-e68b-4f0b-ab4a-671b7f5ab132", "indicator--adda49b7-549a-4bc2-9db3-601e0eb614a6", "indicator--2f2607a8-de96-4c80-9a9f-62ea28abb594", "indicator--bd5db3ba-6042-4196-ac05-28c0baef5ffb", "indicator--7e39662e-faff-45c9-a146-e9c4929810e6", "indicator--daf33ad3-f9ee-4273-84fc-75d56d279ef8", "indicator--27b2ad8d-f597-490b-a3b1-6a83a1c7c438", "indicator--f09ed3cd-c21e-4633-aff7-cd1acaf7969c", "indicator--d011e24e-732f-4973-a967-ceb6d26bcec2", "indicator--a3a920a6-961a-4b9d-b588-be7f95f55a50", "indicator--8ad4ca50-3d05-4d8c-9df0-b8cb0c59e309", "indicator--857ddc85-ac0e-40c6-9183-1137c6f92659", "indicator--2bb41144-8594-4b4c-b200-a66a10207ef8", "indicator--bfa6ca0a-2a51-43a3-b328-8077c6d3ef6b", "indicator--276beac5-f64e-4d96-83ef-497fbc8e5296", "indicator--3dff3ec5-11c5-4f94-9c99-a46e9f15bcc5", "indicator--b08b1f64-0452-43e5-ba5a-a29138b0a793", "indicator--119d2f1b-c395-4436-8fc6-290717512a6b", "indicator--0bb402c6-f6e8-4bbe-b911-c1d93d8d96a1", "indicator--c447d7d7-502c-4f7a-8b96-8b41b5533175", "indicator--f0ee4419-fb5b-4124-9a5c-04ab45b2fdcf", "indicator--5140981f-0b37-408a-96f0-68d2ab68c6b7", "indicator--7808e279-c86c-489b-bf8a-a212eb9f590d", "indicator--604d5035-eea6-4d94-bf75-6db12694a351", "indicator--cc9641b6-db34-45f1-b74c-f6aa9ede1a9f", "indicator--c7c38518-c1aa-4a48-b475-58fd6410f9a5", "indicator--12a6edae-a520-4ac3-9a3f-1857f9d8e08b", "indicator--ad1b5a0a-f667-41c4-9b8e-b8fe7ac93647", "indicator--88e08e75-1df6-40cb-b1c7-d7675f968829", "indicator--b05a51ae-ce69-4693-920f-9153c7fe2fd6", "indicator--2aac9a34-4fb1-448f-8400-8c1949dd2d6b", "indicator--11fd27ce-b6bd-479f-ae61-8a71aac54314", "indicator--82c0f3b8-1f91-4f81-8f25-1ed5840783ca", "indicator--fde68314-f465-465b-bfdc-57e41fc39555", "indicator--31663a31-2dd8-4d45-8fbf-f2fa066239fd", "indicator--938921f9-46e8-4842-832b-4b60887301d5", "indicator--7eb6ae8c-1a9b-4bcf-92f9-c15ede39ccbd", "indicator--ff0a1b0c-457e-4ff0-a781-680a241762d9", "indicator--a4abb208-a1dd-4acd-a8b9-99924d4e41ed", "indicator--632b5a34-a384-4205-a7a4-f01274464fd6", "indicator--f050fb4a-9e11-4b30-af87-9207ae06fffb", "indicator--d6e46913-b52d-4b42-a4a5-a152e5231ca6", "indicator--f95dff7b-f77d-4df2-820b-b48c1e56da4b", "indicator--4a93ab50-dcac-44db-bf45-bd1a6f5b02a9", "indicator--2411f8fb-cf2b-41d1-944a-2469ad24c5b6", "indicator--d109c7a2-226f-4e20-90ec-2a9e82767272", "indicator--0f3241d6-4f13-43b3-b796-610760c99dd5", "indicator--14d46da3-2fba-47a6-9b99-8902c82d0aed", "indicator--4a5e98a6-eee0-48f1-b1ce-1d05f776557a", "indicator--530ae5f5-c022-4df0-8c0e-0d1dd267ab1d", "indicator--e602afa4-c4f9-4ac3-8642-6a2ab1b6d217", "indicator--89092dcc-27ff-4a7d-94cc-e6888e3f4736", "indicator--c33787cf-da37-4d31-9862-6b841e8ab736", "indicator--c715f282-7cd7-430e-a4ec-70dc749d95e5", "indicator--16ffd352-9b4c-4729-862c-dd830bfec4a6", "indicator--950bec32-2f3d-4a08-b7d4-da4d4f812ab2", "indicator--ce207394-e76a-4f21-8125-4ef7a396bbf9", "indicator--a4a09d52-4d2f-4ff3-8cfa-25d355187420", "indicator--2b0c7dba-d73c-404f-838d-01ea3436d1cc", "indicator--2ffa3c2b-3532-4a7d-8f3d-8e9d27ff0e71", "indicator--ff116b2f-9e8a-4ffa-a35b-bdbb78aa5683", "indicator--099704ca-a4de-404b-a280-41fc1bac4728", "indicator--27de0cd0-df9f-41c9-8900-8f88963948f3", "indicator--bbd19fec-89e0-4e42-8e46-6524270e0b17", "indicator--b6ff0af2-c523-4157-b808-d948b7239e64", "indicator--e70eaa14-4b40-4e49-a0f6-4c69c8d21244", "indicator--14e4f680-db9c-4241-865b-377d0efc0ad7", "indicator--203ad79d-4192-42cd-a1a7-835054ef5e81", "indicator--765cc304-e941-4c0d-a754-4cb18dae6b47", "indicator--7d7e4cc3-0780-4546-a222-42b3c66facbe", "indicator--3e6f8430-c223-4c52-ac44-e05871435b65", "indicator--902dc205-92db-4ad6-9fb6-126a6afabeeb", "indicator--2519ed19-7d88-422c-89b1-dfe5dd3e2583", "indicator--68789631-5c0e-47e9-8402-14e5db02fcf5", "indicator--c2f685cb-7d6d-4cc4-9484-fcfe69fce2cb", "indicator--a9fff32c-552b-426c-a00e-35da62e91820", "indicator--8e5f2ff5-50ed-49c3-bcf6-5f2576441afb", "indicator--cb28b38e-337d-488b-8f54-a96e0eebabfd", "indicator--3aa1995d-d70d-45ba-8f37-ac73f1a98b9b", "indicator--4ac84416-7693-40a1-be63-23c42bd4fe49", "indicator--f89bb150-3c6c-4127-9459-c43ab2d3d88d", "indicator--46aa19cb-85ee-4571-9abe-807d2da27a3b", "indicator--4fe6c036-3102-4576-92f9-5e30ce877576", "indicator--79bce796-7587-4643-a317-41c42b6b7ec5", "indicator--f2f528d0-cd10-475f-8e23-41d132a3cec1", "indicator--8339e62b-3d53-4576-bd70-7a9ab037bfe3", "indicator--4a623110-b7b2-4a4c-8c8f-b0a610f7960a", "indicator--66292da6-b463-4c8e-9a0f-e9bf5d309bb0", "indicator--819c52ee-220c-4c97-96dc-726d1fb051c7", "indicator--d6a3c145-9ee0-4c77-837e-8b1015826400", "indicator--559407c3-6a62-445c-8bdf-48320619ff09", "indicator--e2bfb7ac-48aa-4a14-8b69-e532adf0de1a", "indicator--dcbb08c0-2ab6-4964-9581-cd1a60b9eac1", "indicator--597d533c-db7e-458a-989e-e8510faa4148", "indicator--5ceeef8a-d011-4ba7-a284-1cb44b97387b", "indicator--49d7a135-74e5-4d41-98e2-2a2d0fe47dd4", "indicator--a4672de1-bda3-4442-919d-bb19188654aa", "indicator--da4bef2f-dba7-4c69-8b7e-c4930d5461da", "indicator--c805fba3-ef85-4bb7-b838-bd8743d854e8", "indicator--992c506a-07b5-48f7-b074-d6a5cc99b99c", "indicator--a8a3d8bc-c7fe-439c-81a8-47a8402e869e", "indicator--311adaa7-3d9e-4b9d-9c43-46952cb0c531", "indicator--f7951713-e6ea-4829-91ec-207812b242be", "indicator--65e06012-37b2-48be-a6d8-709d3c472c7d", "indicator--00b12cd3-33a6-4af2-9c81-4979c7e7f457", "indicator--a15f946e-f53c-4444-b4bc-c921f3a14496", "indicator--5b4b7034-d8db-4c96-92d4-632d938e0131", "indicator--369fa7d1-c9a9-47cb-93bc-3377cfa51427", "indicator--e66b8518-6de7-4ce9-8f9c-922807f6e569", "indicator--ed3ef180-0297-4405-84b7-2d9126f85e60", "indicator--0309f242-bfc0-42f4-a080-b4d1587294ca", "indicator--e021630a-bd71-42ad-a276-c5a6f07f7082", "indicator--1263834e-98d2-4cff-8c82-1032ec4f8c49", "indicator--dc9001cf-282f-4cf7-91a3-005d93592f26", "indicator--de7ef5f8-f284-4e80-ab36-68b9dc1095de", "indicator--38c0f54b-ac18-478f-8f29-705d5f40fa49", "indicator--db6745b8-cef2-4103-bb43-68d98f9f280f", "indicator--0c168eb2-c208-4548-ba22-a6516e6f6ec1", "indicator--cb01112d-19de-4a5c-b193-7f37acdc93c2", "indicator--b3104544-f30a-45ea-8037-1a1f5a21e170", "indicator--3c45e99b-f064-4cbc-a175-1f8e87a4b031", "indicator--a37a9437-8ec2-4673-b633-71ae1025726f", "indicator--b147ed54-406e-41ee-9244-3440156ce684", "indicator--c7285282-f00c-471a-9424-50ab41a06313", "indicator--ab895463-be31-4f9d-9762-8798ff1d4cfc", "indicator--9113043e-53d2-4acc-aa63-d57d816d14b7", "indicator--55e2dd2d-9b99-4da2-978b-fcb846e4dd88", "indicator--3fb8ec60-c43e-4eac-818d-f420edef9c46", "indicator--a424a6b7-44e7-4cbb-bdb9-559db3eae6de", "indicator--ec856c04-eb9e-40b2-b35d-2eeb57f9c205", "indicator--326d84df-ade4-44bd-8828-d0fdba600ee2", "indicator--101b1306-574d-456f-a762-80cb2a5026d7", "indicator--10b282dc-10c8-4579-8381-16790e36a7fb", "indicator--b2d0977f-fa9d-4f13-bd60-123f1a9ee0fd", "indicator--b947d2a1-4e54-4171-ba47-91a7a8c0aa3b", "indicator--caccaff2-2b14-427e-bf15-64bc80c99948", "indicator--b15aa979-940c-4a55-9ca5-eb673abab392", "indicator--c9d8ba04-b6ad-4573-86db-fccab21da037", "indicator--6d215b3c-093a-481b-b49c-89b032bdbabf", "indicator--53c49961-e2fa-4ed9-80d8-758c21b714e0", "indicator--bac1a2f6-26f0-473c-b41a-1147a9b9c035", "indicator--2401beab-c498-4227-83ea-2d8199448c23", "indicator--bb157031-7c17-406c-a183-becd490395f0", "indicator--429f7043-8b3b-48db-9d13-6e6f3907774e", "indicator--07e4769a-ac17-46aa-8cea-96bcc6057918", "indicator--948ccba4-23e8-48ea-8e48-f797bead1b83", "indicator--13e2bcde-c7de-40d2-8138-1106990c1f62", "indicator--8beed4cd-fb95-4284-b407-901a3aae95fd", "indicator--47c7f67e-3907-4a1c-82d6-4f335498f8ad", "indicator--025647bd-926a-4958-b4ee-fa8bfd20621f", "indicator--0eaae2fa-7631-4f94-9c40-2bf7d82c8e28", "indicator--bb752dd5-02d9-41ca-b66b-9bd2d7b79f32", "indicator--ba677d20-7ffb-4926-98ce-09170a7d5ba7", "indicator--51ed80db-241f-483f-9343-98dc17801ce2", "indicator--39356118-3734-4fba-9992-04a229dcabe6", "indicator--b91f6f4d-2545-41da-b34d-9c254926cd60", "indicator--2f15538e-e12c-4090-8e46-fc2b45eacb56", "indicator--edb8bc57-ea45-4cfa-9a5c-c87acfc03b21", "indicator--f51aea16-93bf-474d-9a73-d141a35d1ee2", "indicator--df82e0ee-42ef-4e20-9f03-e3f1535e5abb", "indicator--8bab4706-4d85-4aa8-bf6f-390256ab88e5", "indicator--6fc05227-8fd6-4a27-b6b5-ad985f4bafbc", "indicator--9ba3e3b3-b248-481d-ab23-7f2debedbbe4", "indicator--721e4ffe-50eb-40e1-90e2-b1668a4cdd7f", "indicator--ca51ab65-d455-47b3-8cec-fcef281d5fa5", "indicator--59777490-2fde-4df1-a985-a1f847593c47", "indicator--c159fa47-8527-4417-be5a-8949850f4b72", "indicator--7d131340-2ebc-4bbc-9ce9-e349007eb8d9", "indicator--60c6ee34-3a57-4c9c-9a08-171ed8bcbbdd", "indicator--b06d5e72-d5ee-45ca-9876-531f218db5e9", "indicator--2194ae68-1ee6-424c-9199-3b0993d6bf27", "indicator--39154e7f-9776-432c-9801-3d1a845775ac", "indicator--cfc86202-4c94-4483-8be6-2f7aa8483134", "indicator--18452f93-b108-4d44-b2d2-eaba8d7c2c8f", "indicator--29a211b4-a795-4138-99b5-69e62b7e3c67", "indicator--8a549659-1bad-4934-aa22-fbe05e469873", "indicator--ab158010-aaae-45cb-b2b3-152d9860c1a1", "indicator--92c91e39-c7e3-47a3-8289-314d1ab49d9a", "indicator--e87a6f9e-6378-42f6-9e86-a8a9204bf4cc", "indicator--b9f2362d-62db-454d-bdbf-8f398ddbec79", "indicator--ce7f9a30-d385-41a8-aac2-21f55f49200e", "indicator--a7b690e4-f5b4-4ce0-a1cc-2e2a074b5eb8", "indicator--69a7541d-6d30-45ea-b474-01acff3016c5", "indicator--0fc0ee1e-b924-4681-8f12-e5f9b5406441", "indicator--d6c85318-a7ed-4cdd-ba15-3ad2ec0ee581", "indicator--516c7f4d-6f20-45a8-acdd-26fd7c82b7d0", "indicator--4563e1f1-ad7e-4679-864c-271c92494a40", "indicator--fada144d-d916-4605-a1f7-f6453a432679", "indicator--713e36e7-d382-4195-881e-06486c7ed5fd", "indicator--602372bd-8fa4-498b-b415-4a53d8f3057e", "indicator--575ffc76-5646-4979-ac4f-c8433fe8373e", "indicator--4098de28-2ff6-4b63-936e-d759ec15a4db", "indicator--7e661153-e98c-426d-bf64-48f06751d8fd", "indicator--f7a49f50-0978-4000-b58f-7641008a4031", "indicator--f650f0c7-4dcb-4085-a4db-1e71166762e9", "indicator--027daccf-7e0c-4251-acc9-5206cae1d596", "indicator--816996cd-0e75-4f99-9383-e71bb9d8419c", "indicator--3c89f857-4e4b-4780-99fb-a205530abdb6", "indicator--ce4d756a-4fc2-43c9-aa30-488f47864aa8", "indicator--68ad5e39-7618-4dda-9994-697e2904b68d", "indicator--1183892a-8ff9-415e-86b3-aacbb1fb39f2", "indicator--fb615d46-8e11-48aa-aeb2-80e16b4c5075", "indicator--acc19484-af66-4acb-b7c7-1e5f3c5742f4", "indicator--0781e157-8272-4a07-b37b-c3021578f5a7", "indicator--32c1fe45-64f1-4896-be17-337552fe961a", "indicator--57df3ec6-b603-4e58-aa2b-def2862ee89b", "indicator--cb9c4a86-7f92-40d9-902e-90fc5796c934", "indicator--78131cbb-e5ea-41dd-a61e-92b856e71216", "indicator--ae4e70d1-d042-45b0-b9e0-17877d9b4de7", "indicator--2e78973c-f947-4c26-a6b7-be3bcf8c5879", "indicator--57e91780-082d-4eb1-a7c3-acf555a245df", "indicator--8bfd7968-e00b-454f-af27-67e6837e8b74", "indicator--39b402f5-9eaa-424a-babf-6b9df87aecd7", "indicator--aca4919e-07af-4301-96ee-bafb0284716f", "indicator--4864287c-3fd7-4d13-b876-a3b98dae9719", "indicator--c627818d-16bf-416b-93ff-b1340fccbb30", "indicator--6983a6fa-7485-40d8-af17-4e2f05b313b7", "indicator--42e71104-09a3-48fd-b314-513ac8f84b64", "indicator--28bc5cb0-7517-4050-94a8-be2cbee3eeb8", "indicator--0969e1c1-70cb-4928-96f6-eb459e598d9a", "indicator--c874b61e-781a-436e-88ca-b0160e396e4a", "indicator--979cb6a7-fbc7-4b2c-a6c0-e9d997c482d4", "indicator--bcbbf561-37bc-49b9-8061-bf04167d738e", "indicator--3eb1475d-9620-4e66-bdf3-b113b72d3661", "indicator--c82e076e-2db2-413b-a599-45410e5f3003", "indicator--7e8efde4-0798-49d1-8071-242dbd32bc7f", "indicator--aec2c061-310d-4eb9-9d1c-abc2e6b5c7ec", "indicator--7146394d-d678-4d5d-8879-3aae5f4d5039", "indicator--c5f0cf46-d3af-4264-93c0-bd6ea7853fef", "indicator--88658fcb-5a0e-49f1-9486-d62cb377ceb5", "indicator--731acc15-66b3-483a-bf42-16625e673eb2", "indicator--2e156e3c-e5a2-4600-90ae-31dd1684e47f", "indicator--743a1e76-6f21-41a8-bf62-7ec5162e68db", "indicator--9fcc3a1b-c8a7-4f5e-9824-a62402707811", "indicator--5d004504-7e6f-4663-9e89-f1e8103d4690", "indicator--368b9757-6be0-4f11-8246-932ba8f8b170", "indicator--2f66076e-d938-4dd7-b710-9af6de65d90f", "indicator--8cff7a33-a565-4210-9b03-c96980388ead", "indicator--4c46debc-e868-4b5e-8513-91bed26df631", "indicator--790f95ae-bd52-4c7a-852c-60c3007ad767", "indicator--3e657081-366d-44eb-9a1f-c206e451612d", "indicator--e4e2355a-1dd0-4635-9218-905e8cb59ed6", "indicator--95c4d94d-bad1-4789-930c-18bdeadcf90b", "indicator--128fc797-8973-4d29-901e-90ed7c145880", "indicator--18863f67-50d0-4666-980e-632cb14a48ed", "indicator--dd52b1b7-f03b-44fb-bb44-661f4e4bd227", "indicator--90532c16-a75e-435b-916e-780d12659800", "indicator--b7250e92-6b47-4d16-a29e-1bba138ad763", "indicator--9f823a32-ae83-48ba-88f8-8c41bc786c3e", "indicator--17be27c4-015e-45ce-b8a6-93fef8fdf1f2", "indicator--dc2d4ee3-46f1-41a2-8a7c-0d7c7532a340", "indicator--870a57a1-028a-44c7-9bbf-51d717c2e68b", "indicator--8c8979b5-bc33-4b1e-a6a7-2a7b75c99827", "indicator--b724df49-7d74-4f1f-a807-a50f2229facc", "indicator--c78c0667-8b80-4bf8-9c6b-30ea3e59face", "indicator--b284828c-764f-4134-95c5-7896d9975f0c", "indicator--e24d2873-d6ec-4356-8577-c53c0acce389", "indicator--32791ca2-8081-42ef-95da-5e81816b9c95", "indicator--8b7cbe06-1ab6-4e35-ba92-80381986493d", "indicator--7e374fe1-065d-4f93-b8b3-3bde3cb9635f", "indicator--d57d6a89-5c3c-4f32-a67c-2ec67adbf63d", "indicator--5ae672c9-6996-4356-8ae7-f6f06da9d34e", "indicator--8ff22a89-6265-418b-abf5-0602d3c12816", "indicator--e5c68024-1e4e-4a3f-a47d-3d593554cd6b", "indicator--6de6222e-68ff-4793-b781-5493d3fc7586", "indicator--0f32f3bc-e56c-49ad-bdaa-fb50ffd3fab3", "indicator--062926fb-59ac-4ea3-a81a-efb531eccd8d", "indicator--404a2d67-0c79-4d7b-ade4-5ca125be3b11", "indicator--2a412351-f116-49c8-b30e-d954c6d8c707", "indicator--e007c52d-7a9e-4860-a4dd-0ac2548d4a43", "indicator--292dbc2f-010f-4430-84b8-2ebdcd6d9459", "indicator--f8439d5c-040f-477c-ad3e-78fcb0fdc290", "indicator--e21f3315-d4bb-487d-820a-c09de666d5cd", "indicator--cb79ff9d-4441-4daf-8f33-b52d1336838f", "indicator--13b61e8d-5e10-4ca8-be4c-eed19d854db2", "indicator--5df87174-480c-43a5-8d9f-f5a8e227242e", "indicator--9eb570f2-5944-4831-803e-6ba59360019c", "indicator--0a12fbeb-c3d5-47eb-afcb-60d22e3506c5", "indicator--98660ddb-a386-4595-8495-ac99407aef6a", "indicator--7a0d9172-b7c1-4fbb-a910-c6c0f2c2f71d", "indicator--3d094d9d-a083-435a-80ef-16d51a488190", "indicator--a937de36-f648-43cd-9682-17593dd834d9", "indicator--853d743a-86bf-4e68-b634-b0420e1a2a88", "indicator--3bb8a33d-3512-47ce-80ac-f66a9e3314e2", "indicator--f49071b7-f101-4faa-b420-ebcd9795a7b2", "indicator--74879345-09ab-4960-b124-3402a61c977a", "indicator--16808358-fe2e-4c83-83ce-a438acd5704b", "indicator--8c2c5cc0-f098-4db2-b4dd-680028ba012d", "indicator--28e359dd-3369-42f9-9f84-8a619bce8579", "indicator--75432cbd-2fbd-4422-978c-625efda45990", "indicator--1599653d-a91c-4149-b4ac-f1ab24abb241", "indicator--7aabacb5-56bb-4290-99f1-308ff32b5a58", "indicator--161b4d48-12bf-4b7f-8897-edb654cbd6d7", "indicator--17d2b45d-9e31-4763-9920-c77f912bd60a", "indicator--4b9de853-7ee7-4f13-a1aa-149f2fc67067", "indicator--c3350438-7930-4cc6-8b39-29a906439d57", "indicator--3326ceef-64bf-41f7-857f-635423d5de73", "indicator--7b20de6b-c7f9-44f5-99de-c7d13712eba0", "indicator--079067bc-0f95-4beb-aa12-0ac095cdb393", "indicator--f53bfe5b-98d1-49fe-8bb7-f79e28c41e94", "indicator--e654a4ca-4f4c-43a1-93e3-f34abdbc54fa", "indicator--3721490c-b196-447b-8f09-ccef2467e77d", "indicator--dcb81c4c-d265-4000-bbbc-f2c54b35f9bb", "indicator--382e884a-93fe-453f-9b3c-cec775f8a9bc", "indicator--fed554f9-6ddb-4bf1-b91e-01a5b49e77d2", "indicator--bf08e82f-845a-49d5-bc19-21d8423f1746", "indicator--c0e1401e-34cc-46cd-9895-a5db24a4ede1", "indicator--622ac3c6-0be3-48ba-99fd-682b999f3c26", "indicator--91193d4d-7894-40dd-afd2-7e16f3719b8d", "indicator--495be2ad-a4e4-4fde-89c4-de41cae1e0a9", "indicator--da47f49d-9679-4417-a8b4-edc4c0cc8cdd", "indicator--65ff67a3-7024-4753-bb78-ef625988be87", "indicator--c489b4f5-8acb-464c-9733-9666937a5fcd", "indicator--d3d81321-28a0-40f3-b52c-59595230a38f", "indicator--bbd17ff0-24f3-4967-93b1-6e5f210e650d", "indicator--e864e33a-614a-423f-8484-776f0503368b", "indicator--031d7939-995a-465e-888d-2d567a21519f", "indicator--3111000f-aebb-4c5e-b65c-f8f99f0eaf83", "indicator--24523de0-e506-44d2-9afd-5605f89361d8", "indicator--6b3550a9-93e2-477b-8a58-9959b8d350e4", "indicator--0e5d780a-c16a-439c-ad22-b160dfd78079", "indicator--2c9e3e6a-3fee-4ca6-aa6d-8861b20f14e3", "indicator--2669f950-8926-426c-a973-917e2fc8bc20", "indicator--ad2e8fdb-de15-4f43-98f0-de5c4e73212f", "indicator--51dc1007-1f4c-40b2-b27d-f41053621b10", "indicator--cf50320b-3b83-4b49-8142-b1f35f9ce360", "indicator--829df83f-47c9-4488-8faa-321057e7ecd3", "indicator--a014e734-b93d-4c3c-8e26-cdf57c7cec67", "indicator--0d134a3d-75b4-4fd2-be14-105dc31fed58", "indicator--d2ba5954-2624-4350-b262-4ceda48b607a", "indicator--54aff6f4-aa8b-436e-b2e1-c2d0373b1462", "indicator--22086675-f718-40d0-87f5-aea7187588c1", "indicator--fa389913-0ec2-4dc1-8267-18f359ce804b", "indicator--649fc9be-2f14-4cb3-8ffe-390aa0bfd696", "indicator--d6997b34-c358-4b42-b55a-d48c2761edb2", "indicator--04e5a4fd-8d48-47d5-acc3-426f126dbfe2", "indicator--d1492f32-8a74-41b4-b2c2-f144998ed574", "indicator--40f7056e-496f-4573-875e-9d120a3b79b0", "indicator--ac99fada-8fd4-4cac-9abf-1af71f918006", "indicator--f7408f7b-ac2a-4e1b-a572-b58824c14478", "indicator--c50188bb-f8fe-49fe-8d10-2fac1db88e54", "indicator--a83cbde8-8d6f-4450-93b1-7213854db979", "indicator--b5bb0ae5-1989-4e3b-a806-01826bfc5cdd", "indicator--76440a51-b10d-4cd1-967f-829a478ccea4", "indicator--aaf4a5aa-a5f7-4293-8909-0abd54305f57", "indicator--950f9695-aabc-4daa-9674-d7691ba72143", "indicator--5e31e784-ef08-4ee2-a67c-505227b2508e", "indicator--8ce864b7-69fc-4617-b456-87a00e0ab5bd", "indicator--3abac014-422b-46d8-83ca-8f54e8654f71", "indicator--a174c07c-f87b-43b6-844b-ec79db4e155c", "indicator--a1750912-81a5-4de9-a0e7-98975f002b1d", "indicator--6e084cb6-05eb-43e2-9871-727d5394ecd3", "indicator--adbddbb5-7cb5-4a2f-8add-136102e72d0b", "indicator--33402f52-5d29-4be1-9cf2-d8b8a314f002", "indicator--d93ff6c6-a0b2-4c36-9ce9-535aab72776b", "indicator--ce185e07-c0df-491f-b0f0-e49cfce4c95d", "indicator--e7cca139-9811-492a-ada5-329c557c9c1d", "indicator--27ec4fee-0a9c-43da-8b62-3d975c50585d", "indicator--0a7386fa-6918-4505-90d5-d3ac489b7d0b", "indicator--251f770b-19d4-4eb7-a43e-39275b1b5706", "indicator--fc324e19-1a1d-4f71-99c0-81f14d979898", "indicator--d2324b15-66b2-4945-8dea-f5b6b4826275", "indicator--6b6b1b98-0dbc-4f41-91d8-e8adfbb3adb2", "indicator--dddbaf81-967e-4893-98fc-ff738c6ea154", "indicator--a5888b05-c855-4b82-838b-c419d49a1004", "indicator--5f472814-f8d4-4c3e-988e-b3359aa4de83", "indicator--54aa3381-9a11-4075-be84-5df77fc686b5", "indicator--4a2b9815-b127-4532-8bca-3274fdb56b38", "indicator--465b4382-d35a-40ce-b456-21af03bbc0f7", "indicator--4b7ad4ee-cd34-44a5-871e-df1b0fdba7f9", "indicator--80b079f7-bacc-4e6e-a14e-73064fda1da0", "indicator--5494d280-3d10-4fb5-bec1-781b86c6e1b8", "indicator--b817b594-f3c6-43bf-a89d-6c7f19f7c3e7", "indicator--6736781a-bc22-407b-9e4e-8fc45b1d4a39", "indicator--703fd198-47a2-42d3-86e4-dbd484c4fb0c", "indicator--dea23e87-398e-4a30-a694-86d56cbcbb5f", "indicator--31015190-21c4-459b-940c-8ee7f36d4c05", "indicator--28787961-b817-4613-a152-b0d0479b1032", "indicator--af79acc0-831a-4b03-b8ac-f2133dc11df3", "indicator--258b5463-8355-4a2c-a72c-d968d21415a7", "indicator--3ad00c36-92c5-4c1c-9088-60d23ce967a2", "indicator--607e2dc9-2f4b-49b0-9242-af937b8e6f62", "indicator--af015634-1550-46ac-91ee-a5fa5d7d973b", "indicator--944d05cd-ab24-4fc8-bbd6-01c8c6a90b39", "indicator--0a5950b1-a20e-4708-ac28-4841036d8ef6", "indicator--9afb39f2-cd58-468e-83a6-960ba3a1d809", "indicator--a0197eeb-98e5-41ab-a5b9-db12dfb1b9dc", "indicator--a8472cd5-e3e2-42b2-ace2-06cd94a74e54", "indicator--308a0eab-2bdc-43a7-9970-a70e45f483de", "indicator--bcbf2deb-dfad-400e-abad-fb9943e4bc3c", "indicator--5cc672fc-5dc7-49b3-a8ce-cc1b9f5321ef", "indicator--da06d670-5a09-436c-a481-b036d03eb364", "indicator--c4b72d42-3df8-4c19-97e2-12caf8e2a902", "indicator--38afc6a3-973e-4b62-b880-e31a6ef7bdcf", "indicator--a867a012-e353-480a-bb30-7e84c84195c1", "indicator--37bd7a44-49d5-4579-a314-a5d553aabdee", "indicator--3f99daea-2b15-4ac2-baf6-636f07563082", "indicator--12df99c9-66fe-45cc-a84b-11def36d32ef", "indicator--9307023e-4048-480b-bcf4-4d2cf126eae7", "indicator--21e717ea-6b67-4302-8d6c-e8ce7829e56c", "indicator--28a048cd-9104-4e0e-850c-459784f92216", "indicator--785eb345-c36f-4251-bfdd-4604d542ba72", "indicator--1ecaf8e1-79f5-4609-8b66-d9a09f1e900d", "indicator--847c2f2b-aedb-46f8-802d-018621b83f4a", "indicator--af9e1d5e-fee1-4161-8d5d-34a7d7547cd3", "indicator--be9d4ef6-7b21-4473-aa83-51e9780e1ec8", "indicator--350b5034-bdb7-4abf-bb00-59a824e0e47e", "indicator--239d6ebe-a1f3-4c49-b17b-2489e7795897", "indicator--a60f7d86-bf7e-47c7-a781-e3acd311322e", "indicator--414bf6e5-154a-4d4f-a725-04f445e9b21b", "indicator--7952452a-0689-4a5e-a79a-367ae424d728", "indicator--a1df8dca-b80d-4d51-8c55-e485c25b294a", "indicator--44627168-4633-4a08-b080-1867adad1458", "indicator--791591ca-dc1b-41a7-a9b1-34155b47a364", "indicator--22334fc8-429d-4a19-91be-bc497413e317", "indicator--808ba64f-1004-4002-b764-785a9460a430", "indicator--304a7d9e-8b52-4428-9be1-07fbc7d29665", "indicator--6151be8e-78a7-4d18-8b87-1cac50523202", "indicator--3718ddf9-1607-4d79-b5b1-8f2ec9cb80ff", "indicator--8c03a47c-b07a-455b-a8aa-07a820d34fc6", "indicator--a79668d2-0259-42f6-9cb6-80de9dfc5bea", "indicator--57dc813c-b1ff-4241-802d-9fd016ea833b", "indicator--eb7748c4-1514-4659-b1ef-eda20fe1d66b", "indicator--9cd36671-2e22-47fe-8b91-5f26120fda2a", "indicator--8af57481-2afa-4754-b58f-a251ea6f4abf", "indicator--fcdfa597-419c-4753-b282-f6cf7e481290", "indicator--d8ecc8e6-50fc-453c-bdf0-770ce2c02920", "indicator--2fd59a92-c0ca-46eb-b1f2-a936c028507e", "indicator--66887e35-8c7a-46bf-a8ad-199ef478d2eb", "indicator--a954dbc0-d2c1-428d-b7c3-c858485bca7b", "indicator--54bebf5e-0dd9-4ab6-a0b2-85758be022b2", "indicator--7e33d140-903e-422f-b32f-18beb6a22014", "indicator--8f145a66-5e91-4d7c-b336-6778a5b9e956", "indicator--b4284eed-caee-4565-a911-0414d36553dc", "indicator--7fc7d3eb-e8c9-42f0-863e-b176c55c3ef7", "indicator--17a1a858-17e0-4ba0-b772-06be996e468c", "indicator--4d74837b-8ce2-4a17-997c-9ee49ba09c34", "indicator--267a9f9f-f20c-4b39-84a1-50717de438c8", "indicator--b4f8accc-a8a8-45c1-84ee-d0c531dce99f", "indicator--0e87264a-87ab-4d3c-a85a-d2203ae237d1", "indicator--a29d7bca-2c30-4d5d-a4c7-b927ab6ce264", "indicator--be03c9db-fed6-4318-a0d0-34829f18d11d", "indicator--9da92545-0801-4c57-9991-d6858c35ed0a", "indicator--b6942caa-db2d-41bd-838b-a984252e1d32", "indicator--7a92c172-1de3-4377-b315-48525a44c1a0", "indicator--089fa77c-b2fc-4551-989f-f4a4cd27aaea", "indicator--ce886efe-5798-4a6f-8c3f-3e4525aa8df8", "indicator--d6c2de4a-0d5f-4f22-ac1b-b9919cb904b3", "indicator--1f520fd8-48f6-4d43-a894-1e194f6e7250", "indicator--313068f1-5847-462b-a3d9-e108991a5174", "indicator--7a33656b-c8e1-41c9-9dc3-c8b3eb17461f", "indicator--ecd69fc0-718e-4e81-a0ff-dffbecc3c2f5", "indicator--11cb9302-a9b0-4bed-b992-a1c62ddc49ff", "indicator--3dc781a0-202d-441d-97a0-2596ddb9680e", "indicator--ce82211c-4ff3-43c1-ba02-fc137d66bf95", "indicator--88bf241c-0657-4845-a3a8-cf07693d14e5", "indicator--ddcbdb7e-d1df-4042-a834-984bdb9428c6", "indicator--e4116ecf-4720-40f3-b86f-e9308e698c21", "indicator--4c01e0a3-22d2-4c50-9709-a5f17f0b6f71", "indicator--c2a3edec-696c-4da0-aeab-3336586f19ff", "indicator--b434026a-599c-4d3f-8ca9-6bf5d1176492", "indicator--094fec8b-b4fd-4678-a44e-79659e839076", "indicator--a478c299-2335-4b79-9a2b-e6156dff974a", "indicator--119cae75-219b-46a6-b8ee-682e08b1af24", "indicator--3e9514e4-ba52-47ff-b362-2a75f28b8eea", "indicator--114638b9-a1a2-4f30-9ada-2138dc2829b9", "indicator--2dce0b91-60a8-434b-a450-fd4b65f573b8", "indicator--0c6e0fce-6420-4941-b652-7155071b35da", "indicator--72aaccd2-e835-4493-bb65-305131c5a161", "indicator--c09e8dcd-e37c-481e-98f9-fa783e199833", "indicator--495bf104-acf2-451e-aa73-158441f61c07", "indicator--a4aee56f-f75a-4e61-a88e-ccf85c2963b9", "indicator--87963725-9b8a-40d5-8420-2a2c589334bf", "indicator--8761d4f7-a68c-4b47-9a05-44ccfd78c1e2", "indicator--17edd0e5-1e66-4b30-86bf-871fd4cff383", "indicator--b189e188-d6c7-43ec-8425-ad2d8a881a3a", "indicator--2f499d0c-164a-455c-82c9-c831599a06ba", "indicator--0e1f3c58-9241-42f9-b28b-d96d565b292c", "indicator--88ec7607-4fa5-45e2-addf-0e59b8aec6bc", "indicator--ce831c8d-f52b-46db-a6a7-090c1ffe5c10", "indicator--aa1f1a6c-1543-4e87-a979-d8a69923efde", "indicator--21bc7ba5-c996-4b2e-83a6-84f367a041b6", "indicator--40a92ad6-7cd5-41fa-a90b-8c00cfaba9f8", "indicator--7eaa9c38-dc83-4b38-acab-55c3d11d1916", "indicator--d2c51099-2f2f-4771-948c-2d9388c5140c", "indicator--0acae680-3004-40c9-95b5-50a52de57bfb", "indicator--693ee1e2-5618-4cbf-b03d-f9e18802eb0d", "indicator--b7d44f25-26da-468c-965f-d09afd0b020e", "indicator--e22fa53c-b147-4522-8d2a-72cfc17d6a12", "indicator--41aa726e-4634-4037-8767-4e0941b466f1", "indicator--989c7e89-540f-456b-9672-b8e10341cbdc", "indicator--fe13d0ba-fee6-402d-a850-38d7470e5f2b", "indicator--5be9d7dc-c759-4f48-a39c-8eaec8a9304b", "indicator--a77c1734-ad3b-4bd0-a522-5981d8f2a9cf", "indicator--5729fb34-e43a-4399-8b07-daeca30d8e67", "indicator--50956622-9998-4e3d-9778-6cb1a30ca382", "indicator--67c02931-e153-474c-99fe-5c1b72299da9", "indicator--de7f686d-8bf8-4195-b790-d1939d548f0c", "indicator--8f822686-21a7-40a3-bd35-d8e0a3ff45ba", "indicator--426d6ac1-1973-48a3-86ff-3b0009e15c79", "indicator--1c4e85b4-14ea-40d7-ae2c-47abd476f4c1", "indicator--21b9a09d-eba0-418c-b8ac-1fd74474641a", "indicator--a2b6c290-c1eb-495f-9992-b8ffffef7e35", "indicator--94c7c113-746b-4a9a-acab-7d59feb50d93", "indicator--65220a60-4889-4fc7-b1e2-3a588c8596ce", "indicator--07bb2633-fcca-4fbf-8905-2c4935b6381b", "indicator--b97723a9-7e99-49be-9728-812088637f5a", "indicator--fe559cf8-4bcc-438f-8cd0-17ac2979f83f", "indicator--a1df1017-f559-4274-9f74-86329d990214", "indicator--265a1ef6-cc31-49d5-9d7e-db51e2c7a50b", "indicator--fd7f28da-956c-4023-8f69-d5addaf3fdd8", "indicator--37a2f3ac-f6e1-44ef-a09b-555181ab24a3", "indicator--eb45a61c-f8ac-47bd-a906-11a45dc4f571", "indicator--61d0b527-1b66-4748-92c4-5ef33d9500e8", "indicator--1896be26-0651-416a-914b-ce39d1d42eb9", "indicator--929f9a1d-45e6-4209-b093-a70d3bbd0793", "indicator--18b66a72-c0d9-48fb-82d0-9ca4ccea8a53", "indicator--cccd8a7c-0a01-42ec-8431-bb091f690a8c", "indicator--64db26b3-a104-46ea-99b2-f48bbdec22aa", "indicator--0df796a7-5237-4ab6-840e-5f467e3b68c8", "indicator--db3b21cf-4f3d-489f-b579-c1f2b3139e14", "indicator--489a9b13-7b26-426a-b465-1b53cfb653c1", "indicator--a3187d92-1e4d-48ef-9d33-47598d73f026", "indicator--30a18dc3-9fad-4919-847c-6da3ba14904d", "indicator--93ef7570-0fea-4c53-baff-e3be2844f871", "indicator--b5e60eb2-0cd3-46a2-89d3-93472e5c6531", "indicator--c71f4491-d9a3-445e-9f1b-6029ae0a4892", "indicator--c219872f-2864-46b8-bf01-88a1ab9b6b08", "indicator--34a6fa34-51a8-4a6c-b113-83ff34feb6d8", "indicator--aea64619-76c5-4f6f-8d71-9312e71b2396", "indicator--49640ff0-a21b-4add-a6dd-afdd6dfe4f4d", "indicator--0c40092d-0390-44ee-b075-709356e2c376", "indicator--63105309-94b7-44b9-b847-02dfaf4cebb1", "indicator--1ea023b4-d682-4c20-af73-61a90037b13e", "indicator--8e8c28a7-f6f7-4ecb-99f9-12edae35ba03", "indicator--3402874f-57c4-469a-87c8-a3d67a8d13f7", "indicator--54cc9c5f-33d8-40e9-8d0b-97b497ed3c61", "indicator--3b185e2e-2e7e-4cd2-b4ca-659aa6fa97bb", "indicator--b1396d44-f8c2-4c16-b849-31d310e7dbb6", "indicator--a3967305-e406-4b1d-9125-85838435df65", "indicator--893fa528-1e81-4384-b0e4-4dd1798ff4c3", "indicator--b6f6a56e-fa3e-49a3-b580-4d8c5624fd2f", "indicator--383addfa-3b25-461c-8b56-1444b0ed3d9c", "indicator--73ba1aa4-75ab-4f18-9880-828b8bb43187", "indicator--3d3cdcfb-386c-4ed5-a58f-fb13d9d65b18", "indicator--514c1dbd-b268-48c2-998a-3aff813f5d7c", "indicator--1fbabab3-1f64-4411-993d-0c546329ea67", "indicator--cc08b52f-61aa-41d5-9e00-8b0654253edc", "indicator--6353b18c-edbb-4576-a861-43c6bf498e4b", "indicator--f974f2bb-5444-4816-a84a-b40713990ec7", "indicator--21c1b833-ac80-423a-ac43-cec9a3fdf468", "indicator--fcdb5f3b-2317-4e0f-8d04-c0141707a6e1", "indicator--57b4c812-024e-454b-a238-7ed45cd42ddc", "indicator--be93287c-2b87-4c0e-bde1-786e232a9c89", "indicator--10c78923-a315-48f8-9f6d-613b2cf1a66d", "indicator--bf57780b-c11a-46e1-afea-8171f0078529", "indicator--7b83924d-a73e-47e4-a39e-328bb1589771", "indicator--196ea48b-b57b-471e-9891-91bbd52c4d62", "indicator--9c54273c-5379-478e-8400-70607ebbc779", "indicator--1d5b3a0b-f846-40a9-80ab-f6a0314a096b", "indicator--ba390945-cfa1-4ea5-8c63-61cdb0167efd", "indicator--70a70966-d47c-40dd-a2bb-8ff9fd690a33", "indicator--756c9b77-cd0a-48c8-8fc7-fd5390bd6f4c", "indicator--a105dc5f-1e5b-40f4-9dbd-8225182c2018", "indicator--5c581a0e-ec62-40d8-addc-df3810bcb32d", "indicator--59c5ad1f-9c89-4776-b4b1-44c61e3f5f58", "indicator--4070bfbc-aeac-4fd8-af9f-dbc7019addf6", "indicator--a3c1d499-eb81-4599-972a-dafc214404ad", "indicator--fde07f75-5009-4f38-9619-cb635477549e", "indicator--1e52ccc9-806c-4f84-b947-b1c559184410", "indicator--53261b52-c530-4397-9f30-64f838e05cb8", "indicator--48d6fa15-d4ca-4e7c-9973-cef0e82b5297", "indicator--6ff0f519-9e46-430e-887d-d1607ec576d0", "indicator--b5b70cd0-16d3-4dfe-82fc-94fbe0e17c9a", "indicator--c5ad5786-d5bd-4ddd-b387-cee1ebf28614", "indicator--c5659913-2a32-43b4-804e-f04c002e3a6d", "indicator--e64afe8f-8275-4c7a-9f12-e66084ca5de5", "indicator--9fe0a52d-abe3-47e1-9a5e-bd5ebb2ce8e7", "indicator--b1a9b156-3621-48f4-9782-5ddfc0edfb2f", "indicator--2e0fb7f5-fc26-491a-b245-ae0bd668b33f", "indicator--4345d6e7-3569-48a9-b8ff-cb030386bcc7", "indicator--febb5804-4da9-4c95-930a-7f19e8708d94", "indicator--77b83b75-beb9-4eef-905d-f42601615cff", "indicator--9e3038f7-9075-47a2-8ecf-bd2c11d227d7", "indicator--83c510d4-defb-4d9a-b0ba-9499e31c4e4b", "indicator--62956fbc-43c7-4431-968d-f17c21cc3e6d", "indicator--69bf2f62-d421-4157-8522-a703d39b8036", "indicator--09f30b65-b847-453e-b889-07233405371a", "indicator--eca87854-6177-46df-af53-a85918e7572e", "indicator--9fcafdd2-7c1c-4bf9-a7b7-39fa87b69e85", "indicator--fe01ee51-0914-4396-87f4-99c033d13c17", "indicator--fe8ec67a-eaf3-439a-acf7-73f85fffaffe", "indicator--a6817a3c-fc56-46a0-ae6d-d9ffc6350d35", "indicator--c1f48faa-71b3-4a25-9e4f-587562a13e86", "indicator--6a9a94c6-9a5f-4f7e-a6a2-510e873b2584", "indicator--6160faab-664a-4e1c-9f96-36ee1dbcdc04", "indicator--f706f297-b70d-48cd-b17a-36ce1bac4ba9", "indicator--4a6a9765-86f8-4b7b-b91f-d33bc652831f", "indicator--db92d447-da22-4991-b9aa-85e1a496d4db", "indicator--6a200e52-5316-4062-a822-1c33d458e702", "indicator--75f7c228-8736-49b7-bf49-802098f02425", "indicator--240ecd38-6715-4d9c-bd78-c51b2384160e", "indicator--4b22ebc7-5f08-40ad-8b34-b85dd1a00c68", "indicator--9ab1a0ec-79be-4c98-8b9c-08c541ab519e", "indicator--acca3012-0b05-48c3-8cdc-7f793ec5ef4c", "indicator--e58a0447-d88e-4c83-999c-e8a1ed2e7cb9", "indicator--6d091e5c-7732-4808-9b26-229e7263f187", "indicator--cf00e7b2-ddec-4ead-8778-5ff175be18da", "indicator--d5be30d2-f501-4c60-9a35-2a3b19a670f0", "indicator--a5c34769-6c9e-4907-b750-b8332034ee0b", "indicator--5487bc82-b506-4226-95d0-655043a95d46", "indicator--77702445-52e6-4434-8f88-2cb928ca9afd", "indicator--de8bc37d-b042-4796-8128-3e0a072d8bf4", "indicator--d7dcbe26-dc2b-432a-a62d-18df0d1afec1", "indicator--7c01e36c-1603-4b52-889c-c42e1f4313a5", "indicator--ef76762f-4aa1-4e27-94d6-2bc4ad308835", "indicator--26bd6ef2-2748-409d-b9fd-8908b68ed815", "indicator--647f3d74-edf9-48a1-ae2c-b30bda87ef0f", "indicator--a9e95ca3-5ae7-43a8-9043-e6adcdea5717", "indicator--400f7d16-1247-43f1-9aad-2c57bca53514", "indicator--8a89b5a0-9dcb-4876-a8f3-3fc18d6d0ade", "indicator--fd62f717-c0bb-492b-9488-b27e776ae913", "indicator--0dfcb6ff-d665-4f7d-98f1-aa6a27ce3c4f", "indicator--724e880d-6644-4770-9a8a-d91b99b4a50d", "indicator--4bdee9ef-56ed-49f9-b66f-95967692eef0", "indicator--670bcb60-8604-449d-9691-92ae231ba8ed", "indicator--30e8e684-da1b-4d92-8f98-f9aeac60dd91", "indicator--0734eb85-40c4-4209-bc5e-5a75aac61bc7", "indicator--aff2f836-58e5-4b87-8273-2d80fd74616e", "indicator--1b5eac81-9842-42e8-839a-903fc4b39ba1", "indicator--09605c8c-8c8b-4367-aa2d-c872c62c9b9c", "indicator--29088fd4-834c-4a0f-8699-7d6c99bd6f9b", "indicator--a0f19abd-c223-4eac-a73b-137b63f0c45c", "indicator--23d53a4c-4442-4632-b58d-31dcc334bfe4", "indicator--1bb287bb-abc6-4c0f-a7d9-de74f8831988", "indicator--befb5580-3bd6-48ee-adcc-fa66975ddb52", "indicator--94cf7017-ce22-4554-9933-66f254b9dc1e", "indicator--ac917c54-2749-4482-910d-eec71fcb197b", "indicator--b61ea14e-d5c3-448b-9ada-51b236e9bf87", "indicator--3c26a7dd-a8ba-45b6-a710-ed84bd1b997c", "indicator--192998e4-3c14-4930-aa96-c93c8f31fe67", "indicator--e4d0ee73-b532-48d3-b9d8-8aef0d307eaf", "indicator--f5f0e3fc-8805-427f-835a-717f2036ea12", "indicator--6d180150-e7f6-4e33-8691-7abedd10a08d", "indicator--e0d2d815-71f9-4a52-bdb5-f258cb38da33", "indicator--9630e6b2-ac42-4bf2-bb8f-b946cd179d1e", "indicator--53ed917d-0be2-471e-a5f1-bea36e4c2469", "indicator--9be9ead5-4a5e-4d8b-8387-c96cec687647", "indicator--2b078592-9e1e-4ec8-bbce-e087bbd37704", "indicator--3cff9d3c-8a88-4e27-b761-73180c59dcc5", "indicator--f4c63c11-e369-47e6-af63-cf18b1ad5c16", "indicator--6a300fa0-9341-4e26-98fe-89132c3746e8", "indicator--ebf75c8c-261d-4451-b37e-3649b5636dd8", "indicator--0b72efa8-9615-4ab1-aeb7-cd308e52a6e6", "indicator--f8e50eeb-2167-498e-b264-108f7c890abc", "indicator--c7bdbaed-abcc-4ebe-a232-35ddc551d7b8", "indicator--95cf0e0a-92d5-4083-9a9b-cff94892cc3c", "indicator--5e62c208-248a-4622-a73c-e1eccb73252a", "indicator--76822b6a-2d7f-482a-9951-f806c3c1c4d2", "indicator--cdb62283-27c6-4fd1-bc40-de85f23d349b", "indicator--967a153e-7e12-4274-8a6b-0e304f7c8238", "indicator--f1f66041-5fb3-4512-9aea-cde7f2b70adc", "indicator--12a24901-2c20-4f48-8b0c-e30da59ca8c8", "indicator--eee7f09f-7c72-4577-a0cb-6accfac8da46", "indicator--6591cd3e-89f6-4250-bb89-541979e7bee2", "indicator--c5e4a5b0-6d7a-47a9-af2b-88823f430b59", "indicator--16682013-76a2-4a68-bb95-b6fbfaa5cf50", "indicator--e0bf272b-0144-43c5-b13b-e739f5da3223", "indicator--8e149b09-3f5e-45d5-a2a7-6644c8222558", "indicator--426916f8-da9f-4e0f-843d-508833b2afc3", "indicator--b7b706b6-75c8-4a83-a830-0415cebeebdc", "indicator--a02f7b22-23d3-4e2d-8160-164e5280ba54", "indicator--419c93b2-9724-413c-b71f-6adfbad0a5a3", "indicator--fbd04c38-8ee0-43e5-bd98-57171c7f14e5", "indicator--3f79119f-318d-4390-8f97-96251805c4d8", "indicator--0242f54f-f93a-4e02-b9b5-112138edb21b", "indicator--235d6569-4813-46bf-80e7-eb4150d67b11", "indicator--bf0fa544-12f5-4ce1-a00c-1f4db6788c0a", "indicator--4f06e341-dad5-42d6-ab28-119fa0b01e85", "indicator--e4eac398-9a8f-4018-af5e-bbf1d0ae85fe", "indicator--fa6983f9-dab7-4897-9db7-2ccaa9f4aed9", "indicator--9612cf5c-44c5-4e95-9af0-08a336179375", "indicator--fbace985-e0d5-448b-947d-995775de3e3e", "indicator--0c1fdfe4-b5a0-4a4b-bd36-3bf2abe2afb2", "indicator--ef2d02c0-71f6-4fdb-b7f2-e5d959084483", "indicator--a2a3c757-63d0-4aac-8744-a4cc081ea3c6", "indicator--85110003-01df-4204-812c-555ffc95d3c8", "indicator--019b4148-c214-4505-a44b-ccb1a2715e64", "indicator--37cc5547-96cb-44eb-b6dc-9af4b042033b", "indicator--960d2490-8452-4a82-964a-5e2b424e4479", "indicator--7e0d0d5e-f451-4b46-af06-3e3af6b85b6b", "indicator--6bd1db55-7aa1-4af7-a209-0a9310451c8a", "indicator--e8575aa6-a71f-49e8-8abe-2981dc2c2491", "indicator--ab728a1f-c56c-4191-a7ce-f38542e5f341", "indicator--42f8209e-4118-46d7-b777-c9d13e44cdd5", "indicator--9c298de6-58e0-4661-8ffe-8d188daf48fc", "indicator--0c279af7-46aa-499e-9223-ac493c8d4231", "indicator--1d52385b-953a-44af-a913-5fa5851417d7", "indicator--e6d25720-6c90-4a33-b554-0e3f66bcfb1e", "indicator--018ee4f1-2417-4598-a4cc-d80cc8bb0bb1", "indicator--1840af33-4c10-4d8d-9d79-3c8ccac19d0c", "indicator--2d4ad282-97f5-4d6d-91a5-e9bd4482908d", "indicator--c3e4c6ea-c1dd-42bf-be22-d872775b2d24", "indicator--60b3214c-76d0-485e-85f9-0ff4344e5c87", "indicator--882ec8cb-0620-4893-8a63-c67ad14ef6c3", "indicator--89134d6f-8cc0-411f-84c8-bdbad955f6ce", "indicator--433b3fa9-4792-4264-a5a2-0ec8b755c7e2", "indicator--0096f543-ca2d-4748-abf9-f80bd3f82017", "indicator--4abfeb2f-da5b-41a8-9ade-a95f25b35c67", "indicator--f8346481-7f1a-45d2-9d79-1fd51db65424", "indicator--769b632b-f5f0-43f0-925f-7219f211620b", "indicator--53bba409-cc09-40c1-a149-06079eb3aaea", "indicator--a71d0f16-b83a-4cb0-9e8b-49d7aec0d4ba", "indicator--6adc07c9-ce51-4273-b5f7-1a2351fb0795", "indicator--e93af7ff-0a6c-45c7-bafe-4a299c388131", "indicator--6b8cef28-2118-49ac-abc4-58613628c184", "indicator--cba0c571-170f-4307-acd3-833aa1ef746e", "indicator--17fdbce4-ba34-49b6-a39d-29a88be9af79", "indicator--a217de50-b777-4976-8794-2483b6d71b4f", "indicator--bc924033-34d1-4ce0-b71b-5ca172051a41", "indicator--9687089e-1126-4b9c-9fba-8ceef74e168d", "indicator--7940403d-7c18-47d8-a163-06d4ced1a67f", "indicator--a6f1ea9d-0aa8-43d8-bd5d-a178778f6707", "indicator--cab8e3b8-0aa3-4072-8bf0-7cfc8573ae41", "indicator--f8d4df88-1ddc-4f0d-9979-870fccd9692f", "indicator--21341e43-d3a7-415d-be1f-6fe77d00fb32", "indicator--8e226449-3ff5-493f-b39f-2b1cca2df06a", "indicator--fb3993cc-9714-4802-a33e-063425cea39a", "indicator--7b3c76a4-91d3-4c6f-b86b-b48d64f79552", "indicator--a3bbd5f3-bc1f-4e06-8492-4f54e435fb40", "indicator--e7af29c0-8e09-45f1-8bd9-795de9deaba0", "indicator--5a6b4a90-4ea2-4c18-92ba-26247e47e52f", "indicator--e96faab8-1830-4de3-9ac2-57c7396cbd22", "indicator--b5ba64f7-f6cf-4224-aa07-e79be0086ba6", "indicator--da49a019-6ac1-45b2-ac9a-21ce07b73836", "indicator--c575c380-3083-4deb-ad96-52195f5d4347", "indicator--fc011c38-f161-45c0-883e-a4bc4546ea19", "indicator--8f34855c-5d88-4b7d-8c4f-d78a4108d031", "indicator--651b3449-a1e0-4075-92f8-8f9b409999ba", "indicator--32fc5bf4-3014-461b-b19e-4aee45fd0832", "indicator--17208015-1b6a-4bc8-a138-d929e07db9de", "indicator--32a9f50f-2380-46d8-b2a7-13c858f627e6", "indicator--894fe185-5f88-44b2-be2e-d72a1a75597c", "indicator--427a3398-fd1c-4154-a4bb-369cddd67a2e", "indicator--4b3624d1-d36b-4cd0-90e1-4f2670643daf", "indicator--1da4f9d8-3243-4d8e-ae69-e20f1216a1f2", "indicator--e240f48b-d7a2-4738-b7ca-879e586a3693", "indicator--6de36571-d8eb-4db3-88cf-3ea870fe8fbe", "indicator--3ff28ccc-535d-43b1-a7ae-c8f71d09851f", "indicator--576c0be7-4192-4997-bc5b-e934eda31ec7", "indicator--7eb7707b-8741-4740-819e-53af98dcbd0d", "indicator--5aa9e932-1db5-413a-b439-1516e64aea3e", "indicator--9a92d8b1-8105-4821-a8f8-5daab1a859c0", "indicator--cf1e9a8d-3cd4-4f1b-ade7-6387d1343629", "indicator--739a7277-27ed-4289-bddb-f3dd68a3582f", "indicator--46851cd2-efb3-4b30-928f-7942de0b7d8a", "indicator--3a952114-a4fd-4cc1-991d-4ea8c7efb989", "indicator--689ed8c3-475f-4932-aee5-64358d5c44ea", "indicator--ea0ebc2b-460e-4f7f-a923-79b78372aee0", "indicator--f6e0effa-d0c0-49fc-a158-68cbd242f443", "indicator--00bd977b-1095-43f2-93f8-5d9a7f93720a", "indicator--ff805d95-fa2f-4c66-9fc1-3a5a896c79b4", "indicator--b9d1d8e2-9050-4215-9bb7-37ca0d7638ec", "indicator--616e29fe-c69b-4d71-9871-747563287c77", "indicator--264dfb47-d2a1-4a93-984b-ebb6a633d8fe", "indicator--ab9f5a44-36c9-4a76-8988-7c2fa932d1a6", "indicator--e4805816-040d-4578-85d0-f25ecb2145b5", "indicator--c0df8f99-531e-4233-a03d-e635018f87de", "indicator--4d3067ac-b688-444f-9615-c381c1f6c11f", "indicator--274bcf2d-dcfc-44c7-8248-d7e410a5471b", "indicator--0a300e39-a20b-4123-be2d-b336364b59d6", "indicator--8fdf7fe2-66f3-4ca0-a366-8a95d5183c69", "indicator--c0c3693c-083b-4e60-822b-bd2293ec0e56", "indicator--52cb7e85-b161-47be-95d6-707bdb8118d9", "indicator--e59b3c19-9657-4ddf-ba93-747c99d21a20", "indicator--04c2bd94-5d08-4bae-965c-c7d9b983181b", "indicator--7ff91468-7a66-442f-ad01-d640fed2bc1c", "indicator--560a0c19-8e01-41b6-99b5-39198defc675", "indicator--fb24577c-08f0-4336-a607-f0a46c652f07", "indicator--ce6fab39-1378-4db6-ad21-1ef7927efe4c", "indicator--a9539ba6-f4da-4e2e-9bc4-a6ab687f5657", "indicator--33738674-b2f0-4523-857b-31405ef9988c", "indicator--0dfbdab8-d284-4b70-80b2-170040b48777", "indicator--65b1adb8-a8bd-4739-8fcf-4180e79f58fa", "indicator--b9b200bf-521d-4644-8bfb-cbda14a9b11f", "indicator--0a33780c-1097-4bcf-9f1e-ca712d2d470f", "indicator--0ad01c44-56ae-467a-861a-6c231de18cf0", "indicator--c9770225-1ee3-4465-b57e-efbac57bdd55", "indicator--a062d7ad-be86-4c5f-9a7b-ab6b3d5dcbeb", "indicator--c9204b7a-47a7-4927-9110-536da9a4847c", "indicator--db95ded6-2108-49eb-ab00-97d84ecdc264", "indicator--44ab0557-5def-4d5e-a614-02c9254b3a8b", "indicator--913fa54b-4ce3-4609-8484-76c243587b08", "indicator--6d0fe54c-b001-4bb6-8172-179f598a3640", "indicator--84c81c09-42fb-4ed8-8af0-b410287b2d1c", "indicator--0031f82c-0a0f-4885-ae47-180006d13398", "indicator--c271da1c-8337-40ae-b9c3-b9128a4a86e4", "indicator--a8d62a30-2532-487a-b54e-f35e5e19a35a", "indicator--256c2398-3a31-4710-a2e6-3ca80d0b6b72", "indicator--b9548ee6-3a4e-4fd3-a860-a17d55892698", "indicator--24da0422-b9a6-4529-87dc-c4b5b1348105", "indicator--2c3fad3a-9cf4-42bf-8144-e3d4c0147db2", "indicator--fc635389-f30f-4f86-88f8-bcd65fe73322", "indicator--c409f5a5-3777-4591-bd3e-2003120afeb2", "indicator--6bb10525-263d-4825-af17-75238ef43149", "indicator--ad9d5e98-2b8b-4fac-a223-02959e9f3291", "indicator--5e6a28d2-7c91-4d69-8ca6-8cc7372f78ae", "indicator--1a4fca59-1d0d-4858-914d-597ecf5ad6da", "indicator--47b1ca54-5d16-4cb2-9f00-f0a37150130a", "indicator--6ae0f088-69af-44b4-99b7-fdbe3f7b2fd0", "indicator--1f6a29e3-a0cb-44aa-bf96-985ae8f40fae", "indicator--744cb4c5-ca1b-4db7-8cd6-b3ffe3c648fc", "indicator--54e98bb2-d95a-49b0-9647-fc88ed31b663", "indicator--6d26d9c6-c044-49b4-9320-83f6860d34d3", "indicator--487e8de4-c563-4bfb-b527-4c0021bae378", "indicator--03de3ef2-ba4a-457f-8fe6-12cd96ffd3f2", "indicator--f8a110e3-e527-4e1a-adf2-ea52e72c67eb", "indicator--4fc4633a-21d7-43b6-be8a-84610fa49972", "indicator--1c9f4b48-6468-4473-bfe6-ccd2507e954b", "indicator--6e0c024b-a3bd-4399-a3e5-12681cdf46fc", "indicator--71877420-886f-4394-857a-9b0cfe3ecdc5", "indicator--3dd391c8-9326-42f3-86e9-3b10bc6b5173", "indicator--92548035-ea24-4ecb-8429-0e3ef79644d0", "indicator--67262f88-3e0b-4c37-ace3-04121fb3e585", "indicator--30e53cb9-098f-42fa-b098-6edc34e00e24", "indicator--c6df9c2d-315f-4cce-ac43-1e2426272a92", "indicator--2ada7a10-64cc-4799-9507-ee6dc0ff80b3", "indicator--558dc221-ac0b-4bea-8d37-9197a8d067c7", "indicator--215ef840-1e72-43b0-98fe-42e5dc17951a", "indicator--bc1baea2-750f-46e5-84f9-d50955581860", "indicator--c8326a9c-5d15-4270-a7dc-dbf70f8609cc", "indicator--b4734e65-6987-4bb0-bc69-dd3bb5fda0f5", "indicator--f0e6b158-acb0-445a-a3f1-81602d34f392", "indicator--0225f02e-13a2-4ddd-9de3-757b23920f20", "indicator--dab91bf7-23e0-4712-97aa-ad6efc1ece55", "indicator--30c9e892-ec6d-478e-94e3-adf8849f56fb", "indicator--d98aefff-0092-4e47-ae94-460a976b6335", "indicator--66a5df40-ece6-487a-b953-0541d3408a6d", "indicator--4fd215b4-faac-46c9-8357-470662d5a142", "indicator--3bd93bc5-0804-4440-911e-38c412938acb", "indicator--3d87a887-703b-4274-af56-30e025590697", "indicator--f595d9f7-aff2-4852-9c29-bbd43a2b7b89", "indicator--1a2a086d-2c43-4011-b724-25ac8dd01718", "indicator--59632710-e4fd-4f5e-9cc6-099f8da0093d", "indicator--1ac5688c-bb24-4aeb-b4a7-c936e8b2eeac", "indicator--855eed75-5b72-4d2f-a56f-a806c70766ab", "indicator--9ebdfdd6-a77e-4cd2-9202-72bcf6084073", "indicator--fdf41c1b-6aff-4f5c-82d0-dc55ab1bb77e", "indicator--f2c9890d-0a83-4c62-8946-ee2753ae6ef7", "indicator--952a1828-7058-438e-897b-5501fefbc38c", "indicator--9427005d-a0f0-433d-8e00-04f4b63b3322", "indicator--21f9b719-d236-469a-9404-6fff4bee3002", "indicator--c5b38b37-5810-41eb-9f32-6c175ec370e4", "indicator--3d221999-520e-4572-8954-8efac3380422", "indicator--6e11aa62-0696-4a96-a1e8-5e9e4835619f", "indicator--20dc8873-2b6c-44e2-802b-835336e8929b", "indicator--25897269-c253-416f-8aee-4bdd3e9d5519", "indicator--74c3cc23-90ed-463b-9011-61d6665770c5", "indicator--c281c007-697e-4a91-a559-e85fada17200", "indicator--0a40942e-18b4-4396-8c41-6edfff9db5a3", "indicator--55a65072-5a02-45fa-9fde-22c5b0051ae4", "indicator--86596bb1-1499-486c-b053-398b6895a6d8", "indicator--42e3cbf4-b4db-4237-b772-475033d867a2", "indicator--ffa4e4d5-7268-450b-8030-6f73bb8c4410", "indicator--2dac0b38-4a82-4aea-8559-633518cb4f46", "indicator--8e01b9b9-0bed-4912-9c7a-4b59d3dd1c9a", "indicator--6fd46d2f-972d-4005-93b0-56e02114471f", "indicator--51d18595-1a6f-42e1-a9e3-9fcdf3c44825", "indicator--e691da88-e308-49ed-98be-08f79be24b03", "indicator--cf799aa4-9f66-4ccc-9d61-65df9199a8b8", "indicator--dd800370-afd6-4928-aac6-d1b6e0a07a49", "indicator--ad0d89dd-1353-4ca7-b760-3c101d64f1a9", "indicator--4a306e78-1ff3-4c1c-a364-d67c3bf490d1", "indicator--116948d1-86a7-44d5-abc9-199ff7a65aaf", "indicator--5c4220c5-a2c8-4d54-9e12-9bcb6e2bb842", "indicator--e46a2c36-82fc-463d-9ea3-a85bbfbade96", "indicator--c4a548da-68f2-4322-90ec-6726e98aa9e5", "indicator--6f7386b0-ee34-41ea-b5f3-40ed7c3f72bb", "indicator--a36c7637-c896-449d-8c53-170b6e1befb0", "indicator--13019119-2dbe-4714-b8ff-d7d6d5627d3f", "indicator--dea29ca0-0624-4975-9c65-88fbee88173e", "indicator--b9f2fce7-76db-482d-8d7c-dbbeff922c22", "indicator--577ac5dd-2eef-495d-a4f8-f7e569082534", "indicator--c92d8cc0-c3cd-4f9e-9c83-2458f4e5fafc", "indicator--597681c3-2411-4bbd-8832-e36e30834e95", "indicator--576dda17-211e-47c8-9013-7d6a7c4af500", "indicator--d611249d-723c-461d-a8f5-0e2618712a3b", "indicator--3a83a6af-d655-488f-b3a1-ef9da6e9c2e4", "indicator--2765801e-241c-4e24-beb4-fc83de116b17", "indicator--6510daf6-e4c9-40bf-bfe6-dcbff67b4044", "indicator--cd9b9bdb-50d1-43d9-a8ab-62463a690df5", "indicator--a71c5bc0-5bf3-4f20-81b8-3936eefadc9e", "indicator--fa4810e8-2a8f-488e-9752-4488058a3498", "indicator--43d5ee79-d180-4b3d-98dd-2815872fe3ae", "indicator--d84ff500-24a0-4e87-b878-f733bea60800", "indicator--2963d808-1dd4-4f6a-a8cc-19032b83641b", "indicator--5b9bd647-520d-4f68-b7ff-d921d7a6c0b9", "indicator--f00c1441-4fc5-42d9-859a-f38e179069d4", "indicator--f5d459ab-4f34-4d18-9649-422b0632982e", "indicator--de571318-4e49-4ac3-ac2a-bbbc5a2e7571", "indicator--f900e619-2fee-420b-b813-3a11fc3988fb", "indicator--fa9f0f82-f248-4a50-a0ee-811cae987fb6", "indicator--4312370f-4c65-4657-8821-859b1c1d580e", "indicator--f4d2dc02-4a23-40a8-b940-5f9a8c13ad9b", "indicator--dd568fbc-c4f5-40c5-932e-cb1d0dc7cf7b", "indicator--20186e56-0b94-4a51-a986-91c0c1f7b350", "indicator--a9a4132c-81a4-420f-b15d-12a50b7b490f", "indicator--55861fc5-3233-42c4-82dd-a8627ecde523", "indicator--f41c4099-4879-4543-a31b-f50fc43d1abe", "indicator--8a855bd4-580f-4940-97ad-c592af2de1c0", "indicator--989a0437-1d4a-4929-a81d-891f4f22901a", "indicator--55738dd8-9a68-420c-9029-a9c42c60c6a1", "indicator--c9523f19-f63d-45dd-b810-ea9b78a458f8", "indicator--b785e33c-3c58-4e74-be2f-0fba2be41435", "indicator--43d20819-b93b-44be-a44d-b9407f4a85df", "indicator--b560551b-d5ba-4202-aff2-30bc9e1e5d8e", "indicator--088c0653-f5b1-4de8-872c-859056acbd63", "indicator--893cd1a1-6636-4bf0-9236-bb846627c770", "indicator--b71bfed7-12cd-45ef-b5c5-011ebd2e0ee9", "indicator--837f3edc-f111-4c38-a668-e3598d970308", "indicator--8b21aa0a-8e95-4756-95ee-00153d7e48d7", "indicator--fe612200-bb3f-4f2c-aa67-a1ea93edf20c", "indicator--08aa523f-47ed-4eba-8064-5dc98ba05a3c", "indicator--77bf7add-37ef-4732-96f9-157fa731534e", "indicator--7326e629-b8c7-4bf4-b6b9-e208fc03f3e8", "indicator--5b6a26e0-59c3-4a8f-b625-4741679aa9b1", "indicator--fdcdc56c-543e-4a4a-ae25-ed34f8a05a66", "indicator--bd569868-987b-4031-833e-a4fa4c6f2ad5", "indicator--c267749c-c916-4223-ab73-b9ba1bb9f90d", "indicator--a1cf16e1-8d63-42ac-8032-12ab30da1703", "indicator--99ce5a47-b501-4316-a8a6-421abae48b79", "indicator--ae50bb87-95b9-44d0-a8bd-72f8f35d126d", "indicator--171eb50d-710a-458c-aa49-4458adac53fd", "indicator--197d253e-7df7-4178-9d06-867a92a73599", "indicator--c953a04b-7cf7-4674-b23a-00926003166a", "indicator--301802dc-6ae2-49ae-b099-d2975cc089cd", "indicator--21160c95-14eb-4de4-9127-a52534051714", "indicator--f1d34709-35f4-4dad-9088-9ce7f1ccd911", "indicator--1978c2e2-cd80-404c-8049-947b1d2c1d04", "indicator--e1bef9c0-6f7c-4163-8f81-2c7cf1756127", "indicator--e094318e-cda6-4086-91c4-3831a8ec7081", "indicator--73c1b140-2129-4b4c-bf3f-6fa55740ccf7", "indicator--35105e4e-c46c-4ae4-aacf-549982b22c16", "indicator--cfc352fb-3bc5-4258-8f4b-144f1a6371b8", "indicator--b0ae00e6-7a29-4eee-9ede-082f56e9a4d1", "indicator--8e8a22ef-14a7-4f33-9b00-2fc946d72b0a", "indicator--cb675127-58f2-47e0-a486-e5098668e2fc", "indicator--066ae2b3-bdd4-4160-8275-30e017e938bd", "indicator--f01427b9-78a1-4f12-a222-805a979892f7", "indicator--d036d176-977e-488b-8a98-6410762b73fe", "indicator--1f47f010-b8b2-4788-bdaf-4e4d91e98744", "indicator--10d065a2-d3fa-4b87-9454-ca4cfbb0af13", "indicator--7082d02b-df1b-43d1-989a-2de0a4affe46", "indicator--1ae733d4-b4d9-49a6-85e8-795e747caf31", "indicator--d4f66933-7a31-423d-af6e-293a2c3097d0", "indicator--ed29dd83-d6a0-461b-bacb-4a5fa9e4cc50", "indicator--538352cf-796f-4f23-a76d-e7e8befccc29", "indicator--d4a14764-9e87-4d40-829f-27ccebcdf176", "indicator--137755b1-b107-4e43-a1fc-97da31ecb763", "indicator--5706a9d2-2305-4709-9c71-40784c3d4ffc", "indicator--0079e77e-d9ce-4653-a97e-0ab7956a530c", "indicator--49c790f4-afa5-4454-88aa-e0baafcd244b", "indicator--e0a84f9a-0d32-49ab-8696-97ea4c5a4231", "indicator--f0d96b9a-86a6-4091-903e-8b7b5c148ff7", "indicator--65cdda1f-ee3f-4d81-b5f8-3005d967e86c", "indicator--fd727618-affe-471b-9d61-e5577d442bd4", "indicator--31c1faf0-f9f6-47b3-a59d-170fbc600079", "indicator--099a4dda-9635-4042-baac-bc458f902d54", "indicator--0674ec99-47ab-4a92-917b-e15877bf62bd", "indicator--c6ba6b20-dab7-4b8e-a061-10a9ccf7f000", "indicator--f8fc991e-ca82-488e-81bd-81e1b2f1ee88", "indicator--a5c00aa6-c656-4d79-bf76-26a26e7924f2", "indicator--3dd93471-f5ad-4225-a39d-0cf81368115e", "indicator--342d1cae-6e7d-4807-a2e0-5d35666613d8", "indicator--39d8f908-7776-4615-8d8a-64d2e82c639e", "indicator--74e77c8d-b868-447e-a0f4-b698f256b421", "indicator--72ae615e-6cad-4f34-8827-c7a7b1db06fc", "indicator--df82ad61-05dd-4bae-8c1c-ad65c00c3895", "indicator--ba8f30c4-38b4-43e8-843b-e8527a563306", "indicator--af93d9ef-e111-4225-a0e0-dd2286ddf90e", "indicator--91bd1d79-e911-477a-a809-898a200c5743", "indicator--c60035aa-eeed-4ab7-b422-8a55d70bbb62", "indicator--0d9dd488-5061-402c-bead-1b38631b0322", "indicator--0f3c0d95-4dce-4983-b942-cca4c8700a1c", "indicator--70319f93-9a34-4085-8392-14921b7bded9", "indicator--bc2a3eb7-5c71-4f0d-a437-63ec93d45271", "indicator--da160b50-9c35-4e05-9e42-c498f668bdf8", "indicator--c5f64c28-9478-4531-aa0a-207d23169f2a", "indicator--130b6c64-6890-4815-aac8-c966e9fa417c", "indicator--70822ef0-0d6c-4c71-86af-16f1b4917fc5", "indicator--f1501b54-cb74-4f1c-b3fe-ead5e2ab66a4", "indicator--05c5310d-a911-4329-a3e1-38262e38e6bc", "indicator--218cc31d-a6be-4d6c-85f9-cde53f62cb9f", "indicator--fff25a47-58f3-4cd3-b782-42c01124b2de", "indicator--f8da1833-f972-4abc-bc0e-1af5f9785b17", "indicator--46ca2eaa-cd4f-4adc-af3c-a8f9db396336", "indicator--4a98775f-dbad-48cf-9bf5-63307c2ff31b", "indicator--35b28dda-8ca1-4573-b562-731049b7d7c9", "indicator--f9007a39-7581-4cd0-81f9-7c779e2e2ec7", "indicator--229a191d-c0f4-4994-87f8-a214b8f55863", "indicator--f34eeafb-421e-4b70-b032-7e1e1e8ef722", "indicator--e988566a-8b1f-4b91-b84e-581945798f03", "indicator--97b265e6-e34b-4d38-b9be-5a585665ee35", "indicator--b0fec1dc-b50c-450e-b4a2-6266ae6a6ca5", "indicator--73058ffc-f42f-4ee5-8112-65097b7a2e6d", "indicator--3059d964-7e1d-4706-9a7b-10b3b5670b73", "indicator--6436c14d-1d55-45bf-bc16-4613c3b9c883", "indicator--791d4b1f-6121-4be0-89a3-f625939a6d25", "indicator--29db90fa-541f-4c85-9444-c437029bf705", "indicator--166b45d4-c6c2-465e-9c56-1dd66c0b74df", "indicator--dd3a068d-62a7-4dd0-b92c-ca3ecae58994", "indicator--abf3ef5c-da9b-4ebd-b6c6-05bd8c522599", "indicator--418db91e-3e87-44de-80d1-abf1ab5ffd8d", "indicator--7071be99-dabf-4477-b9fd-faa65e0129d1", "indicator--22c02f11-cf70-48db-9b11-0892396f6062", "indicator--2e507365-15f2-4cc7-b353-4e9068ccce8a", "indicator--56b23f22-b6c0-4c3e-b66c-8900bc625320", "indicator--3c2d9b6a-3a1b-4543-b888-2310a1599055", "indicator--004a6d75-e25c-47bb-9542-2e2d06726e39", "indicator--7f2e6576-aac6-44f2-8f95-610ae0393d80", "indicator--8ad99692-02fd-48d5-80a4-965ee0973eb9", "indicator--d2f014b4-5cc7-4695-a52c-11fe9a63241c", "indicator--dbb1a49b-66d3-4b48-af33-7d9597fc552c", "indicator--46ea1390-d523-4f6b-b1a3-63d0193c1335", "indicator--1b88169e-4797-4ff7-8a92-3f73a3e9dbbd", "indicator--d7c0c2e5-0fca-4001-9118-f6ff15465c7f", "indicator--5242de30-3021-4576-8d8e-37c89daa0a9f", "indicator--681de24d-34f9-4b98-ac5f-fbb6266e3ad6", "indicator--270c9cea-a853-4f00-8c3f-39d249964738", "indicator--c552d0d7-4fab-41f8-9802-a81b500aa6df", "indicator--f984ec71-12cf-40f3-bf28-5f03a7362b73", "indicator--b3d62247-5182-442a-872b-9d75ec0d921e", "indicator--7982d043-6127-4e3c-b704-375c793a5426", "indicator--beaa3248-9317-4ed3-933a-73677a46e764", "indicator--bb045746-9b81-4675-b870-a81c25ebc60c", "indicator--5d75f3a0-6454-4250-8fd7-80b22e17413d", "indicator--7263552e-6cc7-41a0-882f-dd04459f0bd8", "indicator--9b016e9b-5a20-41d6-972a-0b3366f09746", "indicator--141625a9-ce17-449f-ab34-6df123f84594", "indicator--357ac26b-10c6-4a0a-bc65-3e67aaa4c8c2", "indicator--f0d82e96-40a5-49a2-8e2f-36e9d2783a8a", "indicator--e898eeba-fa2e-4c4f-96ad-0db7f8a3e771", "indicator--52eff7e0-a80e-4302-aff9-a4591d54c126", "indicator--9f9e5562-3946-4971-8d43-6900d55054de", "indicator--d70a66dc-e0b1-468b-9fef-9b51aba04f7d", "indicator--43508a97-4069-47d2-9f97-9b61867d12c0", "indicator--143d9448-6a4a-4f65-a4b5-b467f0f93e68", "indicator--b2145f83-7672-4fa3-a9d6-b4127a2cf15b", "indicator--f8005c22-3f78-4394-b803-261334374de5", "indicator--d8470e8e-c22c-43a5-b191-ec5fe965d4c7", "indicator--57ee9d18-f820-42eb-86b0-08363d15dba9", "indicator--6dbccb12-397c-4327-88d8-a50e286cd5b6", "indicator--3309e128-b764-4adb-837b-7e69e55ca030", "indicator--1bd80ef5-b814-4a80-b74e-8a2a27bc3da8", "indicator--78273df9-8040-4dc1-8404-d21ac75922e9", "indicator--44c2b3d3-37c0-4dd0-b757-2d670d2f85ae", "indicator--d097c589-e879-407a-b1be-6d24027e1456", "indicator--02bdfb59-8dca-4374-a692-f00f6cfebb22", "indicator--552f1d86-d21b-453f-aed5-4105d02c2e3b", "indicator--83135b9e-09bb-4798-b388-fb44c855ea9d", "indicator--772da283-73f1-43fa-a5f9-09e1d93117f3", "indicator--fe1c79e7-1fb0-4230-b4a3-7b8ce42bf7a7", "indicator--0ca6dae2-9775-4b64-bbcf-7f5e5b090e13", "indicator--30087dba-ff2d-4adc-9629-e6200e36b5cb", "indicator--34505c0d-0301-46d7-a025-cd947959b85b", "indicator--745e7448-2b09-417c-b868-5bfc196a4bda", "indicator--e802efbc-6d5b-48e3-92c6-8de8965ffdd4", "indicator--d8122182-f091-4fbf-a6a6-7843e845427d", "indicator--c1d1fad1-61ca-40e2-9122-092393a9208c", "indicator--78b4307a-9bc9-47db-9752-f4857cee1443", "indicator--66104fd4-bd0c-4ddc-a8d6-491adda3fc46", "indicator--fbe351f5-f4ea-47f5-9086-c45124ae59eb", "indicator--6c53e9fb-95f6-4f78-92d7-4d2588f88cde", "indicator--bc0bc240-1af8-4442-a169-022b0aa96772", "indicator--b0582e62-a226-4a17-8ff4-137f8baee005", "indicator--b9bb8c29-0f0e-4862-a6e2-0f2e78ebe04c", "indicator--5bbdec8d-15cf-4e39-b91c-601017b1fe7b", "indicator--79c4f396-e665-4586-9a3f-0f2a3196b196", "indicator--08890881-d191-4d59-ba0d-fa8bf1b8527c", "indicator--18e0a1bc-4022-40bb-bbde-ac2bbd26797d", "indicator--65d55c3e-9725-461e-ac75-ae09f5d88a40", "indicator--b8190932-de43-46b9-abbe-b814a30a39df", "indicator--ac8b7caa-b458-46b5-8abe-26d66a5198c1", "indicator--644d74fa-1ab4-43d0-aa48-9bec86f26e8e", "indicator--1a1542da-e9f9-4c78-a7a1-92edd59e89f9", "indicator--f825f586-9e6f-4fd5-a4d6-07c0c7501c37", "indicator--8962b0e3-cf85-4486-9266-b9e1de1db557", "indicator--ae7072e7-6d3a-457e-a126-41f953223a6a", "indicator--f7afc2e7-af28-4cab-9fee-0695655c82dc", "indicator--c73c1526-5ee5-470c-9396-8ea2d9a7797f", "indicator--a392ea0d-097d-4620-9e0f-e46c70ffba79", "indicator--cbbf161f-40b3-4dd3-b678-9b88964009ac", "indicator--1cf5919b-e9e7-4044-92be-8fa993909165", "indicator--aae4866e-6b81-4540-b5a2-9d0f366d4bce", "indicator--80ff7e2d-a80b-442e-bc91-c0e32b0e6e59", "indicator--ffca9c78-dcd9-4e21-863e-ccb1aba68cb2", "indicator--a72164b2-e753-4391-95c9-0754c6eb5095", "indicator--f057c4e7-045b-4e58-9012-36d5766ff51e", "indicator--61c18954-1f8b-474a-9c31-68e30967d0d9", "indicator--68dafd91-08af-4bd1-96e4-ca495a43055e", "indicator--3ad848cd-2425-468f-b06c-c2a0fb4b7235", "indicator--0428ff90-3885-4267-9de8-dba78ecff061", "indicator--90229a06-aaf4-424c-bdc2-7e5c77fa340e", "indicator--bff21837-278f-4f4e-a04e-8a318e3459eb", "indicator--fdad6528-00ff-4cf1-9ba6-2813f79b3568", "indicator--934d530c-348d-4d97-8ca7-a6178167cf6c", "indicator--b9163c00-c71c-4850-9e21-6191b946c765", "indicator--877826e5-c502-405e-aa15-df22cfb59222", "indicator--b09143ce-1537-4d9b-b491-4c308d51935a", "indicator--3e03e8e4-9bcb-4429-9b84-443b7dd3bbce", "indicator--1745c4f8-2b4c-48d3-8ac1-eb721700c18a", "indicator--db74dea8-6b55-4872-9448-5ea5347c960d", "indicator--ee1d5903-a16c-4d6f-8727-a0065eb532fb", "indicator--9f32c24d-0a63-4a0b-8b04-37aca1625769", "indicator--5c29dec8-fdda-43dc-8cd3-f4fc9f607c07", "indicator--44c1003e-b925-426c-87be-6b38a7b1fbe7", "indicator--91e956c9-0a6b-421b-9b6b-342259d1fde3", "indicator--37d876de-f253-4bbc-a838-26a941709293", "indicator--c31b7569-664e-4056-9f36-798237ddf057", "indicator--388aef47-dfec-4434-ac01-4b377ec1cb82", "indicator--1c9608f4-b197-42a5-affd-a4a0f774ee89", "indicator--3e79ea0a-d2ed-4938-a6ee-7e2788eebefd", "indicator--39240690-b956-4760-ab03-32b69af3b615", "indicator--893fa333-bf2e-49de-951a-4006af448e5d", "indicator--cee078af-a6cd-4fa5-88e9-7e0409cb1eba", "indicator--3d37ffe7-63ec-43ce-9666-8443fe7109e4", "indicator--979d0606-da5b-42b3-921f-dbc340bc182f", "indicator--8801fd72-663a-4c57-8e6a-0f6d048ceb22", "indicator--9ca0d30e-3740-4d0a-8be3-6e3194467bb6", "indicator--8527406c-2b6e-44c5-9159-e9bf76616874", "indicator--0a00c178-d2d7-495c-b56b-a5e18311f6a9", "indicator--fc294d5f-3b7a-42a5-8ec1-194cab51f29a", "indicator--d64ecbca-a4c5-467b-a586-c39a3e7f27de", "indicator--0042a6ff-66cf-4270-b393-0a4605740498", "indicator--73dd3317-2bfe-4a30-929c-85e2dbfb5cb6", "indicator--bcfa2d0e-a50c-43d2-8f61-41e8b562e356", "indicator--23242dc5-42ae-4a23-9ee6-062471b14844", "indicator--357ea70f-115e-4bb6-b43c-a8c700bb88cc", "indicator--f9dd1984-c319-46bc-8224-c261fa028792", "indicator--bdbe27bd-4d77-4085-9cc4-f066ce53cf77", "indicator--14376b84-4281-473a-b4dd-ac1977ba4c00", "indicator--8d4dab33-c49b-4bbb-af1b-ef368b59540a", "indicator--de544e37-8416-447d-a81e-f8330e629266", "indicator--6adf869f-24eb-43be-887b-18350cff55be", "indicator--19b0a5e5-44fe-458c-8e98-a7c30e4a777d", "indicator--a8a7fc29-9d60-40ca-94f5-2d04042ba2aa", "indicator--c29088a8-3023-4bef-83a7-3e79e5a7e924", "indicator--a2922d97-db7b-447d-9210-5dbbca21457a", "indicator--10b17e6d-6069-45ea-9a71-e4cc21c9c839", "indicator--c3544b46-85a4-4f81-b261-6be80aa7f9d0", "indicator--0a5faf49-89a6-4123-a1f0-972fe0e0b41b", "indicator--e1859683-fd1c-400b-9597-78564e829fb1", "indicator--bb64d5b5-7f63-4cee-b210-4a7882a426d4", "indicator--866bbe3a-4b06-4a8e-9303-2ccc08443edc", "indicator--6f9bbb1f-37e6-42b9-94fc-3e003b0ccff3", "indicator--ed590c69-0a4a-49b1-af05-fdf7a0054a53", "indicator--65ef095c-dbc8-4896-985f-78062e60db14", "indicator--5aa98fca-9f27-4001-8fc7-4c98f177ddfe", "indicator--7d2c561c-5709-42a3-a839-b9b5ae3222d7", "indicator--3dae66d6-9493-426e-bde1-f70bcde629d6", "indicator--59b1383a-351b-45e1-a672-bd29b3d4289c", "indicator--2ad01b25-9c73-4ae6-bed1-030b356c78b4", "indicator--8f312871-b50a-4df5-94ce-c9f8183dc8fd", "indicator--0d6ec973-6a87-4a1d-8c3b-c753685160bb", "indicator--ce4ddb32-8ae0-4fe1-a45b-bc753862521a", "indicator--e1801150-72cf-41b9-9d12-a77a199a3675", "indicator--72abe7cc-90ba-42a6-8334-38c7890d22c2", "indicator--89b30917-c91f-4f9f-ac64-dc29b3bf8c34", "indicator--8ef07203-1c45-49b1-9218-6aa45ab48c1f", "indicator--0807d2f7-58cf-4e09-8120-a0c68981989c", "indicator--50b783d9-8064-40b9-9e1a-aaa3c530f04a", "indicator--cf2baac6-e0f6-43b7-b5ed-c41ae706e448", "indicator--1570a86b-9489-46df-914e-934a2f08c180", "indicator--2bda958d-cf5c-4966-a989-c0c703b3b7ca", "indicator--a6c27d68-26b6-4ac9-a710-b97cd8106f7c", "indicator--5535baad-77f9-48d6-828b-ee5281578046", "indicator--24ae2995-d6bb-46a4-81a0-050087e7369d", "indicator--45d04666-64b6-4c20-bdb5-8de09f5769f5", "indicator--dd260c82-6b2b-46ce-9dce-bdb999ad95d9", "indicator--961391f4-4631-4230-9846-6d968d6a2dd8", "indicator--9302b06d-b306-46aa-b56c-648262b19532", "indicator--8642d7c8-3c73-408e-836f-bb4782a82918", "indicator--de7b9f81-1f0f-4694-9f37-6d73f0917ed7", "indicator--0665bd3b-1d59-4a8e-92d6-fccde37cc0aa", "indicator--8e0c2708-e926-4c7d-9cb6-15ffa53c3590", "indicator--c2e583b4-6e91-4d52-ab4c-77cfcb0544c0", "indicator--7af182ef-b501-4181-a72e-817f67d0d6ee", "indicator--c6d5f3f9-8399-47dc-9cce-37792b4a13b9", "indicator--46e0582a-2445-4010-bf27-9e9a758fcc7d", "indicator--de500e9a-682d-466c-b20b-b6f1515b07a2", "indicator--3a34aea4-d9a3-4e69-91e9-4b59fe356fd6", "indicator--d68b4603-1325-47e7-8041-935b308cde4d", "indicator--e82ca354-4052-48b8-95d0-c7f82cb57416", "indicator--08b535ab-71d7-4935-8e7d-2381d9ee6125", "indicator--1d85ab1a-935d-495b-af92-700b78a0884c", "indicator--9cd8b95b-fa00-4580-ba87-4af7e19806e1", "indicator--a1d46177-d3ae-47f9-8266-2b159bef111a", "indicator--f50e1eba-9408-43ac-81ab-3b41479017c7", "indicator--b97c6e46-8470-4fb6-8896-2726d08c247e", "indicator--fee34afe-ef01-4809-ad7d-3e2f6ab493ec", "indicator--2fc1ec41-8a4a-4816-822e-2a6a34397baa", "indicator--425ba2b3-a13c-4fc5-b3ef-a58df2bfe168", "indicator--ff8f9304-f45a-421f-8dc6-c7ee124e322c", "indicator--d2222517-b5ed-4a3f-8854-a96f8f5363f1", "indicator--69ec865e-c995-43f4-bfc9-408bb14010f4", "indicator--74081409-51c2-44c1-9b52-aa4d43aa436f", "indicator--18517b68-f95f-433d-b57b-74c538b67c49", "indicator--73267cb2-3a8a-44e4-aa0c-572459b7f3da", "indicator--b8407e56-4e3f-49b8-a266-53e70a975044", "indicator--15445ec9-086a-49c4-89b1-344a2025fc1f", "indicator--a1790da8-c94b-444d-8274-dc3bc08f18be", "indicator--80817c01-8723-4f71-8dae-ee1c691274ca", "indicator--4eb304b8-11bb-44fb-8b19-5ad6ffa9dad2", "indicator--75e84a71-7fe1-4143-bee4-1384642bfc1a", "indicator--d9adb793-56c6-4fa0-9b38-b11ff56eafee", "indicator--76ae6ae1-dd91-4bd6-866c-bc8ae7696655", "indicator--b0515686-dfcb-4daf-a32b-ba05b9351d06", "indicator--aac1d750-be31-49a4-ac56-4f9c870c8192", "indicator--10c8e4c4-b21b-4293-b792-fe35adff6079", "indicator--80e9378a-d378-4d99-b91a-0aae056d727c", "indicator--0599941b-acc7-4a0a-a538-4202715dfb5c", "indicator--07adee54-db96-4e43-a097-aa55f4ed8d10", "indicator--77da08b7-f54a-410f-8edf-aafee44d4a99", "indicator--b01b19c8-8be5-45d3-b83d-f7263dbd0f33", "indicator--f8ddcf81-aaeb-4ade-9aaa-5efb8019521c", "indicator--90f98406-1620-4dd3-bcd5-dd40365fe97d", "indicator--a078d48c-f5be-43ae-8b03-ba7aa0b6c28c", "indicator--f8b8e715-3de7-4416-b1b6-a2d8071d0189", "indicator--f59b6860-f59e-4df1-b359-779e35c4182c", "indicator--eb4d4d4f-0e19-4729-98b5-af586036684a", "indicator--7f9c014b-3de8-48aa-8b12-0538faf588d8", "indicator--ab1fce02-f527-4d2c-b7ff-bdf8e3db6891", "indicator--d31b4190-afe1-4a62-9cb4-9c97a99c0f0f", "indicator--23944d10-6965-4d6f-b6f8-40d8306f85ea", "indicator--d1a1e2bf-d7c5-4dd7-8c1b-ad86fcba6af4", "indicator--d49a2455-2471-4c97-b941-9f9b035ec9c2", "indicator--e3b3da1e-6d1e-4e92-9a6c-9475713d7a6e", "indicator--f38bfd24-608b-41f5-8676-bbe1b9e10716", "indicator--061f73e5-c5b6-4f13-b486-bc5066482d39", "indicator--8ed88399-4810-49ef-921a-8651ff9f1f9c", "indicator--090f9b12-cb7d-4406-8977-8f827d746395", "indicator--5205863a-b25a-4526-b4b8-288e79e89a94", "indicator--fe91ad74-a7df-455f-b46b-d0b125fc1b0d", "indicator--e738a425-b065-4f2b-bafa-6353e453f81a", "indicator--7dc8bddd-fa8d-4b16-bbef-091073ee8288", "indicator--15bba814-3ca8-4944-89d6-cb0145e0dd63", "indicator--5f65f259-e28d-48ed-baa2-e55e2510abaf", "indicator--4d0a262b-76ed-4c31-90d4-f92e8a5f3c3f", "indicator--291f52a0-3113-487d-a00a-4c156da25e49", "indicator--e50bc25a-9b0b-4bd3-acc3-7d01c6c4bf51", "indicator--fce53d88-12f5-41f2-8116-af3bea82b31f", "indicator--4a106e55-51d1-43b5-8ee5-709c0d1d4141", "indicator--1ee54374-72d6-4eab-8742-f93163bf5cb4", "indicator--61f0fe70-bec8-4f89-a9a7-9feeb8213adc", "indicator--8fd2f17c-e811-4413-bcab-891588ebd735", "indicator--6f266947-99ea-4610-91ad-ec8ab6056671", "indicator--d9f10655-7ad1-442d-9a91-2c6ee84388d4", "indicator--aa68e803-ffb1-45fd-b985-a11a953b3ccb", "indicator--9de21825-1db4-4c34-a055-c5ab85dc91a0", "indicator--c4b4ba4b-1ccf-4fa2-b871-3edb2dd650e6", "indicator--a438a886-ee66-41cd-b936-3731983aca24", "indicator--56181f80-29f2-40a6-b703-62204e767c60", "indicator--d90bc747-9f9d-4257-8ba5-8d1df60c6320", "indicator--212f55f1-463d-4a0b-93d3-fe9f5ae7e86e", "indicator--07aa61e7-fc72-4cb6-b1e5-79c8ec3b0fc3", "indicator--b29f55d4-6da2-4b4e-bc0f-0b689138e994", "indicator--eaf790b6-8be5-457a-9267-232c31ffecf8", "indicator--b795d7f2-8869-46c4-bf30-144524b703af", "indicator--bbec53b3-8ddb-4746-9f4c-7b0acb2158d8", "indicator--d1ad630a-21c0-4de8-8db3-338a927b37f5", "indicator--fc45f27c-23a3-4c9d-a4fd-7c95fe8a6e2e", "indicator--3ea42ae7-eed2-4719-87c4-46b42f9ac2e1", "indicator--e986978a-2150-4d7b-aae0-ef96ec60d4e2", "indicator--2558d359-9a62-48bb-bef3-493c376cf741", "indicator--b922893c-395e-40bd-a57c-ac463b8c86a9", "indicator--6335451d-45c6-40db-b590-3dc5883c5f8c", "indicator--95e28e3b-69aa-469d-9ea9-75788593217f", "indicator--b4c73157-f570-44ac-a1f0-37698b9db74a", "indicator--cd101d3e-1df3-424a-beae-698e406d4c60", "indicator--66b6f2c4-8d32-49d4-9f43-87ff198223a1", "indicator--7fd1a1bd-8806-4ac2-9469-3ad6a8fcdee6", "indicator--0e6f6c67-6ddb-4912-aac2-806451ef27ff", "indicator--f6ac6e77-cc49-4a43-8eaa-c39c169f0c91", "indicator--77f2030b-5283-41c4-8d2f-6bab6692f18f", "indicator--e832b3db-36f8-4990-aaff-3883885a8562", "indicator--6ca4ca9c-0b6e-41b1-996a-19604ecd9b80", "indicator--b11227df-158a-4239-b742-c9bc1ba5d250", "indicator--859fc799-eac0-4601-8a17-656467c54702", "indicator--5b77b31f-9f75-4639-934f-196a31b55024", "indicator--26a6d7e8-001c-4a03-8045-edbbf63e0492", "indicator--716d4abd-0aaa-45e4-b1f7-8aebe3b41eda", "indicator--f9feb40e-82bc-438f-af65-cee5495bbb7a", "indicator--cb2fc915-d45c-4ab0-827b-44ae9c64e313", "indicator--fa1b3b27-d5e6-4fc9-a2e4-afb753ff24c3", "indicator--9d26f765-7209-4f48-b4f2-ef52e0cb3314", "indicator--e5356068-4eb5-49d6-8ce4-4e3fea5009c5", "indicator--b2482ae5-e1d0-4406-98d3-3ae15a06fd40", "indicator--2319a1b3-2c4f-4431-b3f8-7c8db0e6cab2", "indicator--c231d174-7c46-4834-bac3-b7862206b99a", "indicator--7013af0e-cb68-4482-9ee5-6aac14b91d0e", "indicator--b51ad54e-183d-4ae2-9ac8-a9c5f366df4a", "indicator--298b337a-024c-4862-a8e1-4de44af444eb", "indicator--d79599d5-d47c-4bc9-8586-fc5a1205b4a7", "indicator--75ff4ca3-0cb6-4e61-a0b3-11ccc3d9fc06", "indicator--507f12ae-6f88-4e6b-8564-ce12054330c3", "indicator--99cf8b61-6db4-4e87-8957-70a2ea390847", "indicator--a1b1332a-3209-447c-8064-f273b60de17f", "indicator--1ea86704-efa5-45a0-9551-2d2927280a3e", "indicator--b0c801c7-bb05-407b-8cac-5448f66a7901", "indicator--9b4e9d8a-f6b8-4c98-bac1-9964fe665ec9", "indicator--0536346f-8b6c-4ab8-ba71-0dda788fe1e9", "indicator--efb0f346-2a0f-4379-9b36-dc072a9c922c", "indicator--d1fcd781-3ff3-4e20-9b22-1ec8cec726fd", "indicator--e3e20c65-f13a-49b6-bdde-8582f288a721", "indicator--19fbe216-70c7-4aea-ac18-36b62b49f570", "indicator--6490ad19-6b13-46a6-9186-379ed0c504ef", "indicator--99140def-4f0b-49eb-86e4-a4aee8d5cc53", "indicator--696efa5b-d462-42ba-8a5e-9ea76454c4fa", "indicator--6aaad87b-cb56-4380-93fc-b01d1fef7b26", "indicator--7de82b1b-0f5f-4ae9-8b0d-a42797325859", "indicator--1469fa18-2c3b-4169-86af-97054c4318b7", "indicator--cecb8e53-0fcb-451e-bcf6-4d540b919432", "indicator--ff5546a2-5c1b-441a-9fee-9cb4ead25dd7", "indicator--17dec446-c848-4912-936d-c7b1469241e7", "indicator--8d4b5fcd-a944-487e-a736-2296b53d7382", "indicator--e71eeb8d-8954-4260-bbdb-31098d94d663", "indicator--37882545-4df0-4e48-8fff-a42f14215a8a", "indicator--1f95633f-454b-4ed0-a830-59c700ab15d1", "indicator--6089da9d-a629-405e-a190-78f68a50bf76", "indicator--69fd33b9-fc4c-4b47-81af-bfc739324b43", "indicator--0156dbcc-df46-44bc-9a6c-0322502dcab6", "indicator--6e88aa4e-aafe-492e-a37f-05f7a26f0ab6", "indicator--c9308aa9-df47-41b7-838b-f2521112a4f0", "indicator--d0bb629c-293e-4a02-bec2-8231f1f96bb6", "indicator--dfefab70-eaad-4cb3-b8a8-b4ea155be838", "indicator--78b78b72-7b7e-40bb-a600-db899413de1c", "indicator--91fd6618-36ce-436c-ac85-fef2f2cabaf2", "indicator--0de64213-d8d3-4eda-b789-e52268dbb132", "indicator--78d9fedb-a85f-4938-bb44-e1b7a9ceb45d", "indicator--f79933a6-6e5f-420f-85ee-097096e5b33f", "indicator--d410b8b6-80d7-45ae-bc49-bed15bb71de6", "indicator--1fbee8be-7db0-4139-a8db-ba4680dcb815", "indicator--4c2c200d-080c-4253-bcda-6cea25584735", "indicator--5f266fbe-12d0-46b0-adef-74be64bc0c66", "indicator--e8f9d2a0-d11a-4b57-9ab8-68b77b840a79", "indicator--5915a58f-8f4c-482d-98ae-05a74bd92673", "indicator--fd9f708e-5d7a-441b-9dd4-311db090ffa0", "indicator--34a248e8-5cac-4f5e-b1b2-e8afcc4182cf", "indicator--11cc011b-ecac-4a61-b5b2-fdb048af6f29", "indicator--54a89d7f-1dff-470d-8db7-b054baa7b869", "indicator--dc71a3ce-d567-4440-ae1d-fcab847cb5a3", "indicator--43408e8c-120e-4c58-8bfe-533dfea295fc", "indicator--4c0fb7bd-47e8-4eb9-9499-fff84e5bd6b0", "indicator--c015772e-1437-4232-9e7d-3cb3b955b420", "indicator--c5801733-860d-45f4-a9bf-be56049557ce", "indicator--851f1dbc-4f6f-4a20-b09c-cea5244336af", "indicator--d2c42588-a4b2-4527-b071-e62f58550e27", "indicator--916263d2-624f-4617-86a9-63bd35d4d589", "indicator--c03f4424-6530-4646-a00c-121f4b655d03", "indicator--39f7c144-a9de-4a93-a8a2-d4b533e3e31e", "indicator--93429f14-fc5b-468e-9cb5-ee35c15f171c", "indicator--78ddd162-778e-4ee2-8830-a48804264c71", "indicator--6b3993af-2b76-43fd-a723-7fa13ec3e3a1", "indicator--08bddb47-eca0-4528-918c-3dbb0c378b0e", "indicator--063555e6-6a81-4e65-b631-ee273b8c19ec", "indicator--f7eb0037-bc53-4f0d-bbb7-82bd5adb9019", "indicator--7de49f54-b984-408d-a108-c9ce8c3192c9", "indicator--95237565-f0dc-414d-8d9b-0ce9cdabd0b5", "indicator--baf304bb-73ff-4357-9981-0be44d6b9485", "indicator--14a01b3d-c39e-421c-af5d-ddd0d2054b9f", "indicator--a4023739-8cdc-46eb-ace5-3483230ede90", "indicator--4e6d216f-9a58-4748-8e18-db429e2f642e", "indicator--5a67344f-3644-47fb-885c-4238a0474220", "indicator--1b709850-8d8f-483f-806d-800317969c18", "indicator--0a47fa40-a1a1-4bbc-8a5b-81b29dcc3b10", "indicator--e91236c5-87cc-48f9-8bee-fba63c23cfff", "indicator--cbd347cf-8ac2-4776-b783-585dd366ff25", "indicator--6da3d1fd-6d8a-4584-a6d9-58c7a556a120", "indicator--87ca702b-c595-43f9-bc5a-375a09330e6c", "indicator--2604cd12-4b1d-4945-8157-1ef6c35470b1", "indicator--f5793e6c-85b3-4251-b710-80db7d951214", "indicator--14b67a7b-a0e3-4f51-ae1e-f0b0d434e724", "indicator--8d58492b-9bae-4c5b-affc-de17a1132dc8", "indicator--01509345-8fd1-4cdd-aab2-7abf34b3ff13", "indicator--fa046610-9e8e-4ed7-992a-95e6699548a5", "indicator--2dde4b0f-f7d6-4403-bfd7-eab9263e1972", "indicator--11575c4a-68af-463a-8c04-7478741acee0", "indicator--c35afc9b-0d31-46a6-9b85-e00676e16f32", "indicator--65f968ad-1b32-4256-9dec-a9ed803ecd35", "indicator--be4f24c7-8236-4658-ab76-607c5e490c72", "indicator--cf98027a-831c-406b-8dba-a310225e0347", "indicator--0a9fb71c-d36c-489d-8713-f15ae31b7791", "indicator--f726e602-476b-4b12-8174-00b6c6c0b918", "indicator--3c249d00-1a89-4ec4-8edd-61c2676f2058", "indicator--e5516f7c-f26f-4241-9c8c-53fd98264f17", "indicator--12aa27fe-7c9e-4522-ba0b-8795dd7e3917", "indicator--b4ec5e24-76a7-4e76-8872-4f4401b88e50", "indicator--21a9e692-1b02-4fd3-9a2c-6028f8c8a8d8", "indicator--759fc563-523b-4d64-852c-b4c2452bbfed", "indicator--a84ea4ee-a842-4b11-8b79-dc8872b6ab9a", "indicator--6b7f1191-21ea-40c7-9778-c1415034973a", "indicator--f5f6f42a-fccb-40a4-b932-21d62bb79d42", "indicator--955122a4-ec0f-4839-a52d-2a030020de79", "indicator--7c2558ce-4769-4a83-b767-9cebe524b2ba", "indicator--4b51db53-9b3c-432a-820e-20443fa5a39a", "indicator--c7ac94e6-485a-4900-a601-9ad197774d05", "indicator--bb3a0ee6-51a8-476c-b0b2-80671b6e8305", "indicator--9bdfe9eb-a7f1-41a9-9b09-1c9a261ff420", "indicator--0f9e514f-4824-4a34-8955-3f321609777f", "indicator--4804867c-ab84-44b9-9586-fa1447c4192f", "indicator--1f818558-c70c-4c0a-8667-50125a6f2b66", "indicator--5ec14f6c-ce54-4fa1-9765-f46747eecd59", "indicator--84bed087-768e-4a1a-99d4-bc2eeb7773e7", "indicator--1a3eac77-6360-4528-ad9a-e8eb5125aad3", "indicator--e0374e98-b17b-4539-9bf8-0c2ab6e9b15a", "indicator--825240f8-66e8-4f01-a090-b0289756eade", "indicator--15be54d6-88fa-4ada-b8a9-c9d9d24e99d3", "indicator--0cfa8c31-3f0f-4c4b-bc55-f3a777cfd867", "indicator--310c8e40-9cb0-4405-be5f-46e688773984", "indicator--a45e4764-cdfd-456d-8e47-80303c5b22c0", "indicator--04dfdc7d-4cb8-48c2-bb2c-39decdb4928b", "indicator--74165a36-feff-4189-8b48-03f4c30640a1", "indicator--0ad34e8b-f1fa-4411-bea7-ad48337aaaac", "indicator--07e27b2b-c9d0-4954-9f93-00a22a512ca1", "indicator--1109f306-e1c2-4e76-bac6-7c8cf1dbf0d3", "indicator--0a062373-98f1-459c-ab9d-bca9145b518c", "indicator--a5669328-2a77-4779-ad9a-d539b18363d9", "indicator--9460c7e7-086a-4170-8140-e28ee9617681", "indicator--3848a5b5-5d6a-463a-93c6-a55fcc3993ce", "indicator--72a7b17c-4348-4663-baad-f272e6ac7737", "indicator--dd4aecbc-9d34-4a94-8ab6-ad24eb999cdd", "indicator--1fa32889-94a1-46fe-a11b-7765e2cd59f3", "indicator--b1cdc754-42d6-4998-ba17-62d38b5e7c72", "indicator--ca0299ee-9b2e-4ec0-a51e-f04c3ca5ee75", "indicator--3011def6-e2ca-4d74-af6a-2174e514dd2e", "indicator--40bc9100-2716-4720-b158-02b69725e007", "indicator--bd766f37-322e-4a80-bff6-8bc9d29bf05b", "indicator--bea5faf0-a43a-434c-9fec-6216921fb7a6", "indicator--0bfb096f-0e08-4bcd-9e28-54c30bad3389", "indicator--89406379-3f7e-46fb-9d2b-854ad61fabc4", "indicator--3ae7bc5f-aa1f-4533-8ce4-e1e8d497b325", "indicator--99ad4908-8c73-49f7-983d-00a27fe291eb", "indicator--44905439-2b72-46d3-8fce-ca4b69da1121", "indicator--5e717508-003e-4df3-a446-029fc28a23ac", "indicator--443d4915-dfcb-4c08-993b-0178d1074d86", "indicator--d016b65c-0609-4ca3-a950-ca4939b778ae", "indicator--5e78965c-19c6-44c2-8c42-46c787d71042", "indicator--70993529-b951-41d3-adc3-dc39985e0c89", "indicator--4fa5d839-0ed9-4ca8-ac7f-c6f9723fbbbc", "indicator--6e10124f-6149-4a91-a087-a191ac8e3772", "indicator--cee0164d-8503-4f40-9a83-2612d39b8c32", "indicator--e3ec9bc9-1676-40b3-be57-5d5ebc6b47ad", "indicator--c4a01b48-0162-4c7f-b78f-bf34ab2e9cea", "indicator--60ea27bf-2be3-4670-971d-d6a0d566298f", "indicator--199c2197-e448-4459-8f4e-e39f524e9bad", "indicator--7662e820-8f19-4e1c-b650-88216225f343", "indicator--a5030c24-efe5-46fe-a245-07c6400e01c5", "indicator--c0ddfd51-4ee7-4936-83f1-ff60bc4576b1", "indicator--4ebcd256-8187-4c91-9251-7910b0484ef2", "indicator--6166ed99-c7f6-46a0-8d4f-abc47f53ccea", "indicator--57fa243c-c1a7-46c4-a8a0-94abb0d803e8", "indicator--ea996144-e0ea-4570-b720-99587edc4b21", "indicator--8357de59-ba40-42da-b897-10eafffc9aaf", "indicator--c012ffc1-69df-4240-a376-0d64b50bbd11", "indicator--cf2cadd0-f20c-46c5-9bd4-36441a0fef1e", "indicator--7bbb1e56-041e-4b6f-9ef1-0d37762f781b", "indicator--89d03fb9-3cb2-41b3-8ba2-e3fdf92c200a", "indicator--3a31b6d2-121e-44b3-8e9c-881ace4f9058", "indicator--146f546c-3eb3-4d79-b12a-24ba64b32a11", "indicator--e06857b4-8ee6-497b-9aad-37357a48da54", "indicator--2354ab1d-e4c4-4e66-a918-4ebc27f027fa", "indicator--03f6faf3-d97b-4f92-93ae-56c7768a7c7f", "indicator--bf68e32d-d511-410f-80dd-9eac84ec1e04", "indicator--1102eb6f-6a6f-4ac5-befc-81f14b89126b", "indicator--66ffe985-b2fc-4a6b-b2e9-3bfec81cafd1", "indicator--396987f6-61d3-473f-affe-6a9533bccb29", "indicator--aecb9df1-5be0-4454-a0f8-1e7b4fda5cf5", "indicator--f18eae88-8fe3-4500-9554-7b5d12d3844f", "indicator--3973c1e1-dbf6-4757-b51a-9dd2bc0dc67f", "indicator--8b06572e-6b9f-433c-9b3c-9a64ad748488", "indicator--0373f741-d1d2-4041-b710-0dd6a659b31c", "indicator--59ffc597-cca1-4b35-b150-985d191cf1af", "indicator--a98b1f2c-0a7e-4142-9f9a-463400649e99", "indicator--0468dfe9-ac36-4b9f-b34f-68f3178ebde4", "indicator--85da1b21-0d31-49a2-8270-d4073c2f4a83", "indicator--4e341b9a-c98a-44a0-b7b6-4dede739e157", "indicator--64b15cf3-10de-47da-ad97-e2a7def9165b", "indicator--e8a7880d-4fc5-447c-90d1-f4c2f6895c82", "indicator--f00e9fda-aede-4766-a721-160d80343789", "indicator--4bbbb21d-7588-45b2-afd3-845904d1d09a", "indicator--dd3925be-691a-4095-8a52-abb978de2d24", "indicator--190885b2-70bd-4238-aaf2-2c71a8543fa6", "indicator--15017cf7-9c73-437a-92d3-1779886c6ce7", "indicator--6710187c-f15c-410b-ab41-97f2a0f37927", "indicator--068accfe-2091-4821-881a-1de7e6b7d398", "indicator--87167f7a-893e-4f97-84bf-2790e68f39b2", "indicator--8babc062-d704-42c6-9be9-f97b26d5ed07", "indicator--4a41e300-dabb-4a1b-8544-7970579cd636", "indicator--c6c73571-315a-4814-89b4-d83e9af92b6c", "indicator--f4a10bdf-bd06-4670-8887-1a35e5156b37", "indicator--5724410a-75d9-47d9-84b8-21cf41b2c119", "indicator--f3dd7f56-fc20-4c3b-bf5c-655a9fa25bbf", "indicator--5d5a03b3-d0d3-4790-80d7-4ec3a16173bf", "indicator--da21c62a-b77e-4c91-af7f-218740372d32", "indicator--df39e01f-ecd5-43a4-90de-d3600bb9853f", "indicator--d8bd9ad0-907f-4c27-8a0e-07e3987ec043", "indicator--dc1074af-682b-478f-8689-accd595e508b", "indicator--c9462dfa-0581-4740-8cc2-a94f27be2fda", "indicator--45326e22-0e81-40bf-a3f6-6ba60057ecce", "indicator--768c6a7c-3bc4-4cb7-a0dc-30b2e42f41e9", "indicator--c1426dff-ee04-4714-85b4-24d37f0ab257", "indicator--982734fb-cd63-4a0f-a450-59d595e9cd4d", "indicator--86bb2925-3a24-4916-b036-1702de7d684d", "indicator--43967ec3-4542-43f3-8402-8129510841ef", "indicator--92426609-bb03-43ac-90c6-4ddfd8b6c962", "indicator--f12be2cf-feac-4567-8f5b-83be92588a39", "indicator--dbcfb08b-88ca-4f30-8aa3-6a3252af4771", "indicator--1f090061-aef3-4b0a-8e7b-1a20e050e337", "indicator--afa30efe-7006-4ebf-bbac-88a3884014dd", "indicator--ccf16480-9f54-44d8-84d6-f48fd23fd8f3", "indicator--4fb1a586-8373-4178-9cfe-4e6dbdf6a1f8", "indicator--79b7038e-dbdb-4b63-b7df-b28f70d5ab42", "indicator--445c249d-6dbd-4394-b105-2102ac4dde88", "indicator--f659aa5f-3a23-45b5-b027-7248f9f17510", "indicator--093177ce-9a7e-4613-9e24-c0fcb20752e7", "indicator--b8754b25-59cb-4fad-8e39-c3beb4e85d88", "indicator--d136b6a0-fe4b-4887-afb0-cf5d9adc7418", "indicator--9f7fe06d-4e98-4931-88a1-2d3f7cae6d70", "indicator--c37fbb08-ee7c-4cdd-b7ac-9cddbbe874f3", "indicator--ebb772c6-1654-43d0-9d63-0d23531f1cf3", "indicator--d1622399-5a8f-4e76-b892-93a30753e87e", "indicator--cbb8fd12-0a48-4abc-847b-c7bbd298f8af", "indicator--51bc5543-6c36-4c4d-ac92-3732318783d2", "indicator--844e36e6-2729-472c-a946-f18bc2d5f3df", "indicator--7d3e7867-e7c3-4e86-b3b4-0316525274f2", "indicator--d42da3b5-7c53-4e3f-884a-27c79a64368e", "indicator--d048ee8e-9de5-49e1-b817-083f6730f728", "indicator--a96084ac-1a8f-4bf7-9abe-9efec5cf344b", "indicator--373d357e-2524-46b5-b73d-83a280dd2c1a", "indicator--0617f017-062f-4b7f-aba0-83be67381dfa", "indicator--2aaaf55a-7217-4db7-a4db-b389ddc81726", "indicator--8b6185d2-cb80-42ee-97f1-98c4a5c3c795", "indicator--4c1de60b-3636-485d-ad17-43742b898611", "indicator--80a238d4-45c4-44cf-95ba-456d370b64fe", "indicator--4c0153f2-9fec-473f-9b8e-a7309681e519", "indicator--9f46799e-5152-42fa-84a9-f1fb7abd7ddf", "indicator--40136c3b-da38-43cb-87a5-e4a62498d723", "indicator--0aa02d0e-7874-4bbd-9596-9a0ae48bc009", "indicator--f001a3bc-ec1f-4e1e-a33e-f784674111c5", "indicator--7c7f2dd6-e376-4c45-af7f-3747df9fe7bd", "indicator--47bc8864-24c0-4a94-9a4d-cd1130707fdb", "indicator--434a434d-4531-46a5-9d41-ef13d32c6af9", "indicator--1e173ef0-2af2-4b7a-816e-a6a6178679e6", "indicator--55b65b87-daba-45e4-9168-88bb48a866da", "indicator--131bb784-7832-42df-8ea6-55f74cbf4926", "indicator--776681dc-d29a-4b06-9b3e-c6e174c867a6", "indicator--089e60ee-e242-4807-b6ce-a029b2f09d4d", "indicator--eb887deb-009f-4579-bfe0-70f4391dfe52", "indicator--76dff190-1f4e-4c82-aa59-94dc9a8e9ebb", "indicator--9d61dda2-b47b-444f-9c77-a8c9034474ad", "indicator--9992dced-52db-4c77-8a0d-aad27e19afcd", "indicator--52902b48-e4d0-4c8c-a787-12f7189ce7bc", "indicator--b52b40a7-8f31-4e55-84b5-840f932690f6", "indicator--0be36a42-f63c-4a3d-aa55-542c697cac3d", "indicator--26dc93db-b227-405f-9e26-5fe558c6eeeb", "indicator--b0483e6e-cdfc-4d80-bc2a-40e8d4fdfa3b", "indicator--e6ff9d89-e1ad-4e7e-979e-e53628a47a45", "indicator--e2ff3d2e-1d21-4b06-b0d3-024182cb8fee", "indicator--961ae2e8-5dd6-4a2e-8396-0f446c4cde2b", "indicator--b3d603f5-f991-4314-9739-97acfe64a3b5", "indicator--db3a7035-79d5-46c8-bcec-8113dc23a9b3", "indicator--ccbf2381-a60f-403e-8769-b89271e144bf", "indicator--c6e9094c-0582-4d58-8c2a-299a67dd10e5", "indicator--a1f7cc14-7f36-4117-8e54-dd8be4b0fd7c", "indicator--54c73387-a0ea-4838-8ec6-f988ce99a22d", "indicator--bccaabe0-bfd0-42f7-b30e-a1260fb899d7", "indicator--0c5f7d8e-8cd3-4d5d-bd09-4441777c2a3e", "indicator--81261593-9ee1-4b5b-95f9-e43ef9e48579", "indicator--3456ec38-d910-4f5b-81ab-2d9073ddb8da", "indicator--9da7c4a8-ca33-4fdc-859a-4c5fbfbe232d", "indicator--63a1bf1d-ed07-4d2a-9f82-9b3d94a7694f", "indicator--17601083-dfe0-45dd-aa2d-ba88ab5eec35", "indicator--f9673b0c-2888-4caf-b26a-371ef36c2be2", "indicator--ef0c6032-efbe-47f4-9365-c0d32d910e11", "indicator--6a4a4994-07d6-489f-b260-b2d48d3e6fef", "indicator--d437afb9-f353-4705-9368-a97c93551a2b", "indicator--91cb9d91-81c9-40e6-89fd-53d29ac13099", "indicator--12595fc5-923d-49b7-bd11-553429b4dd02", "indicator--7ca0b1e0-6b75-4833-8c04-3f9d86f1c15f", "indicator--463681bb-279e-4be2-9e08-aea6b7515dbd", "indicator--3c3f27dc-3240-46da-a6fb-6170b00ab5b7", "indicator--29335463-07a7-4fa8-9cbb-c9051066d87e", "indicator--92479af3-d58f-4e31-a664-5df6f207831c", "indicator--79a64893-5c4f-4ce4-8670-6414a518ff2e", "indicator--08af1498-14db-4eaf-b844-f18d61464c64", "indicator--8bcdd34e-6be4-4df4-b120-201017199af0", "indicator--dacfe907-3859-4b5c-9955-832676f6f101", "indicator--24c7623f-d8fc-421d-9f63-1b902a61346f", "indicator--6cfe583f-e0f5-4c27-88cf-84ae0f2838d0", "indicator--7b4d32e5-bb26-43b7-af12-c8e2f72a4d4d", "indicator--1d7de590-8fd3-42d8-ab85-9d0e1ef6a262", "indicator--c30e0575-48b9-43ac-97b5-62e6824cdd3f", "indicator--44f6333e-81e0-4342-9566-15ea5089dc74", "indicator--b46229b8-efa4-4110-b334-07eae03e81f7", "indicator--32d0cb2e-4984-44e8-ac19-bb0fb66f8b43", "indicator--896133fc-85d2-4d16-b8cc-cbeaa0d9533e", "indicator--a6533b8b-2453-43d2-ba30-18107303e91d", "indicator--413f3848-f752-4dee-927f-69f32642ea73", "indicator--03c706a0-0309-4f18-b8d1-60f101ecc94a", "indicator--ff16a388-829f-4021-9407-e8b1a87f8612", "indicator--fa1e4f29-e3d9-467c-8529-89e77301c326", "indicator--0b230b7c-ec05-451d-b799-6b21db080be6", "indicator--b52329c9-2e29-4dec-b8ce-4c90d6c9fa42", "indicator--1aa7f140-1a4e-4204-883c-a6c9049bc264", "indicator--17dedcf7-6bb9-40a9-971d-ed2f85dfe9f2", "indicator--ff0c5ecf-c81e-4175-8b46-cf31bd9a550d", "indicator--36c1ad8c-7791-433b-b581-37f9591ab1ea", "indicator--cc751885-f74d-480d-ae9e-b3ff8d825ed8", "indicator--b3c1eb2b-a3e0-4a05-bac7-c8847a47f043", "indicator--167d48e7-e396-430d-bb6f-9092c65068e8", "indicator--770ecbff-dfab-4b3c-8e96-6d8f7806fa22", "indicator--7e22ab88-f519-4f3d-a844-738b8e4736d1", "indicator--0509bb47-5078-4aee-826b-95f4c2ed8e5a", "indicator--ad228fe9-456d-4f92-b463-f9c02c6a7358", "indicator--7d54e43d-2970-4456-9094-e8ec5fa3b54f", "indicator--53a80a84-94a9-454c-8408-7fc8a061f776", "indicator--94b3a38e-37b1-417d-a844-2a9963e3686f", "indicator--5e8f1edb-9bd3-4856-ab31-13352d4c8442", "indicator--76d18a70-3205-41ad-9d75-d661c3b10b3e", "indicator--30085ac1-da5b-42a5-bf9c-84817a7e623a", "indicator--45bd02d5-9e64-4b4a-b75e-50ed4aaf6a54", "indicator--f3e10a08-ccbd-49ba-8592-2c4fb62e239b", "indicator--e37d504b-80c4-4c65-b433-880cc03a93ba", "indicator--93629682-934d-4c26-8e16-244cf3df7614", "indicator--c9940364-e721-4ec3-a2a2-9ae3a9a5645b", "indicator--19286844-e83f-4df8-91ad-c2af8d1cd8a6", "indicator--2e6cffe4-b0cd-4192-90bd-d8914e2685ff", "indicator--5a11d1a7-9157-414a-9986-d8b6c3d7dd24", "indicator--0cff098c-24f9-4ef2-b327-a345b6f35f51", "indicator--a092bac0-4e49-47fb-ac7d-a71fa08c6e45", "indicator--d0432ff9-fa23-4c75-9fb5-9c582dadb652", "indicator--bcc9ce55-37a1-40b4-9213-73ad6e03f12e", "indicator--3256c845-f5d9-45e5-9281-2f0710bd2259", "indicator--81df19d8-bf71-4a4a-ad8d-f18dda8bc0bc", "indicator--e0188c07-3ad2-4406-b0c0-f8e4248968be", "indicator--dbaee9b2-422c-4b1e-86a9-1a3eb4f8dd89", "indicator--1c672152-333d-4ec5-8698-8aaa2f1a3cd7", "indicator--222f0917-acb3-426a-a3d6-316456c8bbed", "indicator--4b39f8f4-1b64-4226-acf7-3b8711a2539f", "indicator--b1835e6b-550c-40fc-aa01-5c35d4eed51d", "indicator--77f1e4ce-a5ee-4b10-a639-3f3b038d2e38", "indicator--4fec117c-3796-45d3-9c90-462db1ba079f", "indicator--f2dc5a6d-2ea7-4e0d-9e0a-14353545317b", "indicator--87eaeb19-a868-4dde-ba88-e844e61acd95", "indicator--976adf9c-5a5e-4333-bef4-54a1f7463280", "indicator--177d503e-13d6-443e-a472-36605597d56f", "indicator--9ace01ac-eb40-4120-b879-735a50b31f68", "indicator--3c407af8-e189-4ce3-97b1-71d1f7d10450", "indicator--32cbbd69-f3e7-4b5b-877c-1926c5077495", "indicator--6eda1f04-b6cc-480c-b1a8-9f0f5ac973b7", "indicator--01df0c37-a0ff-40d8-a88a-9216bd089b1a", "indicator--fd20292b-9481-471c-8b5c-75d194213b1e", "indicator--939b192a-002f-41ae-b727-fdfb8502762a", "indicator--9b624a82-438c-473d-bc49-03c512209370", "indicator--26b8d0a9-0280-444d-9549-730920cd469d", "indicator--af132b59-ae1a-4ffa-a17b-7b56e071fb51", "indicator--edbd0e35-2f91-4835-b124-b569a89ab0dd", "indicator--d263d866-1c91-4047-b76f-24069ec14234", "indicator--f5f8657c-1902-404b-b21a-d2da19a77681", "indicator--e2696915-e2a3-47f7-af15-01c0451b6c74", "indicator--ad789788-ad4f-4ced-9699-73fc567c5b89", "indicator--632a168a-a7f4-4ba8-b566-661180353f6f", "indicator--d27d062f-2c8b-45e4-b8cb-9d27b72e589a", "indicator--51491fa0-ecb0-4c54-a407-109bdddcb6b0", "indicator--a98ac818-04c3-4dbd-a43e-8e2a1d588dd2", "indicator--901e3daa-7a0e-4f55-874e-2a1ad690ea2d", "indicator--a0b81a77-1002-4b56-a9bb-c873cb19a244", "indicator--fa5739eb-5814-4250-abcc-626253214466", "indicator--3b6968bb-21f8-4256-a009-f604a2c389ba", "indicator--4dbe8c2f-6fb7-4279-8338-e00eeb83a739", "indicator--27a71328-6beb-48ad-931d-d19bb0ecd405", "indicator--c7960633-be4e-4fcf-b014-422e008be339", "indicator--a4784d60-46f9-4e1e-b0e9-ba3d60336176", "indicator--0f5c9aa0-413d-48dc-8fdc-2696da1ef1ff", "indicator--f4297d04-e1d9-4b65-aacb-6a2ac3e67d78", "indicator--e4d18fd0-f715-41fb-a9cf-af583dc993a8", "indicator--47d6ca90-5757-4dd0-ab9e-3c6973194d9f", "indicator--e7c5b955-422a-4d50-a469-0325af3aeea0", "indicator--23937396-9a3e-4451-96c1-c1a0db7ef49d", "indicator--4eab7342-7bee-4d6f-9641-247cbdaff9ab", "indicator--89bea275-f2e4-41ac-9390-1f3141f1b1c2", "indicator--8bfb3ee5-35b9-40a5-a371-221c663970b9", "indicator--97ccaa71-38b4-48ac-bf86-26765cfb4f37", "indicator--ddbd61af-31d5-4dea-975c-1848ff7f61f4", "indicator--e3ea9134-eb33-44de-81b8-4a2abe399d59", "indicator--c9a99d2c-ac3b-4ed1-a0d4-03fde760a024", "indicator--d99d8298-aff6-4717-91d2-00f3f2460121", "indicator--7d0bf7dc-72b7-43fc-8aaa-326fdab404c2", "indicator--efaf92ef-969b-451f-8578-fe48046ee627", "indicator--0bd516dd-3069-45d9-a1c3-68a7510112f8", "indicator--2161911f-e2c5-4c8e-b30f-cbdfa2266866", "indicator--d4339df2-b70f-4bdb-a80e-d0175ff177ce", "indicator--79ffe64f-de5c-41e4-89ba-7811396caa51", "indicator--252e3170-61ae-49b3-b021-4d874f5bf078", "indicator--ca2c4d7c-12fd-4867-8d9f-9e0ef0d55e7f", "indicator--f0678bf4-e8ae-4a08-81b7-eb0490b021a3", "indicator--e44f2737-f262-4584-b54d-6b5ea9527f8d", "indicator--4735f046-a531-4bc1-8342-830139260fd6", "indicator--88cac386-bc0d-44a5-ad76-c1befcb7f8cc", "indicator--1d759cdc-1416-47ab-9872-d2119a7e5764", "indicator--58f84ba3-4b58-4c48-87a9-671e44b6f7b2", "indicator--10f795e2-7c49-41e4-a9d5-1390d88ec92b", "indicator--bcc0939c-f932-4f57-b04e-ba3c1f8d86b5", "indicator--ac77a316-d388-4454-9a9b-885e6776de60", "indicator--ba9b7294-a61b-4c68-98ad-27f1681a3c7c", "indicator--3e0d1c95-9619-48d4-8cad-988a798e746f", "indicator--72a8f84b-ecb4-403a-acde-4b20d51007d9", "indicator--f7eba2ab-6c16-4029-82e3-246a1900efdd", "indicator--6ba7fc1d-fec4-41b3-a1b9-d2bc42539977", "indicator--07643479-28dd-47a4-9c87-bd77cd187188", "indicator--ce6558cc-b3d9-4efa-83e3-e53189a0eb04", "indicator--08edf383-974e-41fd-bf41-922cdb2b2727", "indicator--45b3ad58-d9d9-4f2f-b592-b8f62c109ee1", "indicator--766ca5c3-bfdd-42d0-8442-5724e5dd9c81", "indicator--52af8387-5a58-4ce1-bcfd-e928459fd100", "indicator--5b999e69-a41b-4295-9f65-f7f808824034", "indicator--f1693167-10d2-4afb-968c-446fa28b6927", "indicator--8fbacf3b-cf55-4662-b8b9-1c47f6df7f21", "indicator--4af6b760-0cd0-4efb-9315-2392239e9ee0", "indicator--f56a6e30-6c82-454d-b58b-337c967e5026", "indicator--c8f3b189-ae66-4dbd-b87a-8d94e6494084", "indicator--9fabfda6-4600-4e17-b360-0f25560231f9", "indicator--fe3bf13e-f190-479b-acee-5e0f3f210c31", "indicator--b95ae67c-4491-42f0-8cab-5ebb322d00c0", "indicator--6d7a9e90-7748-466e-9d32-0781a4adc073", "indicator--f911c4fc-0a0e-4ea0-9c15-3bed204846b5", "indicator--fedcac72-e039-4511-be3c-a9accb073143", "indicator--601fef37-82bb-4ea7-9ff4-bb8e1938f4de", "indicator--edb14d4e-c8c2-4c8f-8f0b-9bd40f1065ea", "indicator--3e759138-7ea0-47d5-81a3-58982828d14f", "indicator--9f4414ec-81ca-46c3-ae14-d0b26f4ee4d8", "indicator--a54d5cc2-8883-42bc-bf7d-bfd789c76870", "indicator--ae689587-15b8-4222-8e38-9034f6ddb2b4", "indicator--1f55f432-8c11-472b-960d-ed7d18dd3cb0", "indicator--817c2512-a975-44f0-a2fc-509a132056f9", "indicator--0bdd7b55-98bc-4771-977e-daf8e5a85cae", "indicator--dac27b9d-d1f4-41bb-9365-4a132d8183d7", "indicator--e2234343-b980-4ac2-87ef-187e1c4e016b", "indicator--0a191343-20fe-4b6a-8a8f-3ccf252433b3", "indicator--3f9e93d1-cf6d-4ed3-b741-8ed8cfaa7247", "indicator--92fd05b9-6f6f-4526-a8b3-dc9888146257", "indicator--e1a8074d-9f7b-4b5c-abae-050bbd531a2f", "indicator--ae61d0b9-a669-428b-9426-e46135b2d0f2", "indicator--a9f8a7da-75ae-4a3a-a232-3156f65c196f", "indicator--9384d6f8-923b-4303-905e-46df4d5e7695", "indicator--5c1548b7-1b77-49cc-98b3-f8ea3f18360b", "indicator--1894beed-bf8e-474c-95e3-ba8be31b3015", "indicator--4fb3f8c1-f07c-4306-8472-81da36242e15", "indicator--6ff630cf-121c-4c69-8f8e-b25ebefaa554", "indicator--d6a2caa3-566f-4f83-a918-28749c27da3d", "indicator--5a708ed1-b9c6-407b-9ee9-860e4b38b0f0", "indicator--9d669694-06b9-4413-8e33-dd65d0dfd08a", "indicator--3d7b3ca5-562c-417d-984c-f474d5db0932", "indicator--240d81ed-0f97-4b43-9cf8-1e6aeed15b09", "indicator--c621502a-e949-4860-95e5-007ceac530c1", "indicator--88baadc6-b3dd-434f-8cd3-b898d507a6b9", "indicator--a791b894-9b36-4294-b791-1d425e5f7a2e", "indicator--240fa4eb-76ba-4e8e-a016-24efac81a99b", "indicator--33663018-9121-4b63-8e63-a50317f6e58a", "indicator--8bed1952-4a7b-4ff0-80ab-bc109ed3e843", "indicator--48d5dd45-b358-4531-b207-b35e82776b8a", "indicator--7eb0a52f-1f14-454a-a15c-62cb62c1be44", "indicator--9a880e3f-9909-4f29-be4e-19858632128b", "indicator--00cbd9a3-1e51-4560-a2db-3c7ea2f81b1d", "indicator--a53cac33-bee8-4aac-b495-a5d2c04e8889", "indicator--7f8394d9-06c3-4077-b101-4872a8ba26e9", "indicator--814616d4-69e0-402f-a7f6-03af8e08b008", "indicator--25f38180-e7d3-4a2c-b715-05dcee38b150", "indicator--76d42978-beea-43b7-9ce2-162ccf9d0f39", "indicator--5e5924b8-e8ae-45c5-8f9e-24abedd8d55c", "indicator--5f5e4269-dbc1-4db2-908c-a2132ee703b7", "indicator--12f8dc0a-1606-44a6-a8db-5a159ff373c1", "indicator--3f411344-211a-41e2-9677-1f94a4828d6f", "indicator--219fd293-e1e1-41af-bbcb-619c8b907b69", "indicator--cb381115-2558-42da-86ed-833b92562747", "indicator--1efc88fd-a684-4554-8d7b-4b702d0c8b39", "indicator--dcf2c8d2-76bb-4af7-8b3c-5b73c2fbedce", "indicator--e7bb2e41-245e-42c7-b915-687397847bd5", "indicator--b953ec2f-9e21-4c01-9a8a-68ab2b06e207", "indicator--3c32a1f7-8f5d-4379-af3c-c3f7d5af4352", "indicator--e91df5b2-0f13-4821-bf8d-32fd1afaab7b", "indicator--c86fb3c0-fcd6-4d86-8b87-bb893192bc77", "indicator--4ad8e782-641f-444b-9a4f-32621ee7e1c4", "indicator--eac3684f-55b4-4517-907c-fb67f8d3dfd2", "indicator--bdf9ba03-06fd-4424-8c6e-2eceff49823f", "indicator--33398428-c8d2-4817-848c-ec8de9e8b8aa", "indicator--a8497ca9-32a8-4f56-ab95-8504dd927150", "indicator--bbf7c8c3-220e-4824-b699-906a04b83d31", "indicator--97ff28ee-23cc-4180-8515-649128132088", "indicator--92770c3c-113e-4d01-893e-b8fce3146f04", "indicator--e61e57bc-b332-4e19-85fb-b0bfdd1b5521", "indicator--24d66f0d-2420-40b6-9cfa-9cd96268c181", "indicator--704578a3-7301-470e-b67e-824e39a6e54a", "indicator--bf111dcd-4cad-4d07-8563-8fe84fb3aef8", "indicator--d6171c4b-446a-46e3-a5b7-9feb9952dff9", "indicator--33c05032-9dfa-49f2-b114-7824c60b042e", "indicator--989ff93d-a0d0-42e3-8668-f9337a700ec1", "indicator--8541f784-04cf-402e-aa7a-bb39652d3175", "indicator--ea95ffbe-8ad1-4ec7-b84a-c302e016fea4", "indicator--bce73b4c-7b7b-4286-925d-d4ebb406770a", "indicator--91472528-a3db-42a7-a5be-1c49eee2f8fc", "indicator--5c4af74a-e990-48d7-8ceb-d0dfcc5ef463", "indicator--5e32603a-ac13-4e2a-b47f-c58119c05b4d", "indicator--a3cbc983-fc27-476f-a9a4-bf1361fbe2b1", "indicator--daec0dc0-e6ac-439b-b967-f4ab8536e50e", "indicator--20b73aab-5979-46a8-a193-fd92996b38d1", "indicator--29ec1a16-f324-49bb-b1eb-69b552554bd7", "indicator--243ea81c-a3d7-413e-b453-fb40933cfd25", "indicator--fd548832-e7bc-4b24-ab75-7fadc4fcc45e", "indicator--fbf9a8bb-f5b1-46b0-985a-387ea9040be8", "indicator--e286edda-03c9-460a-91b8-74997fec7315", "indicator--2e7904c2-b9e8-46c6-bd8e-d87cb656d64c", "indicator--6428b456-6422-47fd-9c35-572eee66cb03", "indicator--3fffa3b7-060c-480e-9b28-ffa2d967aa25", "indicator--a47d51e1-c63d-4522-a959-befae2d31c78", "indicator--96865419-5cb6-4469-8438-16a5ab0eb41c", "indicator--1865b3c2-c6bb-4a6d-ad49-fadd0e87cb44", "indicator--9c4b9c8b-3a1f-43d5-9445-84efc77912d8", "indicator--de6da808-e57c-47c1-a509-5e01fa344b77", "indicator--bcc5f698-75a6-445c-9314-fc42745b6788", "indicator--00f38cb6-29d2-4b79-8034-274ecc54bf28", "indicator--9b1a2ae2-24c9-4fa2-8ee2-c11a88f510ed", "indicator--ceb1d3ad-5134-4c15-a945-987841eb70d6", "indicator--c9bbb8ab-25ab-4cbf-acaf-09d60ac14bd3", "indicator--f8274f97-bd70-412f-baf6-7647e37ee13d", "indicator--c581d877-df78-484f-9382-ae80bbb33592", "indicator--56581217-953a-4c25-9d8c-2d175de56f61", "indicator--f3a56605-6cfe-4e13-a149-08b5eb2c73f2", "indicator--76a40584-b891-449c-a329-ecb14b821321", "indicator--4c0502ed-60e8-4d00-a9aa-3d8f8d1f4768", "indicator--521c5291-a7f8-47eb-b30e-e739cfcb97d0", "indicator--ba09093e-fa68-4d23-842f-741caa62828d", "indicator--a8cada33-3b81-44b4-a0fc-0ad90103560b", "indicator--4dfe25c1-8c1b-4553-89ac-72ccc96e9074", "indicator--3a46dccb-6854-496c-b908-b19e64dcbd32", "indicator--b5fdeec6-849b-48ea-8c86-206702b9f3bd", "indicator--46968999-5105-4f63-84bd-0cb888a214cb", "indicator--8da985ea-3f19-431b-91d7-6a1398077f62", "indicator--eb0f3aa2-ff98-4772-8b24-f4480115efb0", "indicator--01e070c2-905f-4d35-953d-ddf229fd32fa", "indicator--a234b55d-7afb-4b21-972d-6f939893842a", "indicator--2a3d59da-02c6-4489-a860-e438cb75927f", "indicator--3bffb9e3-364a-4e87-831a-f6104986b14f", "indicator--8efec1c4-a270-49f7-bb2c-f0275c7d290f", "indicator--323e6d96-7d29-46e1-ae0f-fe51c4360e1f", "indicator--1fdcb2cf-3909-4fb9-b6b0-8cd8870006cd", "indicator--db705e87-a5a6-4f99-956b-768d5fb3c896", "indicator--b3db5e78-ebcd-499e-8783-efa6f841749b", "indicator--dc4612b2-1427-4ac0-9a6d-5f33eda002c5", "indicator--6e4335f5-1996-40a6-9370-2948f70cf40d", "indicator--27dec043-8818-44f9-9160-3c3dd99c350f", "indicator--cf0ef7d2-0d84-4f56-a709-59cbfc9d4a93", "indicator--09706c75-4669-49b0-b8d6-7e8ba18c89fa", "indicator--cb4f67aa-0d37-4203-98b4-f72de5a4524a", "indicator--dd3f8542-83d7-492d-b8e1-8184e0b9f92a", "indicator--07a232f3-5418-4a99-aaf9-751cf1264ec5", "indicator--602aed5f-154e-447c-8ab1-1f5b48266e03", "indicator--5603350c-874f-443a-9c04-8955e2d88515", "indicator--fe2bbf84-8a04-497b-a94d-342c77809bc3", "indicator--9e56fcd9-e94b-40f1-8993-d51dc5a0d6b3", "indicator--7b225879-4014-4ed7-83cf-fc5cefdba2af", "indicator--93e6b552-3e9d-4cee-8955-97176a1d5579", "indicator--71ee41cb-b7f9-461a-ad81-2cffed3df105", "indicator--b637a409-e427-494c-a4c1-ff58220e3a8e", "indicator--8c9d49bf-0316-4a9f-baa0-c12b82170cad", "indicator--85e037ce-92d0-495f-a645-05ae856deb28", "indicator--de1df49b-58c5-4e01-a6be-88d1b2acbd0f", "indicator--72503542-19be-47e7-8a11-7cc642c06c6b", "indicator--64bc52d1-1faf-481c-ba5a-370898e53fec", "indicator--ed42f9fd-4917-4bab-91db-a3dff9539b5f", "indicator--53dbf5e4-d32a-403e-8f57-9826c991ef25", "indicator--655fb92c-9e44-40b6-b53f-7727f8d6e650", "indicator--2ef04515-c253-4617-8f06-5244c4e65265", "indicator--994373e7-b2b3-4550-9240-55f46f9862e4", "indicator--834565ad-f959-451d-a6a9-7e6b0b3c8b54", "indicator--676cab47-8bc8-4056-b91a-b07f40819d96", "indicator--93ebc455-df80-48b2-aba1-d5d53e077121", "indicator--d99b2375-d606-4b60-b790-5dd559032ed1", "indicator--8bb2e9c7-69e4-4401-8426-99c8dcd1c6c1", "indicator--551ca2a4-0b45-4536-9a3f-d4600456da15", "indicator--9d986441-50ad-4d4e-a04c-3ac027d3134a", "indicator--22e1c766-b4c5-446e-9100-b53b23d3b8b6", "indicator--49e55473-ec6f-4055-8807-d18334366fd7", "indicator--d79e7485-ef6b-4c32-ae58-6a00f1ce0344", "indicator--69742ac0-42ad-41e0-bc96-7ec97f6bc860", "indicator--99406ba2-01db-4289-90e0-2b54ed089c01", "indicator--6e77954b-c358-45c8-80f6-e75081024e18", "indicator--3d5615bb-79d7-42d0-82d8-7f7d5d35ca51", "indicator--6a6ff42d-e2d3-4d89-9628-9de23cf419cf", "indicator--e3758fc1-14a5-4889-876c-0b0f14769992", "indicator--1af68da5-3018-49ea-9469-d7d2fdfc5ec2", "indicator--6ac8809b-624b-4e20-b45c-9b176f6eff4d", "indicator--49a13eb3-cc02-4822-98ea-4ef7bba6adf2", "indicator--2734606a-f5c8-4121-8870-f200ade62551", "indicator--486c3f0f-0edc-49a3-a781-dd67ac04a3f3", "indicator--0b7d51df-70a0-4811-b170-7c670f596ac3", "indicator--8b34b666-47a3-459b-bf96-9d3d39f4a955", "indicator--c59d313e-42c4-41e1-8448-02f52efcdecf", "indicator--315e3097-2871-48d8-a208-56a1ec9e17af", "indicator--2065c5ec-89c2-4690-8ce6-b1fc17246bae", "indicator--26d15a5e-b491-416a-a30e-230b0d2b960b", "indicator--714225b5-6041-4a78-8102-d1bd8e36481b", "indicator--db4fb1c0-4e35-49c0-a7b7-b7402e19d9eb", "indicator--501be301-55ff-45f0-bae7-e00d8dcf14da", "indicator--cf2940a8-6b05-463a-9bdf-d7507f3b509b", "indicator--126c08a1-a72a-41d5-8d8d-5478e613cb50", "indicator--3295eebf-e92d-4fc1-8612-106f904a2027", "indicator--c3b66e80-4b2f-4130-8cdc-8f5f23ca0caa", "indicator--6c0edbe7-81b7-41f2-ae59-36ccef433381", "indicator--8d28f19d-6428-40f0-a379-29f8f7f8e126", "indicator--eba432ce-a4c8-4b42-8818-622cb5402284", "indicator--06f81d1e-92fd-4e16-a6ff-64ea7b987e0d", "indicator--509cb107-886d-4945-846d-d629b4654aea", "indicator--eab92c7e-afea-4f67-9d43-2c66d7ab0802", "indicator--75f3ca7b-4f6c-4da6-b312-44f8149ed484", "indicator--6c86b734-613f-4673-9ab4-8398310c0da5", "indicator--88ccdbc9-03af-4b6e-9c3e-f3e16d611f77", "indicator--6ad24c64-f4bb-469d-8022-1172ac1cea13", "indicator--90f8140f-4166-4407-b4c3-01aa37519952", "indicator--f7eb3c60-fd7a-4408-9d96-c75ee054b54a", "indicator--456603cb-7ba5-4a11-abd0-3c83c5ed71ac", "indicator--4a2cc8b2-6614-48d2-85b0-9af2de96298a", "indicator--0e0378bf-e4af-4067-85af-10f95bce7e44", "indicator--5935be93-d44f-4849-b1e6-830a77a48977", "indicator--ed21e5a5-a648-4389-8d07-f8cbf4398fac", "indicator--bc39da5e-9f55-460e-b1c2-af86a20da17f", "indicator--d8b68b92-e728-4d23-9615-f96593d03719", "indicator--751760bd-a72a-4378-a762-b5fdfbb6fdde", "indicator--1dbaf69c-5595-44ab-b651-5cad70520d26", "indicator--0349371d-5815-4512-a787-01ade07ab642", "indicator--8ece7174-d832-4c55-a71b-77a1de1666fd", "indicator--9a1de96d-f64a-4126-8ae9-58d902a76777", "indicator--4639322d-d2cd-4081-af12-c89acf3d8af5", "indicator--55ae711a-74fc-4166-98fa-f4fccb617957", "indicator--edcb7251-8b65-40ce-b001-5a5913353aba", "indicator--96ad3ac5-df17-443a-a98e-640b1c9ad3f4", "indicator--5d7244b1-8c43-4332-a9e7-42de2a5f0fec", "indicator--911693b0-1c56-4942-ae73-63ce817d7dd4", "indicator--26df927b-75ef-4b2b-b4a8-eb3660c7aae5", "indicator--c75ff169-a904-4ba4-b7e6-a2cee7e238ec", "indicator--f0427d3c-ca83-4b03-9fb4-5e17c6db79d7", "indicator--1faedd74-9ce3-4001-955e-a36cd9e0a3de", "indicator--2385e99f-0995-4275-bd83-603e7f8ca372", "indicator--8c1646cc-f872-4075-bfa5-16ce5ec80d17", "indicator--df602cdd-5e18-4930-b17d-f42c1ad44e02", "indicator--eab46bcc-4245-49e9-8c2d-20d31d538cf2", "indicator--4d5106f0-8083-4365-bb56-bd6193b8f35c", "indicator--7de06f4b-9bce-4d26-9043-783c4a3f437f", "indicator--e9d584a6-cbdf-4093-8020-9ec94f60addc", "indicator--2cf653e1-dfc7-4742-af3a-c5dadbfdf1dc", "indicator--bd3db214-c02a-4bed-a1c2-47e0dd43bb29", "indicator--8d2153ef-d465-480c-ab2c-a4c7b51f9deb", "indicator--87564a6b-c17c-4c49-81db-82fb4ad0b214", "indicator--0e834f20-bf5b-458f-9c2a-55094d63ebae", "indicator--d7b59a88-9003-4e94-ac9a-d7a5bb439554", "indicator--a8eab825-00b1-4c92-9cfb-c933e419b394", "indicator--13623a0a-aa32-48e6-aeba-ee2f022bc806", "indicator--e1eab41c-3b3a-45bc-9a95-ba6330980382", "indicator--cee60567-63b8-43d2-9507-efbde8c4c143", "indicator--cabb000f-71a7-4b11-98ea-59c8c50db413", "indicator--9f67d37e-00ac-46a3-933a-b03809a3ef21", "indicator--c95b641b-e87f-4b0a-928f-1b922f48183e", "indicator--b1062692-db0a-454b-8f9e-a72ed9db6f99", "indicator--dc55288c-0873-46f2-9acf-88281130203c", "indicator--0c0c1f10-e3d9-4dc7-b0de-f409f1d9a7c1", "indicator--ebb094db-77d9-46a3-8759-b47c274792ec", "indicator--3f694bb6-1a0d-48ab-94fe-26730b1c3733", "indicator--f9840d54-f0c0-496a-a9b5-bb15d63a770d", "indicator--12af439a-6028-47b3-8a2f-997088e7ab12", "indicator--954859cb-ef01-467c-8a76-3d6099402bab", "indicator--36aaf4b2-d49b-4390-ba18-886f6fb64bab", "indicator--5d12526f-ada7-419d-8a83-14302313fa70", "indicator--cc7319b0-efd6-4530-a44d-d583448f4c14", "indicator--63cd37e7-36c7-4be5-b946-56449d4ac46e", "indicator--aaa3736e-b9eb-4aa6-b39d-b1d1f86e73c8", "indicator--6ba2314b-6180-48ad-acbb-5fd2ba4155cd", "indicator--a57c169b-1afd-48d9-a6b9-ad9c0d231b28", "indicator--3f7a4440-dd85-4d9e-8452-4d452be8e6bf", "indicator--8df79b29-d66c-4143-b98f-0e6ac2203f53", "indicator--f9cca84f-6801-44ca-913d-3e4cb343ce98", "indicator--d677281a-fd0d-437d-b639-a17fd1218531", "indicator--bd3e3b8d-2687-4a9b-9131-bedaf3c0f428", "indicator--e605a0af-c19e-424d-a958-05b98a159ee0", "indicator--3b3c0444-932b-47fd-9dde-26e23ec9375b", "indicator--e36c86d1-4a6d-48f8-b67c-69233c79a9a0", "indicator--fe4857e1-2979-48b6-be6b-a2f00c3d4768", "indicator--558e43c7-2cb9-4a93-ad66-6f82e31ca209", "indicator--d708d334-cf78-4831-b280-b34238704ca1", "indicator--fb0e5a49-8463-4785-9ad3-118d5dd8d722", "indicator--bcb3fe85-3a93-4d20-b6f7-1282df0891f6", "indicator--461370d6-977b-4fd1-9bfa-9fd544dc02a1", "indicator--095c0e23-1dab-48e8-8203-3b17815cadbf", "indicator--6b55be8e-1afc-41df-9f94-24024beb8b6f", "indicator--858742aa-eead-4ad1-b8a1-82fd6b21ede4", "indicator--fc5819f4-f2e3-4391-9a7a-907f6bc2db59", "indicator--c65becce-a20b-4a21-8c6b-57e984eb7bcf", "indicator--f7c311ef-2402-46dc-aca1-011a663f3f2b", "indicator--2adfcb63-1d4e-48b4-8b0c-cb732c7d638b", "indicator--e4eff06a-8a58-4ae1-8414-5f1d2f7ab72f", "indicator--80c52945-cae0-4f76-b0a7-13ee24ca7264", "indicator--c401ae72-1396-405b-9bf8-86820d3cde38", "indicator--67523906-aa23-430b-824a-94f55f1cf575", "indicator--a6552243-2ea3-47be-8e0f-27446c24ac03", "indicator--ca0d2c2c-3892-4108-abde-79548547a945", "indicator--164e8d97-0fc3-4937-8bfa-39689d3f1196", "indicator--9b32cf78-4152-4ade-96e0-3c53e78801d2", "indicator--9502a13f-cd91-4ca2-b17a-fd39591e73c8", "indicator--4966a4f2-d097-4d0e-96d4-59e49718bcb4", "indicator--3967022c-0b84-4750-a940-7cc5841dbdee", "indicator--cc677994-9d4d-4895-875c-c404082e0540", "indicator--12d03ef4-9e0e-4b37-a621-7140ae4ff771", "indicator--cc18f939-d6d9-4a5e-92bb-2c493ada8bdb", "indicator--147c09cd-67b3-46a6-87bc-c27b9ace0f98", "indicator--b9396c88-84f6-4f14-919b-dbb5b2d323e1", "indicator--24280a1a-2b3f-4cfd-b5d2-94322650952b", "indicator--5690da16-50dd-4409-9803-deed49e5f167", "indicator--746bd605-912e-4937-9c6d-bea1c4e68165", "indicator--6f9bdd35-6037-4296-b1ac-379802785372", "indicator--76a6dc32-948e-4449-a877-1975a65a8ae6", "indicator--8bd62878-61b4-4503-bc91-bdec4299e1c2", "indicator--22fda544-adc9-47e2-9529-2630ae4a4be5", "indicator--46abafd7-4961-4048-97d3-cf5af8f786ec", "indicator--f57d185a-47c2-4e3e-a417-97e8b5c32181", "indicator--522188b3-569b-42ca-907d-4e8f2ecf9af5", "indicator--6e7ff164-1f9d-43b6-9683-52064faf7d3e", "indicator--988023e7-a9cf-45fd-b0ec-9055880146db", "indicator--fc9cd0c2-4e41-4fa0-a5d0-d6b68dbc7d71", "indicator--09622e42-eadf-4392-9534-516c3b1ab26b", "indicator--9fc227ba-f10f-44fa-b239-3fe5c170565a", "indicator--02acba1a-bf25-4cb1-b064-1cdd5f54564a", "indicator--2f6a9971-408a-4341-acc1-553c6c16b7f8", "indicator--7b262161-97a2-40d7-a783-10936941bcda", "indicator--57b634a6-82c4-4593-bbf0-e70c543be1e4", "indicator--a5d1b6b4-8bc2-49b2-89bb-17b9a70adf55", "indicator--4a5149ab-629d-4a0e-9c24-9b58def1f8c6", "indicator--c2c3bcb4-264d-4743-b3bf-01172bac9454", "indicator--f7850405-061e-493f-bb7a-b90f205366ce", "indicator--52b48ffd-8f4b-485e-aab0-d5d500687d35", "indicator--398cc06a-8aaa-4fb3-990e-5ba044c5280b", "indicator--33820302-0f62-4028-90d4-6749f101977d", "indicator--c390eb1d-0c95-4160-a6d2-6151017b9096", "indicator--5ac15373-8711-497e-94c6-cae482d9bec6", "indicator--73ac8ea7-3821-4149-bacf-39cf3cf100fe", "indicator--abc2fc52-051d-428b-8ff5-3bdffefa2c1a", "indicator--7822e26c-4c9c-4ad0-937a-980308c7b722", "indicator--65806068-ea91-4308-9090-05056957eb15", "indicator--39f2a776-94e5-4124-aefb-b3c21aefcec0", "indicator--91759690-a6bd-4726-98c2-2e86812e6272", "indicator--e25c73d3-ebbe-41df-bd7d-e655287e21b2", "indicator--3288978d-57fe-4f3a-b282-78a4287827dc", "indicator--a31ae2ba-3dfc-4761-91a1-ec20fc0ab077", "indicator--1b6aea87-e326-41fa-9a42-189c3b027ebe", "indicator--1f1bc013-a74c-4ad7-b06c-7fa915089d9f", "indicator--f92b306f-a8c9-4d85-9ace-bc4341f42b7c", "indicator--5a40766c-9c6d-475c-ac20-7eab9158613a", "indicator--61f085d3-58b6-4ec6-9ff9-db10005ca47d", "indicator--cd985ad6-8eba-401d-a797-19247fda48df", "indicator--b949aa7b-c0f3-46bb-bb1c-e90827be5be7", "indicator--734e3cea-e57e-4ef2-825b-fb96b6971997", "indicator--af26c8cd-6213-40f2-a687-317ce57abbb5", "indicator--e6b8f7b2-b4d5-48b4-adca-c72170777182", "indicator--81d24169-8d46-47c3-aa81-0c0adba6acfb", "indicator--f900ae26-a715-4eda-9d6f-d44b9e574286", "indicator--fb95b22c-2272-483a-9f49-61ede0b17f61", "indicator--75bafffd-e723-4ea3-84a7-11dda02552ca", "indicator--d794ce5c-ed76-451d-a6cc-39e795c6fa75", "indicator--e0a33cf6-e60b-40ee-a1fc-4813b8287c01", "indicator--40b5705c-4b01-4436-8732-0e6d7ccb21cc", "indicator--4d297ce4-3996-494a-b8ae-add060848f53", "indicator--5ca77d9d-2a0b-49bb-a047-e0a07084cfc5", "indicator--ea541e91-9ea2-4c36-996a-31f03c50e636", "indicator--6b550ce0-8685-435d-9b5a-355dab988b0a", "indicator--3846c9c2-4b8c-47d7-839d-e82869009936", "indicator--74f189d9-db81-4a57-81fc-ea77ff1a416c", "indicator--2417ec80-bde7-49f9-92bb-49d1ccea3eca", "indicator--79bbe620-089e-4960-8dad-c30fb54a8c6e", "indicator--e1a73127-d42d-4d79-beb4-2bde460f4e11", "indicator--b34f84f0-607d-4ab0-bdd9-3c5d5e416a81", "indicator--21c39d68-e1ed-46b3-9782-23dbf737cd89", "indicator--3030a186-bf9f-4d4b-bd97-df7f50e9fc9a", "indicator--6a2cb181-6106-40e1-8a1c-0229b83433eb", "indicator--cbcfc18d-0581-4097-8ead-52a8981dec96", "indicator--6312003d-3ef4-49cd-bf70-47c60fb4e0bf", "indicator--57e2db23-9b90-4262-8ca2-e70d10dea0c4", "indicator--3b8de8f8-897c-4419-84ad-454af4d90819", "indicator--f7139352-4119-45fe-ae5f-92bd62ea7ad5", "indicator--859e9698-1318-4d85-812b-19369f0a61b1", "indicator--3c95455c-bd92-45d8-baaa-5df1c6e51e11", "indicator--c7457a67-6cec-4839-9727-7dfb3d80e4a4", "indicator--b5731829-4284-476a-8cc9-c440411ec0fb", "indicator--3f83c742-aa91-417a-a13b-139ef44acc64", "indicator--7a712815-5627-4e14-8e9f-339a17b02031", "indicator--aad5564e-78ab-4798-be4a-f3dcc99697d6", "indicator--98b0ca82-1ffa-49db-9f79-93c5b74a0fe7", "indicator--4c1d6fa3-c1d6-4dab-93c0-d2a429025812", "indicator--6edb649e-ed0e-47e9-acd3-6bec8c68b7fa", "indicator--a16c05e3-1428-4c1f-b198-de0ec499c1ad", "indicator--806728ec-8153-4f55-8fee-45d7fff3e757", "indicator--1c96694f-400d-408b-a7ba-6d26d0400cac", "indicator--c3338b28-3879-42f8-a7c1-02664acd06c0", "indicator--79ded827-baaa-4d52-89b4-503e269c0cad", "indicator--28073e28-a342-4e3d-84f9-3c01a21aba97", "indicator--32cc72e4-1fce-42fc-a79a-9a297dfa3d41", "indicator--b619a578-8331-49f3-a06b-e3d61cc43e9b", "indicator--791ffaa3-4aab-4a89-bb7a-86dc51d1aac6", "indicator--99499c14-d299-40dd-9368-b06504f70828", "indicator--0560524e-404b-4ac5-9731-5e130bca7a9a", "indicator--353ea761-2e14-4c3f-8736-e314b025096a", "indicator--eb959d8d-a275-4d30-a641-518e3459f7b9", "indicator--5a9c54e0-d675-408d-bf54-c308259feab3", "indicator--762dc4ed-ed0b-4225-bb63-34ebf5a25c46", "indicator--7c4afb77-41b3-422f-942b-df096f1f0463", "indicator--e8785864-ca56-4fde-8972-a3718ffd691d", "indicator--603de377-cfb8-44ea-82af-53c62d8f9794", "indicator--ed0c6585-a0cc-4584-b17e-8ba59214a067", "indicator--4a43f70d-7517-4e37-bf0a-1d0e5331aa06", "indicator--8be6c396-f93d-40f8-83eb-ca9ebc2c109b", "indicator--dec6eac6-c862-4441-8f2c-b76afd5e56ed", "indicator--82e98553-5c55-4049-8d0d-3b1fd4e971ac", "indicator--69e40a9a-12c5-49e1-abde-1f42d3cab1cb", "indicator--bc066288-7624-4cbb-8342-79e6a02aaf40", "indicator--10b80342-3e30-4489-a7d0-89f23ae2d232", "indicator--2e94a5de-e77d-4e4f-b9be-dcede54110cc", "indicator--5db6e010-5723-4c56-99b9-2c98a6d7c312", "indicator--4697f11c-23cf-4dd9-b6d9-c490b75dd7ed", "indicator--a35bd545-2731-48b1-a436-ef311babc47e", "indicator--21d753ea-ac30-4a17-9423-d222bb75e617", "indicator--066f4129-7bb5-40d5-a534-26c31559e83e", "indicator--e94f8a23-243e-4dfd-ae27-dd17d79dc073", "indicator--3ed63aa4-1299-4285-8955-5e1f2d22beec", "indicator--74ee2bcd-50f2-445b-b121-c4675a7e616a", "indicator--a54f0ab0-ba95-4b48-bbd1-39eb1578cbbe", "indicator--19f1db64-20b1-4821-bf62-eaab3536f09f", "indicator--9ed6bcd2-1bc3-4813-9d6f-19111bc04421", "indicator--2e328aac-17dc-42ba-bbc2-2754943d5b0f", "indicator--e709031c-5680-4876-88a6-521055655db9", "indicator--a9568a57-0720-450b-b99f-8145024783ce", "indicator--176fd4e3-49d3-474f-90a0-0fe65a7ad215", "indicator--e3b9a4aa-768c-4d7a-8370-e0a931e0713c", "indicator--783b62d7-8632-4d97-9551-15786249767f", "indicator--e43bcdbb-4a6d-4796-aca3-dfc81c5bc57c", "indicator--e3309f65-b4f8-46ad-a3cd-06f3329e17c0", "indicator--0deb4b63-8a3b-42e5-958a-69114f3f039f", "indicator--3706b33e-97b9-42b7-9cc3-e9db07ffbbe2", "indicator--afa1c57d-ba9d-4738-ab76-760b3647f71c", "indicator--8cd7fef1-3344-4f8e-a9e8-2de32ab3a0dd", "indicator--4ed6b04f-b050-4641-869e-0b1fdc65114a", "indicator--c2556504-d6a6-4852-86f6-b7e6f5df1690", "indicator--edd7e5c4-b84f-4a8b-9449-8af43f64b0a5", "indicator--972340be-fcc4-49b4-9d19-ca49bbed5a2c", "indicator--318c9f75-26dc-44e4-a353-973a2954ba21", "indicator--eb144ec1-6c83-45a9-ad02-861b00475737", "indicator--e83798aa-3c36-421e-b472-51319a95c73f", "indicator--888e34a0-c46d-4a4e-9e7b-9116829ef94c", "indicator--84f99eee-91ab-46a8-86c8-79274c11ca65", "indicator--8bce9521-1451-4ed3-a880-9bb4b72df3cc", "indicator--ee533808-7020-4a00-a943-0a36012ddbe9", "indicator--6c9ce613-9ca3-4a1c-8683-284f03beb93b", "indicator--d207a953-8760-481d-9ebc-60ddec67936d", "indicator--02e8798f-b5b8-4022-9df8-2133cc3104ba", "indicator--4672cfc6-76fe-4352-b98b-82daff483ca3", "indicator--6b5c680d-cc08-4353-8904-247273ded80e", "indicator--b79c0bc8-0cab-4c1e-9796-cfa5ff127061", "indicator--bda75ea0-4b1f-40bf-a628-541fbbc6fb42", "indicator--b39aa419-8277-4180-b0e1-5fa906a5ddf4", "indicator--3ba7b49e-5774-4861-92fc-ad3d273969df", "indicator--ef5a035c-68f0-4ea5-888b-28dc95d7e09c", "indicator--bb232794-a265-4daf-9db8-f33b5ac18223", "indicator--21eb6ac8-acf7-4142-979d-f4568d8c3d27", "indicator--aef0dc14-7d15-4642-8428-02a8bc0b283c", "indicator--5eeb5b18-b144-49a6-bfbd-eb01223fb237", "indicator--e8c436ce-9a2f-425a-9899-84556c38200b", "indicator--e8b50b1d-350a-4ad8-8fae-5f9e5e6984b8", "indicator--b61eca21-6a36-4219-9f42-8bf3fe0d7856", "indicator--bbda5efe-44c0-4a5d-8600-542ac76f4f5f", "indicator--b70c99f5-0633-4ecc-8ad8-936c0f376e2f", "indicator--66074d4f-3b80-4f0b-8bd7-93f5c297b25f", "indicator--86343abc-05df-4df1-b392-c904558f9584", "indicator--b1b4529f-d925-4b2c-8185-bece846218f6", "indicator--3f6349b9-bb2d-4eb9-888a-62c739169754", "indicator--c787a724-9aa1-446e-b926-9e9064acb091", "indicator--6ad84b31-ce83-4d29-b3dc-900acb80d107", "indicator--cd8b0668-6ed8-45a3-b3ff-b347b6720f47", "indicator--2d028f3e-a5a0-4291-8b5d-3028a185d65f", "indicator--d5832811-a7c7-47ef-82ca-8b2b6b868b6e", "indicator--1397b7fd-b6e8-4bc9-a060-d627fbc42240", "indicator--a84c2919-b444-47db-8736-4dd8c525e0fb", "indicator--9b6df254-b8a6-445a-b59a-fb4712cc0335", "indicator--d5f8991a-fdf6-49c3-b4c9-6be0a7f9cab6", "indicator--ac42a1ef-de4b-44ad-ae85-a135c7556895", "indicator--3da15f10-b201-4757-adb6-46e2718b58b1", "indicator--faddcf96-0bc0-43d6-930f-faaa24b2244a", "indicator--6b5118a4-1893-4cb7-9fa3-1bececa1da9e", "indicator--5f5fee21-8976-4f56-9a96-bbdc38c62887", "indicator--96e2fd1d-487b-4319-b835-e1ac38e0ae99", "indicator--00f7e602-ca45-4160-a47e-4f7e35cd877b", "indicator--674bffff-a16c-4ebf-9a41-31977b7b737f", "indicator--ded47a16-ae19-46c1-8a43-9dc041d88e77", "indicator--598d9fc9-88bd-4b87-ae6a-881a7bc4454a", "indicator--3ba5e5d8-9138-4c6e-9595-173a09e6c183", "indicator--b712a061-674a-45d8-b8f8-e9cd5923bcb8", "indicator--01a6a78e-aad1-454f-bd87-79e9277c3906", "indicator--2c65ae3a-a6e1-4d7a-96ee-d91916c82584", "indicator--2d16df65-176e-4ee6-9d53-d3a52aab1830", "indicator--1ae6d84a-af41-4fa3-b044-dcb2d9e495c7", "indicator--9965ac28-1c13-46ea-afbc-7d3d32330377", "indicator--76e07332-d2fe-4400-9e50-0f4ce6a0a569", "indicator--a0993956-4793-478d-80b5-4506ddbda029", "indicator--7ffbde30-6aec-41a7-88b5-517d321f63c9", "indicator--67c8682e-7a7c-453a-aef1-6d1ee13e8864", "indicator--51977763-d163-4363-8c0d-6da8de4c5535", "indicator--bb139473-6651-40b3-b1b2-fd4b2f14553d", "indicator--716d0a60-8a1d-4d0c-b9e0-a271586846bf", "indicator--797b10fd-2bc7-4a8f-b894-7ac9406019e7", "indicator--5c8a045f-5192-4f26-877d-f59a10cce572", "indicator--7874d0d4-1954-4aed-a26c-43fb91e5d2cf", "indicator--484805b3-3dfc-48ae-8c22-6995da8a4c8c", "indicator--2a752834-c210-4c87-84ba-c39a9113d11c", "indicator--ec929324-d79c-4bad-bd8e-6a534dfa828c", "indicator--e3d9226d-f916-4d63-8657-da5cfa5d1220", "indicator--6b6d43cc-8bcd-4aa9-a305-4842f32591c2", "indicator--0fd8cbc9-6d53-496d-a6d4-7244d33d5685", "indicator--2e75d766-dfb8-4612-a13f-2685bae8f4d1", "indicator--1a6fa77b-dd12-47b5-a846-3492678e6787", "indicator--b68dd4a4-1668-4c07-99d8-7b63f0a2cf42", "indicator--b07267a6-c861-494a-8b38-e3c3ba87a2c2", "indicator--2008a3c5-3deb-4224-80ca-158a865f7d60", "indicator--d6fb95ea-0048-4475-a0f8-6d038a66db56", "indicator--399749b5-65bb-46bb-9475-9b93614e8a5e", "indicator--90272904-83d8-4383-b0b5-ba44aec2d924", "indicator--f1bc0be1-b5b9-4fa4-99c6-5cf0f01a2be8", "indicator--efa48d84-a88c-43ec-a938-42359630f3ca", "indicator--b418bfd4-10aa-4095-b007-5e93d75ad0a9", "indicator--91fbe582-28fb-4962-9f1c-5f88a5f3ec5d", "indicator--fdfad93b-743f-4719-9e9c-8f3b317ad1ac", "indicator--a60ee7bd-788e-45ed-82b2-94821fa6883a", "indicator--ac5272b8-0eb4-485f-8d28-5f668163ee19", "indicator--1705fbcc-bf4d-4c38-87a5-3d7ffebcf78e", "indicator--d0eac0af-df16-456b-a516-d10d5ddde092", "indicator--e546924c-6bf1-4099-81e0-923b5bc8586c", "indicator--bc2dc7ad-fd41-4433-bfe8-26fd06cd058b", "indicator--c8787506-c196-4379-b460-99df9368dc64", "indicator--a7b3490a-6b5e-4246-a058-c9fbaa3a26aa", "indicator--a611c035-2bb1-41e0-b229-c9e99b0e38bd", "indicator--0859a1ca-2d06-4b95-99fb-970f7fca9cb7", "indicator--67364e7f-3774-485c-a0b1-79a73aa2f0e9", "indicator--cd5c571c-5062-439a-9af4-417a68bb49c9", "indicator--9d765cde-db93-4d8f-adc3-b21ea2c680eb", "indicator--8c9b5d30-f063-42f8-a1b8-c70a3cdec965", "indicator--769bf9e5-5f1c-43f0-a497-7bded18c6a5b", "indicator--d39d1182-e430-4b77-af4b-4c9e046010e5", "indicator--7bdc8ac6-3833-42b8-9a06-8c924862a6a3", "indicator--d304bffc-dcd3-4016-8321-71d147eab3ee", "indicator--4c4589e7-6821-470e-9584-c448494eb557", "indicator--7a4a97c8-1ee9-4201-ad8b-e289d425e2d3", "indicator--2e845ab5-1833-463d-87a7-f4e837576534", "indicator--edfd71b9-9af7-4e75-b372-2f04b3216137", "indicator--7ed34a3a-01c7-4840-88dc-3bcebced2d9a", "indicator--e5542705-f02d-4d7e-b9d1-c43b98e3150f", "indicator--c867f780-331d-4b24-bf8f-6100611db34d", "indicator--d1c9778f-16ad-447f-8fdf-a466798f3b63", "indicator--3dffb939-9bd0-4f1a-8556-5a4e2f66350a", "indicator--ea36e3f4-f2f6-4aa9-b133-78a9071f0a8b", "indicator--d839a089-bf5a-43aa-9ea5-4df6819b7ea1", "indicator--c8992566-5bc1-4e37-a2d3-8f67e1bdfcd7", "indicator--b59c16cd-b074-40c0-8ff1-0b41e153ebd5", "indicator--9a1f1bbd-e9c9-4fbe-aaa3-5e1bdc2a3a50", "indicator--360c752c-c257-4afb-bef6-8430ea0cc62a", "indicator--532897d6-783c-4fc3-9aff-7b476a4ecd6b", "indicator--bbefaf2a-d341-4756-b93c-48f107649271", "indicator--07048a87-4afd-4138-871c-8c90944b022e", "indicator--87ea142f-787b-48fe-9bb2-0a3cac0f14a8", "indicator--9f2e330e-a76b-402b-b47e-032e9e65b674", "indicator--dd9870aa-e752-4ff3-b38d-a074763aa4f5", "indicator--2cba03d5-59ea-4a86-b933-53c3de5eb790", "indicator--de0efaf1-a549-4ab7-b801-0480b9df4cb6", "indicator--41608758-1136-4a6d-99b0-13ce2550d7a7", "indicator--612b5449-e451-4a73-b6a2-ab786887aa7a", "indicator--d96ac7d7-0842-4358-9725-6bf2c96d03f1", "indicator--35dded89-4088-4718-a38f-89b861c97b4b", "indicator--5828b7f5-23ed-4bf8-9e30-e25b3fa62c40", "indicator--9d11cfc3-c850-45e1-928f-89841c21c657", "indicator--cd3c3fae-d5e1-4335-a2e6-96a37f48e459", "indicator--bbde5361-9feb-4865-beca-6c9a99153671", "indicator--6ab529c0-f647-4c41-aedd-4723c3e187dc", "indicator--49979ba1-a295-4426-be4a-990b5c3be2b9", "indicator--d8fc2aca-38f6-4741-b652-2bf1f0b2f187", "indicator--a1a13827-a148-4f8f-9587-6567ad47cafb", "indicator--cc333249-99d5-44d6-8ae0-3e07e45c633f", "indicator--3def3108-a6ec-456b-8fa8-fa6b3cecaaa9", "indicator--34ef49e8-1174-49fd-9374-86d97b0a2889", "indicator--086ec909-1e51-4712-92e3-4c3f161fc1e6", "indicator--6e7a6240-9af3-40f7-adfa-c748639def69", "relationship--07ed939d-bc75-454b-b70c-cc65a5af6da8", "relationship--3303a59b-05bc-4573-9c33-dbd7163781af", "relationship--8a2244a2-dbf0-40e8-a1c6-cc59dafb4ebe", "indicator--7a509a86-f44e-4bce-88a7-2c72316a402e", "indicator--8a7ae5b0-9bf1-4f3f-b570-919dfe6ef5fc", "indicator--53d67002-fd27-4875-87ab-56627fbd930e", "indicator--f715f3ea-af27-4afe-a344-bbaa7028aca1", "indicator--601cd139-464a-437d-baf0-9abc9973ae46", "indicator--ae379202-e854-4c5a-8d85-ca624c13c23f", "indicator--7bfe72a3-4033-4889-8458-07894c89a0a2", "indicator--7398bd0f-65ad-44a5-aa09-2cc866274bd4", "indicator--43e489a0-9c10-48a7-a85f-8892dc37f076", "indicator--f62f9442-5505-45ee-84ff-71369f6f9b63", "indicator--440b81a2-ae4a-4c54-8e7c-04e9d9cbdf5c", "indicator--0e28ce5e-2660-4ac1-8689-24ab4e5b006e", "indicator--54ed0260-21ba-405d-a73c-87d83b7ff335", "indicator--b4ea957a-9cfd-402b-ab5c-14de1fe57331", "indicator--cbd57e39-1c70-42a4-b51f-4aaaa9617042", "indicator--472736c3-927b-4388-8ac6-b2635a49aebb", "indicator--21ed7fbb-fb4c-4aee-b4e5-508af582a9c5", "indicator--bfebdfb2-5ab3-4168-83c9-d582589f7cd0", "indicator--2b968a14-9de4-42ad-818e-911bc8ec40ee", "indicator--25517ce2-bc9c-4105-b8f4-929645e9d33c", "indicator--8e117736-778a-4f89-98c7-343545b50c44", "indicator--d485004a-6e89-43bc-ae85-9182abf10411", "indicator--889c6909-5d42-4eb1-8a26-bad71b735ca8", "indicator--f84f7b20-333f-40d8-80c8-4be8283f7351", "indicator--d145988a-e836-42dd-8d9b-64c78f90401e", "indicator--824185f3-83c4-42cd-bedd-4d64ccbf06de", "indicator--0b626822-9688-4e07-90a9-03c6e730f172", "indicator--8f6aa1b7-4d20-4778-a311-cd4dc2a940ab", "indicator--5a972945-f477-4876-bbc8-3fa7c85848c0", "indicator--08564d06-d18e-4875-8b8b-2da343b674dd", "indicator--ba75828c-3739-4af6-99c1-ddef5554ab9a", "indicator--ad3a0b53-372c-44cf-a493-50bd5182d8ec", "indicator--f91c5df5-a093-4920-ab33-58c77a0820c7", "indicator--4a91ae2e-b0fe-41b4-813f-c4a73ebf1a08", "indicator--90c47cc5-99d5-4074-b2f9-7f1693990cd6", "indicator--9f75bd26-2385-4c09-938b-fb64cc2dbafd", "indicator--92df19be-68f0-48e6-9778-386e508db925", "indicator--95d38b7f-cbaf-40cd-ba3e-e764b2f46648", "indicator--09909320-19c0-4c3e-9457-3a67c1cdf9bf", "indicator--b216ce05-fa90-4b23-8b53-acfeb21c490d", "indicator--21c013ac-71d7-4a54-b107-a1cfee464d96", "indicator--33fe11e2-e0ad-48fb-bf62-18f62a4e1792", "indicator--d7711021-13f4-45d5-a268-17a6d02b073e", "indicator--7bfaf01a-e6d8-476c-8940-8393be69cd02", "indicator--6339e8df-6458-4b0a-bfbe-d2578a4e7512", "indicator--fcbbfabd-fec8-4bc6-aeea-3827f3c5e61c", "indicator--d85c2e1c-f7fd-4626-b844-5d192c3dccd4", "indicator--0a1b1257-e542-4b83-b5b8-82ae02a6c7dd", "indicator--dcb10189-986f-4e03-adba-3341d04098e7", "indicator--a4733946-d598-4a44-85c5-1de47761e06d", "indicator--1049e34d-89bd-429a-9b9d-90bd0890d3a6", "indicator--e7e5aae8-08a3-417c-b2f5-e448aeefcaa4", "indicator--ac466377-487c-476d-b920-47b2b1e7b283", "indicator--53479f6b-fb7a-4e09-abad-0d9116c57f1d", "indicator--90672c3c-a509-493a-aecf-5c27128206d9", "indicator--8fcbc117-455a-4faa-afc0-9df70314a660", "indicator--353e3710-2813-44ed-8418-6d72d525c573", "indicator--28de793e-1309-4f75-b151-e032892bfce7", "indicator--5f0cb764-fd43-41b7-b222-9724f7c28f44", "indicator--070c6a42-198d-46ff-bfd4-e17613726756", "indicator--e91d3e2a-6873-4584-84d1-98bf35e29fe2", "indicator--5ea78076-ff2f-4c86-810b-41b33c67deab", "indicator--5c8c19fd-abda-4441-a99b-dce080a7a3c3", "indicator--f41aa8a6-240e-4420-9c31-5936776e2914", "indicator--f05b6d58-1a18-414e-a1fe-2e632e1057cc", "indicator--7bbbcf89-f728-4a62-8a04-62c0aa89efc4", "indicator--9e51daee-380b-4665-9092-4ea3c3f1bfa0", "indicator--fded3091-0cff-4114-87a2-f16b9e99229d", "indicator--7d8aaa31-8439-4882-92ac-8b864ff53dce", "indicator--5947055a-c22d-4548-98ab-e1222f0ed6a9", "indicator--5ff9666a-ba9a-4bab-9a80-2d446ce48a55", "indicator--266e1ecb-e3c3-43b6-9335-9f8ed9ef9af0", "indicator--df24251b-cf39-4174-a362-3ee33bcc8821", "indicator--a70dae22-f19a-4997-bc1a-aa79dd767bf5", "indicator--91680d35-f059-49c6-b8a3-e44226d43259", "indicator--137d6488-3d4c-48ca-99c6-5410e98f3cfb", "indicator--0b239735-30b0-476d-b5f0-b4c0f6d14db9", "indicator--16334e5d-d61e-4b68-93e3-8abc4e1b251e", "indicator--747d0128-5171-4ed1-ad74-56eaad33393f", "indicator--7a6213e9-f738-4285-a5c3-6d1455404d11", "indicator--c1c2f259-d79a-4e1d-aea1-21dd2cf029d4", "indicator--a697130b-9b51-430f-8f1a-ff6c2d1738ff", "indicator--8e3101d0-98ab-4682-9641-83d7783d25be", "indicator--b2e06e4a-613b-429b-9994-3a9a8bd3dfe3", "indicator--1f353da9-5f9d-4f6b-91b4-f59672d74c52", "indicator--0972b9b0-a1ec-4bde-86c0-84d10c6c7181", "indicator--449cd51c-5ece-4da8-a07a-c87cff1c5831", "indicator--bf04b0f2-b6d6-4f5e-9d22-4ef250b2ad9d", "indicator--9104dc29-65ac-40a0-ae62-17604af8f22b", "indicator--84180006-a43c-481e-9a45-98746d500a80", "indicator--c104d843-886f-415b-ac35-393fefc4259a", "indicator--cf463b62-ecd8-4a30-8b33-ccf4724d34ed", "indicator--b36c853d-0b5b-41e5-8a34-764032b02301", "indicator--518fbd08-1a95-4152-8e03-348af096d515", "indicator--de51088f-02b2-42b7-9cfd-5d6e17141f7d", "indicator--a9d56145-a597-40d9-9b6c-43544af100bc", "indicator--26d003b3-b969-424d-a05e-e593086634a9", "indicator--841a551c-6932-43ee-b1c6-28699decbf96", "indicator--fe639b16-8bc2-4f83-96da-8de21d0b33f1", "indicator--56ce3f5b-c883-43d1-8658-5448a22abe74", "indicator--7baf9c10-2080-401f-bac4-7ec1c5eb174e", "indicator--417efc83-f363-472c-bbde-8798d01fa943", "indicator--f909c122-b0de-4aa5-acb7-ff8284d24799", "indicator--9b700377-f2a1-426c-beab-269febc88c8f", "indicator--f9fa9df5-5b1d-41c4-ae81-1cf00c19c23e", "indicator--3a4d711f-a89e-4a9d-b201-d185280d8e82", "indicator--72ec3929-b0ad-4b3a-8921-15f2f29e0372", "indicator--a9f4b933-7d08-467d-b298-e413afe444c3", "indicator--ac0122f8-334d-4429-b036-73a74d37aa76", "indicator--b207e381-0385-4e77-afea-490bb9674954", "indicator--916e2489-727a-4418-a9d3-23c356a51961", "indicator--7c1d13b1-3dd8-42f5-8c4b-dec63fe9bf0b", "indicator--5776eacd-5266-48e7-b6c5-f1faabe43d6c", "indicator--e41b5b24-2d5f-4e1f-9a28-17c3332f29b1", "indicator--62d67d27-8fcd-4591-861b-fda5e97b6076", "indicator--5e6a2094-4fdc-4876-9fc0-243ef86d4aaf", "indicator--de58db16-afcc-4afe-873c-433ba54df077", "indicator--9f7e62fe-5aeb-4253-ba09-1174894dfecf", "indicator--cf78aad3-fae6-4b3d-8222-fe27209b7cca", "indicator--faee7c67-da3e-4966-b0d5-225fda3c680c", "indicator--a7830202-9fe5-425e-952c-6d40a66b79b2", "indicator--bbbd2687-7926-4e18-9547-66d65713940a", "indicator--72411567-bb83-4918-9eca-34561ae20ed7", "indicator--a4bae56e-bfe3-4db1-a17d-2445114d621f", "indicator--bd93519c-efb3-4fe3-8bc7-88f9599c1f2f", "indicator--5172e4f8-ad05-4c44-9370-d4da7d2c5ef8", "indicator--71911e4b-7a47-4abb-9830-68c2a65ababe", "indicator--6305ab89-cb9e-486d-917a-4dc3d527c094", "indicator--f575891f-3b7e-4aaa-b789-830d55095721", "indicator--5887309c-9a12-4579-9094-72bcd5f6596b", "indicator--9a427d09-f9e0-49ed-8706-356eac8d401c", "indicator--d7a567d8-ce63-4845-aa7c-d7490af5062c", "indicator--cf98e783-747a-4f05-a4ac-9adda111ffeb", "indicator--75530bfd-2486-47fa-b301-4e103a117f27", "indicator--d0020e1c-45f1-4ca7-b4a5-e34e586e9ac1", "indicator--0c79aad2-5e3e-4afc-823d-a5c2b6a0a380", "indicator--f07c79c0-db76-4d25-be54-7b2776c346a7", "indicator--c6df9213-c9b6-4cf6-81e6-14b5b4da6192", "indicator--86bf151d-23e2-4945-9491-f8637cc0ff41", "indicator--59a586af-5cb7-44f1-83a6-230b50ab4acd", "indicator--b7ac3ef9-f187-41cb-91e0-8b570c218253", "indicator--e6522697-d427-4e36-bfbd-86876bcf099a", "indicator--e829bde1-9c57-4787-8544-a9b016ee829a", "indicator--5c916e14-ea63-4bdb-99e5-99ec161652dd", "indicator--740f182e-a180-4024-94dd-9ae6816989d3", "indicator--4636a053-36f3-4a50-b006-b4b72decb386", "indicator--1de6c4b8-c883-4a8d-aa91-fbca1a7a4cb0", "indicator--75931eef-d729-46e9-a5fa-7f261e02317f", "indicator--c6fe0e2a-c7de-4af3-85e0-82d0607ad5e6", "indicator--41a758d0-5afd-4e9c-b133-399d122f9acb", "indicator--03bf4b83-2423-48b6-b352-562322ecc2dd", "indicator--e24e8f9b-e67f-4d68-8d9e-51430892e77b", "indicator--b7e64066-ee5b-455d-a4b3-d4d93d52ddad", "indicator--9466c908-6900-4d7d-ab09-8b89a5b10f67", "indicator--b90eec77-c99f-40c5-bf4d-fdb2b4e27d6c", "indicator--abc70801-86c2-46eb-ad01-b9d928764d16", "indicator--2704367d-4e9f-470f-8fbd-787289f4275f", "indicator--c9a40edc-6769-4b20-8145-ca61532d949a", "indicator--5638a4d4-c095-46b6-9ba8-be96a8e3be10", "indicator--90fcb9d7-c3df-43d0-97d8-9ab893624b1d", "indicator--bac574dd-fb61-4ef5-8f87-236b94aa2690", "indicator--34283832-0d2b-4f95-a2aa-e03d72aebcfc", "indicator--0b5ef173-0fdc-4bca-8f52-2a6e2a383a84", "indicator--24612a93-b136-4831-9814-0405c3f2a3d9", "indicator--5596026f-a280-4d62-b3a4-e0c2a224e5f0", "indicator--0f2c5ad7-2eec-4a79-86fe-09b23e477eb5", "indicator--451cd66a-1bb9-467b-b23e-e67ff21cd536", "indicator--ee0d4e78-9c61-4228-8e88-8a76ab68ab92", "indicator--05b1a8ab-47e9-417e-a6f9-7c27c03b2a75", "indicator--c5a62f86-9c53-4b28-9609-50682b177e65", "indicator--ac800e4a-de6f-4aa3-86df-9de3c42f411f", "indicator--76db950c-3ec3-4a0e-97e1-b4106ae32dc7", "indicator--3e75d66a-d123-41d1-ada5-7e85e8950ef3", "indicator--f9775cfe-64eb-4f19-91b9-fbea60ea948d", "indicator--48815a1f-f8a1-462b-bf06-61998bde4f86", "indicator--23eaf841-96c9-432d-b8aa-ee6dd55a3b37", "indicator--8d441c7f-277e-4f41-9adb-e0b6cebd7e0e", "indicator--f989754c-4b53-4839-b03b-4bf76cc0b248", "indicator--8c90474b-f3bb-4773-b5f6-5d6db975bb48", "indicator--54cf0429-b34f-46f4-ae57-2dac0bf46bb2", "indicator--1d1fc395-0549-478b-8d64-e431c04d7ec4", "indicator--8f8ccef7-2a71-4dfe-992a-8177dc3f2e79", "indicator--8a05c2ce-c274-4d2d-98c1-7d97ede7857d", "indicator--58f624ed-694d-4957-a8e3-b5344474f0c1", "indicator--75810635-5b96-4a60-ae78-8b15fed00282", "indicator--35a1ef85-14bd-4da2-a371-83a1af6bde7a", "indicator--e0f663c3-529d-4f07-abd1-647f7823fa11", "indicator--3e872d41-c3c3-403b-b31e-bd0bdf84be9e", "indicator--d6dc0bd2-fe13-466e-9fcd-f04a879479eb", "indicator--65e6bb8e-8778-436b-8f2a-55e712c495f3", "indicator--f1330e8a-ce36-4441-9665-bcc02c5a4e16", "indicator--a45105f3-7777-4e22-829f-fe32dd93f979", "indicator--43910f31-abad-446d-9909-afa380fc7e86", "indicator--4e2fceb2-a927-4481-a4d6-9eb9f9707c39", "indicator--b1529a54-5b38-46b6-948e-fb5ad264ab78", "indicator--9e8eabe1-38f3-4936-b9aa-2a9c8eee497a", "indicator--ffeb89c8-44bb-4559-b592-751cc84d0fda", "indicator--e26c3122-1b96-4f38-9f83-a2f066c4e544", "indicator--dcad4658-d9fe-457c-8a2e-a9fed0b86593", "indicator--8d867e1d-6289-4cc3-8265-60bb92ee24da", "indicator--28536d9c-5110-4108-ba7b-291ff169e9b0", "indicator--0b9e69a1-ab0e-47a4-9d92-e16bc9f9554e", "indicator--b172640f-d712-4c43-865c-72dba5bd38a5", "indicator--265d26e9-46f8-42b8-87bb-8272035bc52c", "indicator--3b36c44d-653d-4337-ad65-50a4a56c85b3", "indicator--e41b022d-14e4-4b03-9277-bfb027ac75a3", "indicator--14b0e790-dbf3-4c41-9d05-2b697921eca7", "indicator--fdde8035-0bde-4a57-bcae-8d217f66934f", "indicator--06ba1413-8152-47c4-bab4-c1d49471deb8", "indicator--b2b290c3-d885-471c-bd31-7246e34ac748", "indicator--1114958d-a9b3-4814-ae18-8823b35dbc9e", "indicator--4049475b-b018-4967-b5ea-b408b204911f", "indicator--674c59d1-44ce-4f48-9b66-53b67882d217", "indicator--c7297348-d9b3-4c7a-b42e-d54eeb89d76a", "indicator--bfd07c5a-1689-4db4-b1b3-c8a41c87712a", "indicator--b052bfb1-22f7-456f-bd15-2b80781df3c5", "indicator--0b75776d-ce77-40b9-a9e0-55642e10203e", "indicator--5c676482-6008-437c-aafc-9ebfb758c434", "indicator--c348bc53-e111-4ea2-9dfa-f87ef1a13108", "indicator--240623a7-cfe9-42b1-b41b-be984645837b", "indicator--a2de0c13-094b-4dbe-b59e-a4974cae1b26", "indicator--a74467ce-47a8-430b-9b3c-f86e30e8d882", "indicator--881ace7f-c686-42d2-b101-ac4e89764191", "indicator--1d6c26e8-1cd5-4924-995f-14e76f25efc2", "indicator--b0510157-0d78-42bd-b631-021c9b739010", "indicator--e69b906b-af8d-42e9-af2b-a44318c03fb4", "indicator--e0261860-69d7-4ede-869f-693b4500d90f", "indicator--f8810c72-cd75-4d5e-bc2c-164058e03c17", "indicator--8d0f9751-9e8a-421f-81cf-48bcfb0d556d", "indicator--e5ad9c92-1882-47d1-a598-095c18639d70", "indicator--c4c5af0b-9762-4369-a92c-7f834d4d4668", "indicator--ac375074-5668-48fd-9f12-4b5133cadd04", "indicator--1bb32660-a1ae-4cb0-9de9-a527c1d1c2b4", "indicator--68a95a9d-6feb-472a-83da-9d1618e6fc30", "indicator--5eb4463e-1897-474a-8c82-ef49fec7a48c", "indicator--aca3d075-84f4-4b08-bc8a-231065472694", "indicator--a15e1369-94ad-4fd5-b6cb-091a63f185a2", "indicator--f8ea1575-e698-4619-be68-bcb0a9231293", "indicator--0edeff63-d73b-4563-adc5-f5aa39f1a7da", "indicator--12bbca50-c790-47cd-b07a-a1c6ba1d03db", "indicator--daebbc73-cd2c-49b5-822d-967ba1c9c1f2", "indicator--f751ba7f-c9ce-41ec-b32e-38e096f7a898", "indicator--63a4d92b-9564-4b1c-99e9-4fd69319d9da", "indicator--3536a734-7f47-4c07-9425-ccd7e8bc0ea0", "indicator--649acb8d-4786-4781-a771-8c18e4819ea6", "indicator--43ad9f76-42ae-43fd-816a-e0429356c1a4", "indicator--a7afd47e-516e-4b4a-8e77-09bdbfd01492", "indicator--aec76ae9-7920-449b-938e-d3f9b1ee66f8", "indicator--9d24ec76-f8dc-4a27-b7f1-7cd2bed7d114", "indicator--6cbaab66-53f9-4a2e-af56-9ca136384977", "indicator--9a765342-7c10-4a1a-96d4-440f063ec8b8", "indicator--d73192e4-94d2-4868-9565-d1914a417c01", "indicator--a781f5da-dcbc-4639-9bac-7ef598f87d34", "indicator--73ba3e58-bfa5-4f0d-9843-0952bc53ad16", "indicator--2614a4f5-9e2e-40be-9b8a-fba584511a60", "indicator--69cbcca2-68a0-47a4-a7b1-aeab2feaccd3", "indicator--44a1e489-ba58-411f-953f-dc000f1f0952", "indicator--e7e32948-77e6-4619-8093-b06f80e22a51", "indicator--ee4f0219-11f4-4d12-a2b0-f04fe1873f49", "indicator--dc112fef-a651-4537-9fb0-a91de99c24c4", "indicator--413a1809-d1af-44c3-ba65-e5f26049b8a1", "indicator--e850992b-d88a-4529-a486-9796af7dc7ab", "indicator--a2336045-9b55-45ad-bace-836e12b82256", "indicator--4df5da72-0625-40c9-bfc5-dfce5278cee9", "indicator--458ad36b-efe4-4717-9ba6-b21c191d4bcd", "indicator--4b48f2be-2d39-4b80-8967-baee2aeb77c5", "indicator--f93fb998-02bf-417c-b6ea-37fc94ab4297", "indicator--f4fa8d02-0388-42ae-9e41-69f4a7f30632", "indicator--20bea89e-28de-47cc-8e95-679085806a25", "indicator--2be12932-e633-4103-a6f3-3671cb95bc0b", "indicator--c9dbe5bc-897a-4245-a265-179287964277", "indicator--05745d22-3b3f-4afc-aa0b-95d8a50d2b76", "indicator--b7485030-b287-40e0-ada3-754c7e8d86c4", "indicator--cb70c70e-6f2b-4a59-be7b-38eaaa239b3b", "indicator--16396833-ab0c-4027-a126-0f0acd89e01f", "indicator--00d35532-b56e-4be1-a78f-1d72e63a9a4b", "indicator--81d28b8b-35f8-4c07-83f0-78142b2baa79", "indicator--29c652b9-a58b-4eda-ba51-6735c03b91fc", "indicator--3905865e-3dc5-477b-90f9-e00c3e37cba8", "indicator--c2fd201e-89fd-4ec0-a053-9bdbd377afea", "indicator--58364cf6-caec-4f55-b24e-8dcc4b36967a", "indicator--c0b9dcdf-dd3f-4f22-80f9-f122b625c6dd", "indicator--6f861143-687f-4ddf-82f2-eb7b728589a4", "indicator--b632eef4-5f95-4d32-b42e-9099ce356a04", "indicator--5ecd77ef-7188-45ad-baa1-b57f3ed45d8a", "indicator--1916d004-d404-4a0a-a907-81dca2c8692f", "indicator--4fe43b64-ff02-4c60-a5af-4c9da762fbe5", "indicator--3389ae9d-7a2e-467b-8ab0-d630a242662c", "indicator--ce6d3221-4624-48ff-92cf-232b3b5483f3", "indicator--fdb8510a-e8d4-482d-bac9-b9d61e4a7793", "indicator--2dad1be3-56d0-4fa5-9934-31471db14ee1", "indicator--f6756296-100f-4e88-bb28-b74a5d3a20fd", "indicator--8a7d2fc7-86f5-44bf-9b9f-b492014b08e4", "indicator--1dbae941-4093-4dac-b176-8f97bbb59f70", "indicator--559751b8-d2dd-4faf-9804-21190044e1af", "indicator--85fcaa61-aae8-4cd9-b563-d0050fa339f5", "indicator--e12d22f3-fb03-4cfc-b645-86e03f30885f", "indicator--2f31c1b0-e16f-4ad1-905f-9a17e5c18003", "indicator--ee9a5c29-8133-489a-9719-4b95cc57336d", "indicator--1e4cfc28-c24e-4c3f-8c78-008d361894cf", "indicator--cf663083-6e13-4495-8386-bdc5a7ab1b85", "indicator--bb798cf8-2bc7-4b1d-a3ab-20462ccd789a", "indicator--a9c3b185-1bd0-4306-a627-a3992d297728", "indicator--fa5afbfb-9a7a-42b1-8729-bd5ef2919954", "indicator--dd752a54-ce83-46ee-a443-a24ba5bc7ecf", "indicator--6e45ae80-6605-4b18-99fd-803d47a52d60", "indicator--56c2db85-4b29-43c3-b205-2dc90223202f", "indicator--a83cdc5b-cf36-46a9-922b-73a56122c28e", "indicator--ece491d6-1ad2-4a96-9115-17090a60dd5d", "indicator--cff440de-d116-46f2-a4d3-fb05245bc657", "indicator--4014118d-23a4-4a97-8b40-b9da184bd8a4", "indicator--1464ff0e-8c53-496b-8e6d-accee42a1c5e", "indicator--51707feb-f1e3-43cf-82f1-807c840ea303", "indicator--93d3b51d-6eff-4ad7-bf5e-8760ac98b85c", "indicator--50c9c062-2cc2-4b19-9523-d6f4e8f44e10", "indicator--afce9c30-6d0b-4c83-a624-fcfad5f76a05", "indicator--a26f5b16-8a44-45d4-9714-498db82a8ecb", "indicator--5f88ed4c-a0fe-45c1-80bf-4b1e60deba0f", "indicator--6e1d3b53-b9db-4d1f-a442-98b272b3e40b", "indicator--f14409f7-65f3-45ec-abaf-6063970f2ea8", "indicator--0ef74838-04d4-49c6-9d6e-7965b484bf38", "indicator--fb3e76d7-3b7c-4b02-b6ff-39aa0d38d6b4", "indicator--e0abd524-35c2-4456-a3b3-2c7d1bee9d14", "indicator--5f7e990b-6ef5-40d6-8b7a-79f33cfb270e", "indicator--3f86b250-8e64-44b6-9ecf-7a1f2d25611d", "indicator--46a61e6e-88b9-466a-b655-3b8fde57051e", "indicator--8a580f94-e7bc-44be-b7cd-aff348b9177a", "indicator--6f722dda-7c56-4045-be08-a6cb0a553713", "indicator--e4e31f2d-a753-4cbe-ba7b-1ea86f7dea07", "indicator--78796cab-eaa0-444d-ae7d-40790c0716c9", "indicator--de1d1ab3-7127-434d-bf2f-7c05ffcd9b29", "indicator--e0a486a0-7ad0-4fad-85bd-08783ae1fb8e", "indicator--0b52906d-0173-4f3a-abb6-99c80476ec0d", "indicator--f20a7246-9cce-4c56-be86-777521918a3c", "indicator--e5f31ade-88fe-444a-9201-c1d4d48e5802", "indicator--83ddf469-ab2c-4479-9d46-f5769e0809b2", "indicator--623217b9-3a67-438c-818d-251e78a1b6a8", "indicator--00db8548-3b4b-49b1-b220-f308529942b7", "indicator--eb2f68b9-6d25-4564-b5c8-5a52fbe463e7", "indicator--0cd8d05f-ea56-498b-86cc-620fb0efa252", "indicator--4f4ada6d-dabf-495e-8d21-58a6cf53003b", "indicator--0b3a3387-3ab8-4a4b-ac56-5f4b1fbd9c9d", "indicator--26d0990e-c920-494b-86c8-aba3231ac25f", "indicator--a00e7e90-f945-4cd8-8b91-47d8d88feeed", "indicator--b51e6484-f53f-4fa9-b9e7-83437bfd583d", "indicator--c233f9af-2651-463c-b6c6-59321be725f7", "indicator--b478e862-1e03-4213-96d0-07bef60f96a8", "indicator--f15da2c2-8d1a-41ba-a4f2-a818148b5490", "indicator--7359f6b5-c71f-4e57-93b8-e96c1e679d45", "indicator--62bb09a0-2ef0-442d-bb8e-d3f629d650fb", "indicator--9832b1c6-8bdb-451e-9dd2-b7e39da3f2ec", "indicator--1b833bef-3269-4eae-be33-f30b61b8ddcb", "indicator--b5893d56-cf34-43c4-8f58-04943115730d", "indicator--be36a69c-575c-4ea0-9024-869de9cd1ce8", "indicator--acaf1816-d1e2-4cfa-8509-3ca81fb54cd0", "indicator--469639d7-600f-4c78-a723-58494405d97e", "indicator--37218f54-284a-4496-a9f1-c95352da000d", "indicator--e0ccccc5-21aa-4960-bda3-1b757de90864", "indicator--cffd8ffb-5b16-4db9-883f-d01a5d478076", "indicator--78de3206-b989-4506-ac29-5e3a24b6824c", "indicator--240e4ac0-2fec-43dd-8f93-c506de4d37a2", "indicator--d64e7d8c-6064-4e9e-a23d-de61c557aa54", "indicator--648dcb45-6c21-4d43-9e85-7c354f3cdaf2", "indicator--ec87f249-8703-4602-b2f5-c5f6d7366b16", "indicator--3fc4ac00-e8fb-4a9f-a6db-c8ef51f064bb", "indicator--07fadda1-39a4-40f2-b299-c5102863552a", "indicator--0ee0dc7f-ae73-48fa-b846-20489f32989b", "indicator--a663a3db-c7fb-4592-92d7-f42dff01ec78", "indicator--b1fe81be-2c4a-4ad9-8cd8-59503a053694", "indicator--c7e3eae5-8daf-4a4b-bd43-d7dfedfa79ab", "indicator--ddb5d08e-15fa-465b-86a4-d3ec0f79bb43", "indicator--813376e2-a113-43af-b29d-60d9289dec37", "indicator--372be098-c9d9-4aea-bcb8-380c5470ed3c", "indicator--2f7ac492-e83d-48f0-992e-6a52d4d3e444", "indicator--a5712608-e255-42f0-9fb7-d2dff4fcbf58", "indicator--dd41a1a3-0c7e-4378-a54f-d6fb7e0316fa", "indicator--b3b6d1c3-14c3-48da-a948-e9649ef47baa", "indicator--ca782e74-71ff-4b7a-b6df-c5cfa71eeae6", "indicator--4663cd9b-8392-4fe3-808a-bdb16f4ca8f5", "indicator--b081e06a-3faf-4fd7-b916-bf14cdbf8c44", "indicator--bd998518-0579-4d54-8b9a-c8884aa75674", "indicator--cec3d5dc-137f-47f3-b09c-7aaedec7d2b0", "indicator--8132708e-552c-48d3-8305-0711d0da55f0", "indicator--6c235c1f-8fd6-4545-b640-8cb9b5ad4bac", "indicator--d8857054-78ee-4a40-8221-b205befefb27", "indicator--391f20f1-e027-4d7d-8cb6-89d8b413a1ab", "indicator--6a6513c9-ef71-4fa7-9613-f2576cc641f7", "indicator--5536bbc2-69e8-473b-bcf1-c132f6533e59", "indicator--4c44f89b-1119-40df-8ee7-a96e24085e5e", "indicator--79067e3e-706d-47fe-b2f4-800bff83b578", "indicator--8804b98c-7ed5-4b0c-8864-dbbb1f0f8a64", "indicator--8f2aa589-26f6-4db6-a618-97ca24a54eca", "indicator--1b1cea07-e96b-4c82-a2d3-d3044a469c1e", "indicator--50baee4c-6c4b-470a-9ae8-c6cf7d7a8c24", "indicator--e2ba5a52-0869-4c3e-9390-fc55608f0618", "indicator--c861262d-33e9-498c-934d-89f2e824ae67", "indicator--08a42402-4c12-4270-b095-e2c68981f481", "indicator--ae0ebf87-d120-4960-9801-51e935770bc1", "indicator--8ef734a7-d2ac-481a-ad63-474f84a88245", "indicator--8e3f7090-051a-409b-8f82-a1e33e98ef8a", "indicator--a71bc22a-2723-4d25-8633-faa6b03c122b", "indicator--19eb4ec7-1987-4d1c-ab89-4927d0dbb817", "indicator--477a24f5-9215-4ea7-b20d-88899548c9a8", "indicator--01e2d671-36c9-46ec-8e82-384a96936899", "indicator--5372afce-7757-4ccf-ac9d-7c4dd9bc16e7", "indicator--0cca900d-2055-4a9c-8022-cf498aa685ea", "indicator--3db19957-99c6-4b43-a5c1-f66e8994fa24", "indicator--448aaf4c-5b69-48b9-9db6-0e0fd389be80", "indicator--2546724c-7b5d-45d2-9380-3d39832a2c22", "indicator--13857e52-386a-45be-821d-1c342f335907", "indicator--1a84b152-6afb-4033-94db-d119baff432e", "indicator--b3b96675-c614-4726-9d79-d07117f9a744", "indicator--3d337fc2-4de5-4f55-8f72-6fb1dc56d864", "indicator--54022d33-1b37-48af-9b5a-efe712108830", "indicator--0c9c2c9f-6849-4ea2-89f4-48db5cdd97e8", "indicator--c55501d9-4f3b-4100-acf1-6a9f8571daeb", "indicator--065b6fb5-ac66-4e8d-a755-1718f3ae1f39", "indicator--0506cc94-7006-4db7-8dc9-28f234092aa9", "indicator--ad6e6774-00d5-4c91-83a6-039ae2ea7d66", "indicator--fa9d67b3-40c7-4a3a-9541-e5247f3ee655", "indicator--5fbb0f1d-3b30-4448-8ea9-7c00741230c3", "indicator--5b986fc7-22c9-41ad-8aac-931aabb37cad", "indicator--ec58cefe-019e-4406-9ffd-06c5372cc66d", "indicator--0806284d-a70a-42f6-a703-3562fbf0e2ee", "indicator--3ec48ed2-9adc-4a11-8174-c9a9d84fe098", "indicator--11b89432-2bfc-4d85-809a-e1ee6e2cac3f", "indicator--42cf2f4b-34da-41fa-bcc9-77d8626267e2", "indicator--fce4db3c-1ebd-4f1b-a01e-52c2b8a1dcbb", "indicator--8295e61c-8dbf-4f11-b6a0-08376c7a4a62", "indicator--c6c5d384-2161-409d-bda7-62209139051f", "indicator--95202754-99eb-4545-90d7-3f938b96932e", "indicator--e4fba62e-7ffb-449d-894d-e9112eb69da7", "indicator--f25244cf-7bf4-46ac-9bc5-622a7ccab7bc", "indicator--53cfd1b5-e94b-4061-8a9d-8778d995477d", "indicator--4f1cb04d-20a5-4e72-a35b-02248c613469", "indicator--e8e49d49-b337-4ff2-bc56-53f93260f788", "indicator--b5e09323-3fed-4c8c-8492-168401e4e396", "indicator--a1a72e89-8920-4670-ad83-8560f97d0564", "indicator--0fbdfa89-e5e3-4529-9720-d803853ea44c", "indicator--c4eee77b-e608-4cb9-af0c-3fa4b4bc04e2", "indicator--94f5336c-68f0-43f4-953e-74fbfaf7568e", "indicator--47ae5774-cfa9-43a5-a4b9-cf3e7c875df4", "indicator--40cf88d3-a71b-4635-9ad5-56637b2c6a02", "indicator--75384e23-d563-4f9d-8e02-75090a0e287a", "indicator--86f88a32-8b62-4f1e-84b7-093a8157d228", "indicator--985aceb2-5e2e-4e46-8b32-82757bedeb6b", "indicator--5da85e43-bbf7-41f3-a750-62e6885937ec", "indicator--5986acd5-d243-4278-a137-82c12c43ce98", "indicator--6909816d-2c1f-46ea-83a6-7b0e912dad68", "indicator--9c7c2066-06f6-46ae-8104-87df2d85b486", "indicator--cabf9e89-bbf1-4fe0-95a0-cfb8a885bfcb", "indicator--b6f3f225-b226-443b-ab6c-8fe415d9535f", "indicator--6f69784a-cab5-4deb-a915-421083d5666a", "indicator--500e59e5-b7a6-413f-bc61-c5d262689e17", "indicator--2b7c6dd5-0952-42fe-8a27-d7b6d9ba713b", "indicator--ae99060a-033d-487b-a1ac-ce127babdb55", "indicator--1b4fad58-eb34-4c4f-877d-61bfdfb41e64", "indicator--0eae3d84-2763-4177-8361-6ba6626d0af0", "indicator--3e21ddc9-bc29-4237-a103-3fb9ebaa926d", "indicator--6780dfe3-9dd3-4ffd-8630-79e036c4e1de", "indicator--1fa8f3f9-7840-46f2-a58e-2575bc549d75", "indicator--460602d1-2c49-4c9e-87e6-aad89d3f849a", "indicator--437a30db-6372-4e61-bf87-f85a959cdc25", "indicator--70c64813-af84-472d-b1af-7d5ad8892528", "indicator--2815e838-dfc5-45ab-929e-06093a4749c5", "indicator--b4001fba-dde1-4654-b497-c24e4db201c1", "indicator--cffaeebd-db2b-40af-91d7-e9c91f72aebb", "indicator--b6b6438f-cddc-4fa8-8438-b26fc5525d3f", "indicator--14ab0ded-d34b-4b84-b6c1-050c09fd9eb1", "indicator--f43f1f9a-5cc9-456a-b62d-883ba7cb4bd5", "indicator--4fd588bf-1999-4556-80e6-60f6629569e5", "indicator--661ad6ad-092e-45a9-9b6f-5286791d0f38", "indicator--ed86afe0-9a24-4647-81df-d192d2beec70", "indicator--3d384427-a610-4c78-9de1-d07f06a591b4", "indicator--8ed69d3c-3fdd-4ac7-baae-d665cd2e0c29", "indicator--39a3cca9-0beb-406e-8c1a-062882035699", "indicator--5dfcbf40-7e2c-4b04-896a-29e9176209a1", "indicator--3295d61b-52e3-41d7-a8d7-c93113752bd1", "indicator--23709abc-7c5c-4796-96ee-3d7b6ec02274", "indicator--e408c170-ae44-4067-8468-9c189bf4f96c", "indicator--841f2028-ae98-4eaa-9dc1-a47b262fed87", "indicator--0373ee08-fc27-4d1f-8a87-abbd47ceeef5", "indicator--b106549c-8c89-4064-b98b-79212bde0e62", "indicator--659ce4ad-0d7e-4dff-95bc-f84264dbe1bd", "indicator--352babd5-c4a8-46f5-bd20-352b8061b481", "indicator--8c799b45-e4b0-4276-87bd-5015c389ca6a", "indicator--1a70abf3-8170-439c-ba1c-87e43b2d7cf9", "indicator--d4ee847e-569f-4bda-8a77-77ab324ef462", "indicator--f92db836-615e-4348-8841-b9f1082d83dc", "indicator--e60ddc23-fc82-45a4-a636-01fa9d3323f2", "indicator--36b23e7e-c0a4-47ab-a344-8d00d6e99f0a", "indicator--1b76e93e-437b-4255-8beb-c1938c64e9ec", "indicator--fd15ff67-3714-41c4-a6aa-4b3c058f63fb", "indicator--fca9fe0c-2769-46c5-92ba-290e946eb4c7", "indicator--6035a663-bd9e-402c-80ad-978fb9680514", "indicator--cbe42234-d47f-45f0-ae79-37be158210e1", "indicator--2633a4da-1b31-43a9-8897-ffd84dbc2e7e", "indicator--1a03f900-8d2c-4555-ac46-519cd40931bf", "indicator--79040b64-a502-4c20-82f2-c0c0cd78e2e9", "indicator--01f2ce59-4237-48cd-a977-7aadbf56a665", "indicator--7d38267a-f636-4f5e-ac21-1134dc462fd9", "indicator--6617d96e-2751-4146-9b45-564085cd4a88", "indicator--7eec810a-5e53-46e2-af3d-f9c64a4f62ed", "indicator--0b625a30-a8a3-4f5d-b0b4-e99baa4c597b", "indicator--19c0bd61-8d1e-43af-a95b-980335e4e092", "indicator--c0989186-d24a-406a-b1a5-7d393dfbdf45", "indicator--5eeb96a5-e6be-4294-bfd0-a3901624a797", "indicator--07233e13-1b77-4f33-96f7-ef3fd3264423", "indicator--f80e2370-98e8-4731-91de-9eb9ae3b1692", "indicator--ace8e526-86ff-4738-aa24-7cccff514b1b", "indicator--89321679-61fd-460f-8f1e-753f4e046b9f", "indicator--4a5d8f73-09bf-4020-b324-e3ad19875961", "indicator--6e57b0f0-0b3e-42d6-bd71-934c1d74abdc", "indicator--e58e6d5b-77c3-4055-82ed-68fcdb17a669", "indicator--c746452e-cd55-4b9d-af8c-917327613558", "indicator--e4290c4b-c768-4c44-acfb-f5b62b3effa9", "indicator--6f1002d0-4c2b-4742-ad07-8900d6d5b63d", "indicator--0af7f9c3-40bb-4b44-ad86-6f6173f1947d", "indicator--0c953941-d5b9-44cb-9ac9-4e62a668725c", "indicator--1cdf77a9-062a-4271-8507-5bb0efa639d1", "indicator--38528833-0aa3-47fa-9588-f14f8909477e", "indicator--4d360794-e9c2-472d-9446-f4242d0683bb", "indicator--3d86ee18-8c95-44cb-b3fd-64fc360dff16", "indicator--cba567e2-a24a-4fc9-ac45-67d6e2c54ec0", "indicator--131f13e8-d296-4d78-be35-7dc91c83b0db", "indicator--f1cab624-903b-4ffb-8aa2-de8c8ade2f10", "indicator--a734a765-21f5-404a-bafc-370d7d441129", "indicator--0b26ca19-7b21-44a9-a028-50ad1d23d723", "indicator--5904b9a5-e273-428b-9e09-a209d09bcd74", "indicator--ca233bfe-a8cb-4293-9444-93d9bc3381d6", "indicator--286629af-7e39-42e0-9799-2280f97e991c", "indicator--7b66e49f-4428-4bea-a15f-b8189ce48a53", "indicator--fe93b879-b197-4f1c-bd01-7bc2d1218522", "indicator--5afe87c7-32b4-4f6a-a555-b48e0becaeaa", "indicator--becf044b-96a3-46f9-af31-53ca1e098637", "indicator--23017cd5-5c3a-4cb5-850d-e8744e074c46", "indicator--508b6a6c-ec15-4804-a76c-57dd7e352868", "indicator--2887ab45-1651-4fab-a3ee-f0e6e9a37572", "indicator--b81c88f3-8df7-46ca-953b-416860411b19", "indicator--d76823aa-0e12-4418-9ed5-9e44625f660b", "indicator--ee1672ca-f9ca-498e-90f1-069059821c8e", "indicator--a7ed9517-d018-4d44-8e61-6da74f80745c", "indicator--7df22bcb-815a-4f2d-825d-20a60827426e", "indicator--1c815a1d-f740-4d87-994b-89845362e0e9", "indicator--56b31e58-b7b0-4d4e-af72-7fb484c99ad9", "indicator--b27794a3-6d6c-45a0-8947-82ff029b9d0e", "indicator--d5910fa0-6f83-4d99-8f29-b5287807ec97", "indicator--cd8ec106-185e-431b-8569-549aef820706", "indicator--9b09cdcf-6244-4408-96f7-6abb939d99b0", "indicator--420f3ded-521d-40a3-b659-44c9f464d91d", "indicator--dd55bb4a-7580-4945-bca1-5c9ce5892f3b", "indicator--46ce0540-ad9b-4b21-bfe0-b624b91a9d9e", "indicator--fdc7f3ca-b6e4-4f91-a6c7-46b0daf80a6e", "indicator--58ac19f2-57a1-4282-86d0-60f3fef3ae35", "indicator--f568d7d9-c125-4be2-9a1b-a47c94cd7646", "indicator--81837f42-9b28-475d-9d0f-25d6bb5e8b7b", "indicator--01413b7f-da16-459e-8fc8-1a32c5824eb0", "indicator--e1b3bab3-6d7f-4413-8fd5-d120a1741bab", "indicator--eb342208-a749-48ae-9fc5-fbe3165e4db9", "indicator--b412482a-004a-439c-928a-47d3264e263a", "indicator--272bdc53-bb61-4916-bdaf-535595e4730f", "indicator--2a2509a9-df3a-421b-9299-f393aacfb242", "indicator--9eb7d1c4-16ed-43da-baa6-740170e8197a", "indicator--c29df8b3-38eb-439b-bea5-d361b1519637", "indicator--ecb73375-8779-46c0-93ec-ed07c59b3f47", "indicator--da477a98-7e85-4dc5-9b75-af173c2792b0", "indicator--2b849455-3a12-438a-88ee-4037e301130a", "indicator--f5356a6b-2726-409f-8e31-a179c9b05fb9", "indicator--a9c876f9-9da4-4d5c-b5f5-a8c7c52db7cd", "indicator--57bea15c-ff91-4f7b-a4fa-ab76ade6ef43", "indicator--272beafe-91a4-43e5-b8e9-bcbafbd62414", "indicator--19e678fb-13ef-4701-863f-e20e474b96fd", "indicator--ff5acbe5-495e-4f1b-900d-7523def1b36c", "indicator--316ac307-1a80-43ec-8f07-ee9a165a7036", "indicator--b472c9a2-a4f2-43e3-914e-dca0c056c107", "indicator--04826e3d-942e-44e7-9434-818689e4068f", "indicator--dedb5128-0f91-4264-bf31-e4be68a2593e", "indicator--05e5091c-34dd-4e61-a76b-1a01462a5d65", "indicator--673bb946-8bb7-4f35-abfa-2f29194b6508", "indicator--c28c7c16-2896-4074-89ad-80fcb951fa51", "indicator--a716d198-ccde-426f-8d04-b1f39e092a81", "indicator--9c7da23d-cb0f-4aea-bd38-a98de14fddf1", "indicator--e8197301-25fa-40ad-b4a1-6377bc595227", "indicator--95b466df-92b4-421e-a789-a2083251a9f8", "indicator--be77837e-9496-453a-a930-9c4978edff2c", "indicator--dd727cd3-6b3a-4b7b-bb6a-3a4e59efe0b0", "indicator--13c6e576-6acb-49d9-bd3e-a03bbebbc582", "indicator--55b93c17-55b4-4707-83af-a3baf2b1a4df", "indicator--6a287bfa-f50f-45ca-9492-84d648e2c9f6", "indicator--095ea7a8-2eb5-4790-8fba-fd8c456ac8a3", "indicator--688c80e1-d050-4e61-ac49-684252063df3", "indicator--74383a65-5753-44d8-a979-e2229a2420fb", "indicator--a68446b3-b895-4a1d-97af-3e637017e7a0", "indicator--fad0b4c2-69bb-4473-8244-84d126a0b8e8", "indicator--afe04934-d034-40dc-996e-e6b6be68eb89", "indicator--26dc884e-4ed2-4ecc-a970-0fe13f5b6a06", "indicator--c81f0385-be92-4191-ab52-66ae771356e1", "indicator--4d855f8e-03b9-4b02-b04a-19c294a035cb", "indicator--e55d1a35-838c-4589-bd76-88664c77dd05", "indicator--ff097a25-1034-49e3-9881-487076e3b34c", "indicator--3dbf1d17-bf4b-45f8-8a81-be1a265c2c52", "indicator--ddaf7d01-f8bf-4074-bfed-adacb199015e", "indicator--c430517e-de46-48f2-a5d6-1bc8219316f3", "indicator--9acd68fd-72a4-48ec-ae9a-575ecae80393", "indicator--2fc2f829-74ce-44a1-b5af-cdeb9e4c9192", "indicator--2f574aeb-517b-4822-b6d1-065b33e11bce", "indicator--580a0bae-8162-4dd3-9375-4847eca82a0a", "indicator--36dcd00d-42a7-4c6d-9c12-d0e8241fe8ee", "indicator--feb80b95-a971-44e6-bd40-e9aeb1c98d32", "indicator--68df3fe2-4a35-421c-b56d-f95d36fa5cc7", "indicator--f3ea5adb-993b-44b1-a3fb-65554115b1ed", "indicator--1f4820a0-4a1d-4b5b-a9e5-2eb70dad7cb9", "indicator--e77a0ccd-744a-43c1-bed6-6ca01922836b", "indicator--a5366ee5-5158-48c0-9951-cca36eca2aa2", "indicator--c104f6af-3e33-497c-b8d4-d129f3df9a4c", "indicator--23e20ffc-b889-45a5-a700-a97290c797f3", "indicator--05727844-4579-4d62-ac3b-023d694df38e", "indicator--58435f9b-8336-4c6e-b84e-5305b1fad7f1", "indicator--420a1d1d-718d-4102-9a55-ee28fc63d4b3", "indicator--6a1af312-9dd0-4560-80f6-f5ca651cb26b", "indicator--787f2a30-4be9-46a3-bf9e-f81b7fa82451", "indicator--e88ceef0-4729-4d75-b965-3e4b7e4a83a8", "indicator--7193da8c-95f3-4e03-a5e4-19436f5560dd", "indicator--df931f14-0e5e-436e-813a-86c8bb1a3e4f", "indicator--00fe3f22-96cd-4fd6-a55f-af3244ff0f66", "indicator--4f3cdf94-5ea4-4ed1-99d9-a14bc69f0174", "indicator--eff60844-5541-47fb-82d8-b84aa8ccf7e7", "indicator--0baf0a36-f2f5-4fb0-b32b-f5631568e34b", "indicator--49f63abd-c5fa-4df5-b8ba-bb565c78c606", "indicator--52fe952e-d032-4e33-8c06-2c5bbe225145", "indicator--19ce4f7c-0783-412e-98e1-36135305b68d", "indicator--12fa936e-2aca-4012-a0dd-b3ce08524dc1", "indicator--1ef59f33-972d-44ff-acdb-f9be6f311ea1", "indicator--c443029f-0bc4-48ad-a3c8-9919ae88c853", "indicator--1f36f7f4-135b-43d5-a6de-e6e11bc246dc", "indicator--256bf957-ad2d-4f33-81e4-eab1eb398c83", "indicator--5a892e9e-41eb-4ce4-a75c-49dc9e8d26cf", "indicator--f9d14f24-20eb-4608-9fa8-cd2de6707816", "indicator--1a0c068d-eb62-4886-b26d-c848b07fc402", "indicator--7c5597cb-77bc-47fe-acb4-d7970ca5cf6b", "indicator--28a1fe51-9386-45e8-ba86-d31404637149", "indicator--af4d28e9-f8cf-4689-b18f-59b60ce85f2c", "indicator--e94ad80d-6a51-4603-9258-b021b968eeff", "indicator--bee680ca-fc10-443b-ad7c-f6c268b149b4", "indicator--5c8a65f8-2c5b-4316-87c9-c4d05318fa8f", "indicator--0a3fe13d-d4ea-49cb-a697-09cc296f0289", "indicator--9c43d5be-fb11-41fe-8a80-d275bb81bce6", "indicator--8ef7c101-eaa2-4990-8b84-3e1ffd8482d6", "indicator--2139bdb8-1304-4cef-8efe-d3bf7e00ff02", "indicator--1ace18ff-8687-4082-89a8-8ad0ac374026", "indicator--461e76bc-7c10-47c0-8ae2-04d163ad0d30", "indicator--ba271f54-5114-4dfe-b2d6-67f212a2a1f8", "indicator--f30958e7-1e7d-499a-b06d-de9422daeefa", "indicator--b551171d-1e61-409d-93a9-359145b05a41", "indicator--a7804146-52e6-4c9e-870c-30555ce1cd4a", "indicator--e19b1fa3-1754-4783-9cb1-039a107efc1e", "indicator--8331e823-d451-46d3-859e-bf79d2384e33", "indicator--65ba39e7-bce8-44d9-bbec-53ec6d70b0cb", "indicator--51e4ab3a-9142-4b39-95ff-888332d137ba", "indicator--e7702fbb-8676-498b-b5ff-7cd5619ae3d5", "indicator--3070fbe2-05f1-4698-bd39-1c10c76f2637", "indicator--51908f5e-6497-4355-8f8a-9a4f4162002c", "indicator--36c88038-d10b-45f8-9c6d-83f14acec729", "indicator--f66dcfaa-760c-46fa-99f5-3725b83d2104", "indicator--bad528cb-dabb-48bc-af5d-822e0cb9dfda", "indicator--1a040376-2bf5-43d8-a99a-2f05fa22a6fe", "indicator--eab4a602-79c6-4630-ad42-87ad13e019a1", "indicator--b907665f-d63b-406a-b88f-5514a6c8cfcc", "indicator--874094e9-ac02-444d-8085-fc61d3d2008e", "indicator--c02489a3-24ce-4915-90e5-b0fc33896c38", "indicator--726f0dc3-5847-484c-9de3-8aa7c9c7fa62", "indicator--b78ed8ee-90c1-4a1b-87c0-43d2aaeee679", "indicator--7dd40ed4-d9ba-43bd-a7bf-dfb4e3ffc437", "indicator--2986ab30-7fd5-4629-ab31-cfb549772b83", "indicator--61f0e134-2e62-4839-a82f-c919ea54cde4", "indicator--045de07a-9297-458c-bdcd-4358aa5ac094", "indicator--6f6bea32-9e69-4e23-b9c2-89c3bc6cefee", "indicator--d124b7e2-c95b-48de-8329-3feef3cb4063", "indicator--556bc3af-d278-43b4-b9ef-82e3219b1600", "indicator--48990d98-f9bf-43ec-9827-603462b9e3f4", "indicator--d087703f-51f0-4bab-9fa6-69d37d9668ac", "indicator--2f3d58c7-7a8b-4ee4-aacd-5e935b57de9c", "indicator--1b6b1c01-ce03-4173-a46d-52a3b039e853", "indicator--9f1f4af9-d2e9-449d-9e15-2de8da28b68d", "indicator--08f6c7b2-343e-4eba-8a1f-30ee58ffde24", "indicator--3926f108-6ccd-4e27-a755-bd841d2e6350", "indicator--0104ef52-32f0-46e7-82d2-e2e4570a21c3", "indicator--3363ed22-7a48-4028-8622-ca49c73a3339", "indicator--a9ef747a-fdf8-4405-bea7-b2adcf1a47ee", "indicator--b1ac5e03-b252-4b27-82ed-acb7fb10e5d1", "indicator--2e3cbafb-95e8-4837-92d4-d5dd3ac7cbb4", "indicator--c68aeb00-9f72-415c-b35c-dfc03fc2cec8", "indicator--9e8a1fbb-a82f-4b8b-a054-3a8eb96a1cd6", "indicator--2d3313ba-3f1f-4224-880a-aa528a126299", "indicator--11f2c7ee-4cc3-4282-948b-870b25ee9275", "indicator--428657bc-1128-40ef-bd11-8b32f4566500", "indicator--91f8b10b-9ce5-44ff-b333-d971606796ee", "indicator--328c0d86-b8ba-4f53-bc79-6f4e700e1732", "indicator--86890f6b-65c7-40a2-a270-1d52982355ca", "indicator--c6b86aab-60f7-4854-a7b4-5e296fcaed78", "indicator--c871963d-d6f7-4e1c-81ba-b8f0786b06d7", "indicator--48d9c0d8-5620-48c9-b6f4-805e4add8c13", "indicator--2e82ff07-ace2-4dd5-82bf-7e1391837cec", "indicator--4d673791-aab2-42cb-b766-5091e8dc7e74", "indicator--37c977c9-73fd-4cd0-a51c-a54d35d0937e", "indicator--ad5e32f7-3021-4817-b587-98cce991a805", "indicator--4ce6096f-644e-42d1-bf0c-7318e5f4ebb0", "indicator--3a418155-cc5b-4fcc-a813-d718651c790f", "indicator--bb736db2-717d-450b-8a99-49938284cc6f", "indicator--786010ea-8aa2-4dba-8ce5-478c882720e7", "indicator--776f386b-cc73-4d3c-9880-cfaad977848f", "indicator--c59731c4-3265-432a-886f-f3499aacae21", "indicator--a8c5c9dd-840f-483d-89fe-a2044b69d713", "indicator--6b40224a-593f-4291-a5c2-b4f73f23f0f2", "indicator--1abd69a0-f00e-4e3b-a030-a566813e55a2", "indicator--8bdd892b-313a-493e-82c4-588ecaed0a56", "indicator--8ba74bc3-3329-4d57-86d8-89086f682019", "indicator--d2d92af3-6cca-404b-a485-58743b865c69", "indicator--663842f2-a3ec-415b-8e2d-a52a7722e1a7", "indicator--5c05c84b-38dd-40d8-a6d1-6486144cb058", "indicator--6845e523-9cfe-45c6-acaf-de262ffb3552", "indicator--5c0513a8-e50e-4d38-bb7d-17443f5f4e27", "indicator--5ea69375-c35d-4b97-9405-fab3e84089f0", "indicator--a7bc1ffa-ecff-4b3b-affa-14680dd5b6a7", "indicator--9f53e4ea-7c09-4c24-933b-30212eb25a40", "indicator--9e6e0c0a-0394-4ef5-bf76-17396edc799a", "indicator--e79bea9d-ea18-4224-9a5b-eb1b78a3eba8", "indicator--adef96f1-018a-4783-9e61-99792109817e", "indicator--05ffc75c-afa6-463e-a685-068e4b4d6d75", "indicator--cd6d842e-890f-4614-836b-d5e1b0d77741", "indicator--0280984d-a7b8-497b-9cd2-2807183abe08", "indicator--b52b1a64-82b7-4e6e-9074-e537f94b1e78", "indicator--5442f31b-a68d-4389-b6c6-a06a66b0e12d", "indicator--d2727ac1-56f9-48e0-8821-db39cfdf0e41", "indicator--b64f9e67-9700-4599-bc41-89b0839658a1", "indicator--58fb10a5-0eef-432f-9c8d-719541c1b413", "indicator--16a2fbf3-c29b-41f5-93da-259f8dce24eb", "indicator--92b67664-2eca-4b52-ab06-d444042b6ee5", "indicator--5103b7b6-d50e-44b1-b019-c1e760c84bfc", "indicator--67710111-f988-4c37-873b-814adb7a37d8", "indicator--e362c97d-d56f-4498-94a5-c780904f310e", "indicator--972950f9-f8bd-4070-9927-9c3cbefe2567", "indicator--f7c6f5c3-172f-4635-9ae4-9f8e588f7ba4", "indicator--41417200-2a8d-4739-818d-39cc2f7b4c0a", "indicator--a50061e2-bad7-47fd-929c-7efdf3b6ae05", "indicator--c7ce0b92-bb1a-4c1b-a31a-fe2ec5f098cb", "indicator--a1f8b15a-42d9-4579-8969-7edf5ff6ce2b", "indicator--659e3a6d-c84d-4c81-ad96-e4ed95b71a9d", "indicator--eec03dd3-e391-455a-bc4a-aef0bcbaaec3", "indicator--27ac9737-fa60-4f39-968f-2f8822c4a87c", "indicator--8fdea7a6-98ca-47b8-afab-abf1627ababd", "indicator--8d5f0362-b6d3-4b2e-a24f-d9fa2a653a8b", "indicator--8c420835-ecc5-41f5-8082-766d7931b26b", "indicator--f3671fc2-9d88-4b22-b857-08618867cbe3", "indicator--9f13b4b9-8cf2-4104-a394-e5c7b6315605", "indicator--9d485c51-9fe8-44a9-aa82-2c889dccffb7", "indicator--8bdc40b7-4ebb-4691-acc2-e941d261f7d0", "indicator--7ff26e9f-e236-4c6b-8986-45da72cee29f", "indicator--5aff5402-0ad1-40f4-89f1-1c2a0ea47cbb", "indicator--e73d05ba-eff1-4055-8938-af3e15c4b132", "indicator--c00b66ce-63b5-4420-98be-893cba6081b3", "indicator--881270a8-6f5c-4739-94b8-f282936db381", "indicator--89aeec6d-4e2e-482c-a4d7-37cb1ee6ec69", "indicator--1cb0ec00-ac01-4eb6-bc2a-ef6a45271fa8", "indicator--0e2b1a07-76e5-46c0-a483-8b2c67b7667b", "indicator--34f4e15b-8f8a-40b0-9ba1-7d7e94f5dd16", "indicator--521bfd6c-1490-43b6-b068-798e85dfdfd6", "indicator--62c9192d-4d98-4d8b-9c95-c83a6fea06d6", "indicator--cb67ec12-05d4-483a-9607-a50fe70405d3", "indicator--35a0652d-07f8-4a62-89e3-3a4c7df1e0fb", "indicator--f40ba5d7-1ca0-4c49-bb85-137954ccddc0", "indicator--c89cdf3e-d4cf-4ff0-90cb-f79bd58c4edc", "indicator--18411c0f-b239-4c09-8825-b5195dc11256", "indicator--f838ba7d-8db2-4544-91e6-edfe37fbc097", "indicator--7d394a8d-6a3e-43f6-9ccd-d54071a33c09", "indicator--726daa61-1e92-444e-93a9-a50e3d4badb0", "indicator--216ecd8c-d300-4745-b2c3-1059f2b53d2b", "indicator--6dddba00-5922-4a9e-a79c-40e8b0b19da3", "indicator--6dcbca45-63f4-49b3-b669-f521767afb85", "indicator--c54e9baa-b593-4cd9-9f6f-8b1ef4efc728", "indicator--15c2f52f-3157-4488-8e99-9cd40e0e9836", "indicator--9de77022-4a71-4c38-be0a-1e9efbf6668a", "indicator--9e018451-cd21-417a-b1e3-68f97213fbc3", "indicator--deaeb4b9-254c-486e-9e70-c94ef69e020b", "indicator--04cb7cba-1215-4ca6-af97-b268f6154b00", "indicator--f966f1c2-da92-4b1f-bf56-1cc3e0d923fc", "indicator--74749587-4683-4589-9efb-eebe8d91c458", "indicator--0b1aa2ba-1848-4dac-aaa0-6b7a224c8774", "indicator--28c2f455-9963-4c8d-9cc7-dfa99f6c24cf", "indicator--6c0006c0-6555-4262-a48d-b236cbba64bd", "indicator--7edce46d-d616-4909-be95-b6e6fa4d0956", "indicator--05f1135f-f789-45ed-b3db-523b9cbb138f", "indicator--314d56b3-f6ec-4429-99e9-62716e682e36", "indicator--4665f7a4-8167-48de-a27f-50ed659e5a09", "indicator--6c3e5d12-2219-4307-a974-f09795edb9fc", "indicator--6a9e5b09-63b0-4be8-9f11-d268acbd133d", "indicator--251b2c06-778a-4d4e-86ae-64f2e48273c2", "indicator--36259520-d57b-48e5-88ae-a431ab7df2c6", "indicator--5b2ea7e9-b6c4-4b8d-99ad-94af8fa5e321", "indicator--2b34261b-e3f9-4d4c-9ba1-52a13ea14e19", "indicator--308040e5-1a14-4bb2-b4c5-e9d2692ceccd", "indicator--97795740-6859-4e41-b07f-da932f3b1a51", "indicator--92ddb4d1-b234-4254-bc51-359aedbd49f1", "indicator--a7a6c47e-7fed-4881-8dda-1faf22cc44fd", "indicator--8aa1331f-bb58-4a97-a639-8581b1e190dc", "indicator--819fc7a6-d91c-43cd-9985-80a082ff5ff1", "indicator--b30b0726-8505-4013-bb87-8d8a0d9a1fbb", "indicator--b0cf956c-1811-4e44-9c5b-18709aa6fd4a", "indicator--5b901a59-8b83-44de-867d-e64ecd80c06b", "indicator--d8efa820-fb7f-43a4-9945-7d89f384ec6b", "indicator--5b143351-8c66-41db-9e19-774cba8a412e", "indicator--d5c67882-1019-4fd5-9bed-862bac649847", "indicator--594d8727-b996-4998-ac38-cec055164482", "indicator--28968ea9-7b8a-4919-88fa-36c47fc2ba06", "indicator--b9331b48-76e7-49da-8c0c-4b574da16aa0", "indicator--5cc07329-8aee-4ebd-9976-0639932f6728", "indicator--48e7b1a0-90b0-4984-b23b-d3e6ea6754f0", "indicator--b7bd5ebb-4de2-4524-af66-89eba4312583", "indicator--a9fe6b49-1268-4b90-90ca-72933969249e", "indicator--ff5c2a72-ac74-47a1-8687-5b8ce4dea001", "indicator--e93e1815-d534-42b7-8d0c-f10324f09a7e", "indicator--460fb8dc-2c38-4efe-92b6-ab042d62d11f", "indicator--2920f2b0-bb96-4d42-9b6d-55b9207267e3", "indicator--a2f6389a-17c8-458e-9c92-c847d85ab289", "indicator--51485855-3679-41a4-b34c-3f87bdf33843", "indicator--c2443a36-a4d5-4eb9-94a8-b68db5640805", "indicator--25711b9a-ba5b-4662-bb14-36f7618bf37c", "indicator--e8211bbf-1fb4-4f9b-8987-be672b81575f", "indicator--feffea76-7e6f-444e-bc2a-302b549e7d8e", "indicator--8372a130-1bbb-4be0-a5b4-b3239519dc63", "indicator--cdb6855a-2464-4f89-bb84-ac3469eee3e8", "indicator--2bb9b6fd-5d4a-46e8-8049-0a43492bf37f", "indicator--0a745223-92b6-4f0f-a1a1-6af2ff6b096c", "indicator--26c5b077-5e74-470b-b8bb-ed866ad23ca1", "indicator--fbfbf08a-8f67-41a7-a249-2b2426a708fc", "indicator--1233cc53-9f79-4b61-bbef-7413f9b2c431", "indicator--7921a6dc-c577-41d3-845d-006448cb0641", "indicator--e971eb8a-af33-41f3-a0cf-ade08f7ed7e5", "indicator--c4419588-d9b1-441d-aad6-e49112d151d7", "indicator--57414446-9105-45de-be65-906a9dd923e5", "indicator--e32dfb36-48cc-4d5c-9a95-75d71b579971", "indicator--5c017234-1a71-4715-8130-691c08b30411", "indicator--83c11451-d5b7-49f6-b136-9da9e8d007f1", "indicator--0b6ca78e-5c6a-44bb-8825-8831072465d7", "indicator--ef852fa3-a1ad-493b-936c-05a4ae46a5de", "indicator--58973755-36a4-4168-85ab-651a8f917983", "indicator--a350acec-92ef-4a41-9228-c11335f0e489", "indicator--579620b3-30d6-472f-a075-a7bb4acf18da", "indicator--5191df8a-6765-439d-a4a7-a142d8ec00f1", "indicator--d9a8ca1f-5f60-4853-a93a-ed5968fd24d7", "indicator--73e0e978-4f38-461c-b9ca-da4be6f7c769", "indicator--b3046165-d04b-4312-b73f-6c6447fe16e0", "indicator--d45b7936-b85f-4aca-a049-91e813b43888", "indicator--9d72165b-cc15-4117-b51a-da465102ea48", "indicator--2401e54c-9777-496e-9439-99d6420716ff", "indicator--54f7712c-fe9a-4a7b-a615-15fda96bffdb", "indicator--3d30f395-4794-4875-816d-51aa04ac67ce", "indicator--ae35e2b5-c505-43b1-ae2b-56be034904a4", "indicator--70b0884d-241a-4bb3-926f-b0f536000353", "indicator--06142e99-7788-4e37-9d53-fa541eff632c", "indicator--27be43c4-967a-4c5b-adc4-34325f9a7791", "indicator--4c53d626-7614-463d-9449-1bbf10b40b25", "indicator--67b8f118-a456-454d-ab33-e9963c0fe9dd", "indicator--2294987e-be94-4359-869f-553800e82953", "indicator--0217298b-018c-40cc-88ff-440a6219a53a", "indicator--60444454-0439-4c2b-9479-216a4c1d39d9", "indicator--bbd63983-88fc-4902-8003-98179208d81e", "indicator--8aadcbfe-7f6d-4eef-8a81-6e5367efb854", "indicator--ab2ab473-5148-4a2e-ab41-ed35a0e46b7b", "indicator--74a1a8c3-d286-4df0-9082-43234f83fb99", "indicator--f87f23d3-d1a7-4829-9235-39798c564102", "indicator--1ad31e58-d244-4f03-bc6c-ddddad05a148", "indicator--17f76e45-ff00-44d8-b8bf-4fea7d8dc3eb", "indicator--863df56d-cc37-41c7-a4f7-d62d1a121571", "indicator--037fb77c-31ff-498a-91ae-64d5e9fa581e", "indicator--1904c5c3-ff18-4db1-ab7f-b73cb85bd68e", "indicator--834f23e4-bf1b-4508-ba61-cc6d83b31fa7", "indicator--3054badf-4c8c-4451-b3d0-2c74ae384d6b", "indicator--4f812081-96ce-4cca-85d6-72cfc8ccd406", "indicator--b16c6cbd-5930-4296-9203-99eb73525191", "indicator--20c3f8e1-67c6-4b79-b211-3578c118e756", "indicator--6ff71703-1751-475b-9541-01b47c3d1d92", "indicator--55c3ca63-32b9-41e1-8c47-b4ff4a5e2d8e", "indicator--a0d88173-b7ae-4c1a-a6bd-f45a84738552", "indicator--67a63ac5-30c2-4bf5-a695-68f4ed7385de", "indicator--9f4e261b-7bfd-4e56-9151-38c8386667d0", "indicator--6a6332da-6de2-4d79-ab36-85da713f1dbf", "indicator--33b1404e-f96e-49d5-bf3b-6a7ba292e139", "indicator--12bee3e6-2d52-4df8-b6ca-358ca3903f5d", "indicator--2814d8ee-9480-4578-8d60-91c2561bbfd7", "indicator--3729f2d9-ff6e-401e-bee1-84d0386cf645", "indicator--c17541c3-aff3-44f1-8ce0-9defd8f5e263", "indicator--fb501900-1ed9-4e09-99a3-3360e1c0933a", "indicator--0e0d1272-d102-47c8-8b4d-03edc24a267a", "indicator--faaed463-2508-4438-880d-9a5311808d7a", "indicator--d3c12846-3f2c-4741-9d23-ce49befc57ac", "indicator--608a3e73-f4e1-4554-812a-04c9832db454", "indicator--ad3f33a5-5e40-46de-852a-1f7bb7aa14ee", "indicator--69332c78-73a0-40d8-9699-e16375b98058", "indicator--8ca40ec8-5cb9-4fe0-9174-32f3e06e6920", "indicator--d0f71cea-b01b-4c85-81c9-4a18d01e894e", "indicator--a91f09b6-70bd-40e5-bc5e-82d5235c407d", "indicator--9fe2710b-658b-4730-ac54-847d57e9e312", "indicator--c7d3f6a0-4749-4b35-a84d-79b7f7582fad", "indicator--96d66997-ca42-48cf-910f-68f70116193a", "indicator--03f33896-290a-47b8-baf2-62de313757c1", "indicator--e8c22c7f-a74e-41da-a747-3b8f0faa7343", "indicator--ae5b1011-7578-4cf5-bc01-5f2d10868d3b", "indicator--4cda3489-ed47-463d-9c3c-7e48c613ba44", "indicator--fab6078d-f669-4290-8748-b3ae71806628", "indicator--5257fdb1-e7b7-43e8-9dba-6435e0157d0d", "indicator--d939307a-870c-4ff6-b7b1-ac9a2922961f", "indicator--c6773d10-46fc-47c4-90c5-def0859e734e", "indicator--82738a94-9ec6-4677-a0db-649d4d32c82d", "indicator--ba0cd58e-1ed9-4ffb-8bab-e069a3f62c74", "indicator--eb68aa9a-45ea-4158-a9d8-9127195fc017", "indicator--98085b23-ef09-404e-8f08-c4e1afbd5fb3", "indicator--05999800-34ed-4f35-aaf1-4a1c1961861d", "indicator--9a994f83-3f45-4ac7-8113-10f0c1cabf98", "indicator--34fdd998-d50b-40ca-b227-8ca922f12677", "indicator--ea666600-527f-4e18-8b1f-8e37a3b2f5ff", "indicator--1663b7e4-eab3-411f-8930-b6ca5a17603a", "indicator--08c7500f-4ea6-4e79-a564-4895e6704a44", "indicator--5149a7e9-cacb-4292-b752-f4f3a6a0175c", "indicator--4674d6c3-aa12-49f4-8f52-6f659642ac58", "indicator--1ef024bb-8b8e-47a9-a4de-83165c4d82b3", "indicator--905f7af6-6358-4f62-8e1a-c511c3fd9746", "indicator--ef87b5b0-b9a1-4d9c-89c1-57df6d84abb1", "indicator--ccc8da82-484c-4a17-803d-7a980b1c5aa2", "indicator--c3d9e11e-4b3f-4d25-9d36-376dfa95ea71", "indicator--0875ab2f-4464-4fc6-9b61-8570e7f1534a", "indicator--15c23c77-52e3-4961-b511-1f7fc4b1f59b", "indicator--1d9f3eb6-d764-4b9d-bed7-805c11a7d036", "indicator--56e1d8e9-ca01-4967-ad3c-a39ccd2b1eb6", "indicator--682de883-a9c9-4bc5-b91f-4aba0543ab6a", "indicator--ab9e57b4-cc39-4187-a91c-9ba794dfb2db", "indicator--4d3344ce-5a60-419f-94b2-57df12fd15ab", "indicator--ad34de40-bd15-4f18-ae31-91d199ea3fd1", "indicator--8cd937d6-6c16-45be-af09-2425607853fe", "indicator--47593be0-929e-4986-8afb-3cb48b78d61d", "indicator--f7d62eec-c93b-4a12-9598-949d3c662798", "indicator--3b038851-045b-4746-9f07-6616e7a89386", "indicator--29688c6c-5975-467b-9213-7d967a20b180", "indicator--147efb01-7439-4aeb-8327-8c4b32a30b20", "indicator--444b0ca1-84f2-44ee-a7e8-82d15dbf0a80", "indicator--254708ae-084c-4682-92b6-77a8c4170250", "indicator--54faa637-bbc0-43a0-b0fd-192e50f30bdc", "indicator--38508584-749a-4459-bd54-94502ec04e16", "indicator--84fc4ea1-df5f-4c04-ae41-5dd6a3b3b0f1", "indicator--2dee1d3d-968b-428d-b6b9-5477b82c4037", "indicator--3b99fb48-a79e-4d3a-9f4f-30e4d8b82bc8", "indicator--afbc2e78-8869-4612-887e-deead684dfea", "indicator--d3f85360-49e2-4a8d-9eeb-e80bdfd4ff5e", "indicator--522b3027-383f-4ad1-ae48-d930b1d9a35e", "indicator--e1e0b0db-85c0-445a-89e0-280dba8c5820", "indicator--70d931c9-25de-437b-8fc4-f95518ef2c70", "indicator--ef5739cc-cbf0-4443-9e98-68ef41fc6056", "indicator--e2cc16f6-cb6a-4188-aef2-3fd3b2700441", "indicator--428698e0-9909-4901-abcf-44874b928bfe", "indicator--4fec31a7-4d15-4f5e-be25-b26b180a297c", "indicator--18d390a4-2f50-4642-ad37-a06f7454e89a", "indicator--66bccaa0-8aa0-44e6-8241-14525dcd0564", "indicator--7c100e41-3b49-4613-b0ce-73a463e98116", "indicator--8d5afe29-bada-408a-ac31-04f137a7a694", "indicator--48627cce-60a8-4b8a-95d4-0852ce6eed47", "indicator--315c0d0f-ca40-4cbf-9574-d217a237e810", "indicator--4591fd57-f3d5-4c08-8145-e62dafdece50", "indicator--28814e36-4718-414e-86c3-e5c1d92151c8", "indicator--30fd626a-323a-424b-855f-a589e039922a", "indicator--35e7ec35-d817-4cb3-ac87-5b536f13d547", "indicator--bf49b1cf-7f20-478a-9926-4d4555c6344b", "indicator--3d942f98-30f2-4602-8170-7b46c9e9350d", "indicator--e66e6a75-4cd2-4c1a-bcfd-b0c24eb34693", "indicator--f25ba759-b58e-40a9-b65c-7e225d50c786", "indicator--841ed508-988e-4476-ae4a-2517b111e16a", "indicator--a8d1cbc8-e4eb-4fbd-8f9e-b8e10bb8ef23", "indicator--b95fe69e-635f-43f4-8777-f73181f4511e", "indicator--43638df6-f440-41a9-a5a6-93686f725ad0", "indicator--3463fbd9-8e23-48fc-86cb-4331f976b20f", "indicator--efdb9bc8-ca1f-4624-b037-7c18f537f2d9", "indicator--298146a6-2c0d-4b7e-9430-9158e8b1bcc1", "indicator--d9058a6b-7851-4fda-adaf-a1fe4c7ce56d", "indicator--2b40f999-f082-4871-8bad-d6506a1ce3bd", "indicator--aee1498a-86fc-4429-98eb-0fd92202e5d5", "indicator--f082fb19-491d-4ebf-94d9-ac425f7486b8", "indicator--a8c2f1da-09f0-4e28-bfcf-5d9c753ee50a", "indicator--377bc481-4f79-4e88-8d77-b5c33e45ec18", "indicator--a69485fa-ba6d-40e1-8e4e-68029d89d246", "indicator--6fbea5a4-6f45-4103-b575-edf506a917b4", "indicator--8779b7b5-42b7-4269-ac20-0e4524186c5b", "indicator--f58f47c4-0806-42c1-816f-7121dfcb1a68", "indicator--fb9de106-88be-42a3-bd61-d466dd4f5591", "indicator--b708576f-5822-4d1b-933a-b5a0cededb9a", "indicator--991bc305-eaf8-4aa8-b521-26b4e6839a88", "indicator--7b09d681-8c08-43cf-9d6d-adf4eac6534d", "indicator--2c962661-87c2-4912-acb9-714bca1f7b53", "indicator--72568f87-f096-46f0-94ad-8769efdc4d82", "indicator--5ad92243-c7b5-441c-969c-1902d633c1cb", "indicator--2550c4ad-8c7f-4683-a517-564469e5c10f", "indicator--727c944e-3cbf-4dc1-9fd3-4b5e9b5dd972", "indicator--e83cd8f9-a558-4948-ae5f-4a10f35718af", "indicator--af947e1d-fdb2-41b8-9e97-2b87344d363a", "indicator--4173a15e-607e-4b40-b990-27f353e3eac8", "indicator--a3a8ebc0-faaf-4766-bec8-6eac670de00f", "indicator--f5ee65b2-b0ba-446e-b8e4-e76ba40ce2ad", "indicator--acbd926d-43b2-46f4-9bf6-3186af1e0a35", "indicator--5609b167-5225-4cf8-ac64-fd8b43e70e17", "indicator--d0f66d6e-5861-4ed0-814e-7c7ebea78c86", "indicator--e60345ee-a0d2-4532-8714-a1ccce5ed475", "indicator--c2b47ca9-b834-4131-802f-deeb54dcb475", "indicator--b6397f56-2ef9-4fbf-bc6c-e33d2d919184", "indicator--6f93347f-573a-42f9-a840-5a18db181a1b", "indicator--afdc3627-c4c5-42da-8db1-8d9400c6f078", "indicator--a2894299-d4ef-40ab-9d53-b03aae51cdc4", "indicator--605dbead-47dc-4c3d-b683-621b9931a7a9", "indicator--c280ad29-5555-4917-9992-93ef8328a598", "indicator--5afc73aa-3fbe-42aa-b561-d53a832f1ca6", "indicator--275182ae-8f7b-4c6e-ac62-78ee8527a9c9", "indicator--0aad73bc-67b3-4f38-911c-11e6fe0cf525", "indicator--e8f86b4c-9356-442b-913f-1562a6beb8cd", "indicator--c246b64f-90a6-4f32-bffd-cef29455515f", "indicator--e80b5672-e110-4829-9c07-fef2d141550f", "indicator--f22d5b27-8544-4eb2-972a-2ddc0cbfe2c5", "indicator--80120f22-a1b0-488c-b131-1fa8f4d77aea", "indicator--b731f901-7112-45ec-be60-7c2fec3fd2e6", "indicator--92fd7a28-e0bc-4c24-aefd-a575dfcad3ec", "indicator--28c2b3a6-3472-4de8-afea-046bf7591fe2", "indicator--6d2a07fb-cdb1-4844-894f-94f7dab2b0f8", "indicator--3c8bfa0d-4787-4502-9f06-1b81bc63e7ec", "indicator--837458a7-6822-4202-98c2-7f7b9ae142d4", "indicator--ddf02feb-4e3e-48ea-941c-f86586a5cf39", "indicator--065dc0d3-e572-40ef-9201-c09709e3b220", "indicator--cbbe2096-5360-45f3-9c00-7e3fd0ba9f3e", "indicator--c04bf3f0-3679-4bd4-87f7-573cd30b9e9f", "indicator--3803ad12-6b5f-44fa-b58f-cd5aafa9c83f", "indicator--a9762075-c17f-4fb5-be60-7861f2c4e8eb", "indicator--80859fea-4f85-44ce-b2b0-8cb2b6d1b69b", "indicator--079a1e5a-3b5b-4a43-a9b8-9786eb9a992f", "indicator--fbc0c89c-c3ab-44c6-ad6c-8f1673266d0a", "indicator--3c195c4f-3ad5-4a33-af65-82c1264fd34e", "indicator--9d62ffbe-c5e4-4fe9-9fac-75a88f5d5361", "indicator--6ad9cc0b-4a3f-4f58-b9c4-6dfaec0bf68b", "indicator--aefbf5e6-21d7-4064-8a86-bf223a606335", "indicator--751f902a-1b12-494e-8f63-a7f34e15981d", "indicator--5a862ba6-25ed-4345-9ce4-a742cc4215c8", "indicator--990bc495-ad7b-4cd1-b1a6-fc7219ff8892", "indicator--6becdcc3-1406-408d-9c65-0aa0b91fd592", "indicator--dce2e457-916c-4b9e-a373-2b741c1e8e17", "indicator--a884c7e4-2f7c-432d-bdbe-af5ebbed45f6", "indicator--fdd897cf-b3e2-42ee-9648-9194dc1d7bfd", "indicator--f3180d60-341f-4b87-9250-e53343fc9b95", "indicator--f5bb6e4c-854e-45d0-a375-b256552173b8", "indicator--79757afd-aabc-43c6-b34a-76cab8cbc536", "indicator--e4185e71-3ce5-44cb-8323-b157d7a04e63", "indicator--99797dcc-e80e-4741-927e-4044cc9de609", "indicator--5d973214-2629-4c23-9e35-6452552c9044", "indicator--93c9bbea-baf3-4e13-8c31-919bff3b254d", "indicator--3b6efb31-8dc8-41b7-a6b2-673e8c35675e", "indicator--aa8ca465-caca-4ce8-9f92-5c94d8e39896", "indicator--3a5add28-5133-401f-b951-5e3d31509900", "indicator--2267e8d3-ba7f-4b6a-b994-fbaa2c3a239f", "indicator--8387208e-509c-4e95-a838-482f635a1a8e", "indicator--08cb8ce1-8797-4d0b-9803-2076af4fb36d", "indicator--a79f73f2-12b8-48e0-aedc-fbad5dae75ad", "indicator--02a05987-46b9-42e4-9694-86657e9d6f56", "indicator--708e3d7b-6adc-42ab-b7a7-427a9f0dca05", "indicator--6100548b-1060-4792-b9b4-624ae7a9c145", "indicator--c814e6c7-bda2-40c7-9430-7581d51c57a0", "indicator--8f2053a7-dd87-4755-bfd0-e880af2e5c36", "indicator--049281f1-e118-4031-98ac-5920fd4af4d3", "indicator--dcafe437-3117-4dae-8c5f-3110f3b8f355", "indicator--01a38c17-56a5-4719-a37a-9e814aeba680", "indicator--4edecedd-5810-4bc7-b665-57654d02f7cb", "indicator--f572672f-f6d6-4308-b0f3-b8358249f814", "indicator--aa48f961-b6d5-4bce-9798-20d0dd3a4f9e", "indicator--cdd20268-0181-4c5c-9071-5d92ef540952", "indicator--2d583b61-7e0a-42ba-ab5c-15972173df1b", "indicator--c5c1255f-a351-48a4-ad76-72060b5c2c69", "indicator--bc5d8a02-5280-4ab1-885a-078a34e71af1", "indicator--35e8dbdd-ce6a-403b-a0d4-198f9b4b3a72", "indicator--52a15cd4-0719-4d17-a651-44479e615c00", "indicator--a5245328-e874-4b33-9b35-309e992bffd4", "indicator--a3dfa531-1ef4-44b1-8e66-f1444f6ec516", "indicator--473a5797-d863-475e-acbb-eaf7530e5f3c", "indicator--3c0e0b08-8f65-478d-8a74-929c31b35920", "indicator--a4dab73a-ce6c-4e0f-8f27-a3edf7176ba9", "indicator--b699bf84-af1c-4c64-9b9f-bf1ba35b65de", "indicator--a0264e3f-2ebd-4ca4-a8dc-4f3b42787ad0", "indicator--dc0d8909-06b9-46e6-9aef-f42ebf83921a", "indicator--1b94e3c9-8e35-4833-82d8-26d6b4fc3aec", "indicator--8946dbad-1978-4ba1-aac0-8d44b97ed182", "indicator--e4fc3b55-1c44-446d-8901-865ca39265e3", "indicator--637027e9-de89-48e3-b5b9-b5d18d35f0a0", "indicator--9bc0d01a-71d3-4709-a638-314623cfa4e5", "indicator--a1080493-442c-4c6e-884b-fc6637a9eefe", "indicator--9240c710-b18d-4f46-ab14-7e164aebe7b9", "indicator--3daa1202-51bb-4a54-88a6-cc7f9b917333", "indicator--a903c44e-6702-4215-8b3b-d9a138deb4fa", "indicator--ba8a0af3-4428-43bb-9a00-f1bacada40e3", "indicator--d43255a1-03ce-403a-807e-70f6f981c9ac", "indicator--8aab9766-f94a-4c37-a82d-af5601590e5f", "indicator--06a2c544-2fd9-4353-a498-3d789e1193db", "indicator--5cc264a1-efeb-4cc8-8b4f-b79b401c2916", "indicator--579bb51b-f76e-4788-9df3-c48245e481bc", "indicator--2f15893d-e113-41e9-8cc6-c3e564d3a76c", "indicator--a16dbb12-4d7e-4875-9ccf-620059e589bf", "indicator--76e3ffd5-a599-4aac-9ffc-d9240a110f9b", "indicator--25cd203c-9738-4409-941b-943867bdb1b0", "indicator--8d7964cb-a198-4d37-9113-7390ac542dfb", "indicator--dc4c28e5-c9c1-451c-812b-5c81ea3a39ae", "indicator--62cbb9b9-0d9e-4e9e-ab12-4e53c4f9b18f", "indicator--3ebcbb65-abda-4e5e-a07b-820d2c1ee924", "indicator--bd88650d-faae-4dd3-9030-00303fb80ee8", "indicator--a7b8115c-d7ef-413f-9ddf-027a2ebe3907", "indicator--06189a2f-b080-4dc8-857e-eb63b335a877", "indicator--3ec6a27c-97cb-4e11-a617-57cd7407d200", "indicator--e98cd8cc-8010-4a52-b02c-cbb356e7c13e", "indicator--fa119b30-9817-4e6c-a474-6e8a3d36a379", "indicator--13b69aa3-1758-44a6-b2b5-c64d7409babe", "indicator--2e99ead2-33a7-4441-a421-3af229d14785", "indicator--e9c459ed-1b8d-4cee-8956-db6527a33173", "indicator--335ab3bf-f673-4302-b6d7-0176a42ec017", "indicator--743b2486-3993-44a4-855a-a7559cfe2255", "indicator--3b5fa133-a35f-4cc8-87a1-43bdec670c53", "indicator--4a013c6f-e691-4b8a-b166-28a670b2cec4", "indicator--570891c7-1f16-4c28-bea5-822abdc15b35", "indicator--fd61f804-e2d9-4efe-b305-63a3cbe84868", "indicator--a0ad6b6f-01ba-413f-b62e-212dacdb0cb8", "indicator--370cb574-0415-4683-8146-6f9fbd594e9e", "indicator--21d3945a-9ee7-402a-ab2c-2620631cc192", "indicator--87f45974-121b-406c-9b01-07a942f79c15", "indicator--00af9f2c-45d9-476d-b2e3-11f4388099d3", "indicator--1303b8c8-10cc-451a-a678-dfaecbce1d90", "indicator--b715af92-5b6d-4dd0-82bd-937f71661238", "indicator--44f5f3ae-0c9f-47f0-a035-831c0c2fcda9", "indicator--fd52e550-eab9-441a-baef-62d2876b205b", "indicator--2917f747-6bbc-4f0a-98aa-59d9ac22ef6b", "indicator--c7ba4fe2-916f-4763-8b26-9d8131b961d4", "indicator--fb4604ef-9214-44e4-8462-849f115ebd74", "indicator--36455c87-3967-4538-84da-2f3248168832", "indicator--31fc134f-7216-4730-b102-71f5042f13eb", "indicator--249e90c3-0b23-4be9-ad17-7f589167eccb", "indicator--fd91cafc-e97f-4fe3-bf1c-4dcab347edc5", "indicator--b24d866a-d44d-4aa0-984c-7bea38735162", "indicator--27264d95-fa4b-4202-814c-fee6b52205d9", "indicator--024858a3-613d-4f35-b43c-0498c0488969", "indicator--99878931-e7c2-418d-8f59-1e0a73d5bee9", "indicator--ab0af7cd-fec9-4860-859c-f67016348bdb", "indicator--26f7dd99-1dfb-43d0-9d78-75918af22f65", "indicator--51c00898-83c7-4d3f-bae6-e9c72779cfde", "indicator--0ad2f53c-2e72-44d2-95f4-6e357542766e", "indicator--ca66f8bd-6382-49c7-868e-b12b0c3897e4", "indicator--7f1d9e1d-3223-432f-8cc2-b80dc8d7704d", "indicator--7e3a25bb-3b01-4a78-b768-ff258a30bdd4", "indicator--fb341b53-4969-4423-9b5d-76d476bc18fb", "indicator--b6625c0d-fa74-44e5-a4be-d0e66ac541e0", "indicator--ccaddef7-0d09-467d-84a5-7e2a8721e589", "indicator--1019ed74-9cf8-4feb-ad39-3eeaf1cb2556", "indicator--42832cce-f4db-4c0b-ab77-2dead84ae13f", "indicator--127deb94-463a-483a-b815-99492243af56", "indicator--230b01e2-43b3-430e-bfc5-3e6ca5e7c4b9", "indicator--7c92b6fa-5336-4362-8dbd-de19d5c415a7", "indicator--8f8b8a29-97e6-406d-9c68-2ec43b9a47c2", "indicator--bb80a484-9b6c-4354-b233-faf2045770a2", "indicator--237c9ffc-0091-43e6-b127-2b42f6f21451", "indicator--73bf466c-8873-4ef8-ab95-c605816d5d49", "indicator--e37a02d6-818d-4242-a28f-8e2643ad3294", "indicator--cdb1eab7-191c-493a-8e96-0bfbf83c5f49", "indicator--4dda9e68-6b65-4a14-86d6-f701d5a2bc74", "indicator--af2f1eb1-a179-41ba-8bcc-3a364b4b2a54", "indicator--d0e2065c-78e2-489b-a531-76a63d4b85f9", "indicator--3bd3d148-2b99-40eb-b910-f9ef4714612e", "indicator--3d248c6a-312c-4551-b272-1d76b0f4e800", "indicator--243910de-dd18-4d80-bffe-de81c22dc520", "indicator--774618e5-8828-45ad-b028-b81004d24ac4", "indicator--d6011216-69ee-47b0-8bd8-a408f8930a79", "indicator--fcc8bff0-15eb-426c-b75a-6f93f5c94574", "indicator--303f2b78-c6f2-4d80-bd1d-7add34381637", "indicator--2ed742ab-7e97-42b9-be20-8f573f60950f", "indicator--842fe344-7ba7-4abe-80b5-7df5eedcbf32", "indicator--6f9649d8-d8da-40ef-a31b-2e3ba8501f29", "indicator--219e0797-3052-46f7-a121-cb09eed58660", "indicator--a4cc58f7-38c7-49e8-97cd-f65cab2b445a", "indicator--52e68385-456e-430d-93ed-968fd2266585", "indicator--81f4ff86-55df-4b2f-9285-e357e4621d9e", "indicator--77c8616e-ba8d-44e4-9c4b-2942d463aa48", "indicator--4e589444-d30d-4357-9bb9-dad6573645f9", "indicator--11683f7a-4218-44ca-b784-e1e4bc7f88ad", "indicator--d1c8eabe-4bc7-4f58-b2f9-8e9e5cf6ad53", "indicator--8b506164-75c7-4729-85de-835cb46d5d02", "indicator--01c46381-f4f0-4772-b33a-f7a044b0eeea", "indicator--571cda03-3de7-4174-9b63-d55ee6d82378", "indicator--a6b921b0-9ae2-459e-b162-ac5ab46f18ed", "indicator--90e4ed37-4898-4e63-a5fe-e25819993a78", "indicator--b84fc534-37ce-45eb-8e07-c331b8c40216", "indicator--7e67d9da-02ca-4e06-9498-d303e92404df", "indicator--beb59b38-a2aa-4cc8-a0ce-b966dfd3a974", "indicator--03485bc8-8be8-4460-afb3-a647acac7611", "indicator--1573012a-5948-462e-8b63-76442f656009", "indicator--9ad54634-65f4-4bd3-81e6-0ecd650d0608", "indicator--2a8f1e93-9242-4708-8b43-7da7a5ec2f79", "indicator--31b7b7e3-0203-4d68-8930-9adcdeb9fa28", "indicator--0203b23c-249b-44e3-8243-01ff4e0bc030", "indicator--7c174bc9-e04a-436a-8cef-59c9a5c983d8", "indicator--294783de-d2f5-46d3-901d-a27cdd487b95", "indicator--86d7a544-27cd-4142-9be8-57b66275d48c", "indicator--521e6fe8-fe19-407f-9260-b221baaf7f4f", "indicator--e11c66c7-6ff8-4927-8926-a43b6135d1a7", "indicator--c860238b-eb66-41f7-b727-9f1b968d46ca", "indicator--137928f3-67bd-4824-b9ec-45809b1f687c", "indicator--fa8469b6-c8c3-436f-8c59-3e0a787db484", "indicator--4c422c37-3167-412e-a331-4ed587bf35eb", "indicator--6a190e61-78fd-4008-9eb9-5aecdf8b7bd5", "indicator--c719b7f7-d176-4501-9a1b-a2222546e6d7", "indicator--1deab8c1-83ab-491b-a325-e324ab7cc547", "indicator--da49d28a-1047-4be1-8088-08759eae91fd", "indicator--c92c343a-248f-42e2-b6c5-6c4657e2f2f1", "indicator--c325c3e0-a3e6-42cd-87b3-566680bdbbb1", "indicator--0d9d34e2-f30b-4d47-81f2-3d04c6685e6f", "indicator--cd603c44-cd24-4609-9549-507cc79a1d60", "indicator--0ccd9e86-9a19-43ba-9319-549d08f207ab", "indicator--6a9deddf-2a54-4a0e-8fdf-a9abde8756e4", "indicator--3eeb3aa2-f2b1-4392-945d-ce77a57d7ea1", "indicator--b3899fa1-f6d1-4292-a5c0-72076936c2aa", "indicator--e95055a9-c51d-4efe-9581-d70ac3bae665", "indicator--45323fab-5492-4b30-84a2-4fc73e3bffef", "indicator--74fd970f-975b-4de6-8357-3369dbc407a6", "indicator--96035ac5-a072-4322-aba8-f78be3a9c4b6", "indicator--4da14374-bc7d-48b5-baf4-a1c9300b2e5c", "indicator--e6ca81db-654c-4121-a26f-1c8c0946580f", "indicator--dd01df1d-a015-4f7e-8c62-a62a6bdfc365", "indicator--c3b122cf-4389-4a75-926e-fbe2e5e92b9f", "indicator--38a55ecb-da33-46f4-b42f-0e32b07c437f", "indicator--3b3258c9-45ca-4002-9b34-9a1b61e4b328", "indicator--1fb3cfa6-a5ba-42a0-9a2b-600a4feabc30", "indicator--434112b3-aa6d-4e8f-ad9e-d95c71e93f04", "indicator--962a84e4-51d1-47dc-b780-20f793e9d424", "indicator--e8510b47-a633-47da-985f-5619e8fdbb45", "indicator--cd774a34-fb89-4de0-ab7c-04c8ec83aa62", "indicator--44c0796b-3b87-4218-bca6-62dbf544ee92", "indicator--dde29282-c55a-4073-a3a8-bd4219eb8014", "indicator--113d8892-da55-49d7-8ae9-1d852f9db98b", "indicator--71d547ef-786a-414b-a0fd-76c8ff13770c", "indicator--18386e59-5896-40fe-925b-b45088fb8f55", "indicator--f374fb06-b746-43c6-af86-04a5d4e85db5", "indicator--c05b3413-1242-44fc-97b1-87134ae1e2d1", "indicator--a44a07fb-7f9a-4b81-a38a-3ecad3d74112", "indicator--de4c9f8e-57d6-490a-bcb1-3f8b7e2f40bd", "indicator--568d2089-3d51-449e-90d6-abcd1c7e4dcd", "indicator--f851423d-b81f-4c0f-bb40-56a14f00581a", "indicator--fabf2954-ddce-47c7-8f0c-4b7b0f500098", "indicator--4abf28f3-4f4f-4c48-8daa-8e8e1704c77b", "indicator--76e31232-8fe9-49c6-a7e5-b4c983a84dae", "indicator--5c2a6c42-c043-4046-a4b8-6463e8f0d823", "indicator--d14f47dc-fdb6-47a2-87ee-6989e14a91c7", "indicator--ee447ecf-71e2-447c-9723-bf4d92314195", "indicator--9743b94c-4743-440f-bfb3-9949ded18634", "indicator--b450b2e9-053b-4f90-80d8-61948970b3ef", "indicator--e3abce7a-4013-4cca-9f23-96cbab6008d1", "indicator--a27edca3-878a-48d4-881f-b518f7773ede", "indicator--36de4dfc-8579-42bf-a27c-a5ecabcaec37", "indicator--15a213fe-a0f9-425b-88ba-3bc41728dd35", "indicator--0a844be6-c4fc-4fa4-98b6-0d444fde1f1d", "indicator--f4b0b82c-8257-47d0-b558-0ce8825db8a7", "indicator--1b72e095-a338-4973-a683-0096f601a1c2", "indicator--6ad26ef4-267f-4c67-9855-250b5b7fbe98", "indicator--9355401a-566b-47d0-9064-9be5b7cd49b1", "indicator--ee249768-1ae2-467b-b79b-f8653344da9b", "indicator--ee3fe677-4f88-42b0-9dae-9008d9a294e6", "indicator--0139a860-5a78-419d-80ff-b44dadb653e3", "indicator--a99d1d4a-e24f-4ff8-8ad7-c91f697bafff", "indicator--03441040-b5f9-47e0-8eb6-b0f9c80b23a8", "indicator--5bfeeac6-9ee2-4613-8344-2682e185bf2f", "indicator--67ebb86f-7b70-48b3-9b5c-7f8e52b4c496", "indicator--e83a284d-42e3-4459-8044-dab0d4df5272", "indicator--e97b0699-13c4-45ea-9788-458c7086db3a", "indicator--d90914a2-3997-4da4-af30-a75191a37aa8", "indicator--e91c970b-d089-4548-a5ab-e3d112713c9d", "indicator--c63eabfd-439c-4433-bf5d-f1cb28c8d5a7", "indicator--6adadf23-5bc1-44ff-b834-d4848e86a77f", "indicator--4f99e327-c6fb-4f9a-878b-4c1eda7cd363", "indicator--e9f8f2ff-ab22-4777-9f5e-18fc26dd19aa", "indicator--8aadc4ea-a798-42ac-bb1c-9ec8ab3d8710", "indicator--c5ed7da0-6c92-4523-bec2-1dc071343306", "indicator--6838fdf4-02cb-4066-a692-cb8e7cd23b44", "indicator--74a23757-1849-4963-8710-75d4a62102a1", "indicator--4b25004c-2e7c-4cd8-b6df-d10550fe6555", "indicator--f284e39a-1473-4be2-a868-c35b5be2a792", "indicator--04abf7fa-6881-47d0-b70c-81b26d057f72", "indicator--1f3e3581-20d4-46d8-bc87-bf1fca533dc5", "indicator--37164083-6b30-4516-8940-f184d6204791", "indicator--34028623-0dbc-4cce-a945-a46cd8b57fcf", "indicator--0e196069-1721-453f-85c2-8c84ff188f7a", "indicator--24c91f72-d451-4250-a18e-4b9badac5206", "indicator--35be4f6d-6c8f-4f0d-b247-38aff43345c6", "indicator--4e53fd0d-fb85-49e4-8430-d3e58e197f32", "indicator--c399a9fb-487a-4aca-b84f-57e3aa47be00", "indicator--2f4d078d-9289-4cb2-9cd1-a78234dd83f7", "indicator--645a0d6d-8e69-4f97-9c03-545fbef920a4", "indicator--84dbd5d4-2a7c-41e6-9dba-3595ec49a1e7", "indicator--1c4c084f-f79e-430f-aaa5-0f1793fe4eea", "indicator--2cc47680-7a87-48df-93a8-20279c9f4729", "indicator--f47c7f1d-246b-47b1-86e1-6ee2d22c54b7", "indicator--9c7d3f4a-0e64-4af9-96c8-d5ea991dfcd9", "indicator--048a2b81-f53a-4758-b535-c9d466e63fe3", "indicator--d29c5c87-9dd9-48bf-a173-df042ad78da0", "indicator--ab769629-c199-4b92-90ad-6a52b35d2411", "indicator--284e6755-d369-4713-abd4-233faef1a6a3", "indicator--0e337a0c-6821-45da-8f5a-0b79824ed67a", "indicator--c0fe8026-088a-47ac-9588-5d207e8919da", "indicator--8b2bd4ea-9a3f-4b96-bbac-027176a557f1", "indicator--fa57e478-47f4-4d83-aaa9-29436578f9a8", "indicator--50a28e78-c733-447e-b9c7-cf6ef0fea2cc", "indicator--d5b12d14-577d-4602-88ca-51247a22e51a", "indicator--32d6c374-3c12-4c3b-bfbe-9e79846ef670", "indicator--ba9d6d8b-02c7-42f9-b837-b6fff52e7a34", "indicator--2c20afaf-2a2e-4c71-aa3e-7c874171d48e", "indicator--10cb054f-ca8f-4a5a-a1f5-ef6e79a83f7d", "indicator--c6ae7d90-e3f6-44b2-97b2-4748cd480654", "indicator--2a7602e1-cf18-4240-9612-fc064cc45f07", "indicator--3435a650-d480-4616-bf08-55dec6fe0488", "indicator--216c44dc-722b-4631-aba8-8688ad1e1216", "indicator--a6a508d9-cf56-4816-8c44-79a21e422efd", "indicator--c478955b-c897-489f-9e87-e9fd494830f2", "indicator--17f62cc7-d773-4379-8d1d-9be3e30d206a", "indicator--04cdc3ee-72f3-42d2-bd10-3af8494e3d2b", "indicator--003774f3-2026-467d-9b6d-d5ced29cd976", "indicator--d5b5791c-991e-4ce0-b817-e6eeb43289fa", "indicator--b93c33fc-40c1-45b0-8235-5e8433f6802f", "indicator--73768a1f-8f87-45b1-b199-dd5e51cda68e", "indicator--93e4cb6d-dc6c-4f03-83d3-c309de03e49c", "indicator--584390e1-09eb-4102-8aea-193289d831c2", "indicator--ec225b99-be93-4025-96f0-47b2bfe419a2", "indicator--1bb93706-517b-4f70-9954-30857fcfa490", "indicator--083771eb-43f2-4082-ae6c-12bf970c289f", "indicator--5ca19650-ad28-4130-b5e2-75dd33ceb8d9", "indicator--fad0b6fa-c663-4ccf-9fd9-b2f4517be748", "indicator--72643abc-073d-4145-928c-054d4136dfdc", "indicator--c3146b7f-1de7-4472-a377-659425b303b2", "indicator--367a4529-62d7-4e23-81b0-8c76a10931e3", "indicator--a3f2e884-d74e-46e1-9b91-b1acb66d513a", "indicator--96466fb0-ba10-4325-a7ab-db6fd1273294", "indicator--deb57558-e532-46bc-ae5b-514aaffcf1f2", "indicator--7a49156a-2285-49a3-b4a9-c10def5f19c3", "indicator--64a2185c-7e2f-47f4-b33b-df04ec071668", "indicator--f6a7e232-97cb-4c63-95da-915993b93b9f", "indicator--c00800fb-afc7-4c64-ad1e-2a578297b5bc", "indicator--28b1ec00-6754-4b7e-bf64-76aa76dd742f", "indicator--ae2c1838-dc05-4693-a7eb-a202eb01941b", "indicator--b6b9a3d9-8c43-407d-91b6-c61c50783feb", "indicator--94179947-7376-43ce-9ae7-92a6c310aa02", "indicator--8bc2e90e-dfc6-4f2f-bdd7-38fb9f6d17ff", "indicator--4801a301-e1d4-4ee4-8acb-8e51e7d46ff9", "indicator--307a0d6c-6890-41cb-a072-cce3a203dedf", "indicator--4b380b9b-33b1-47fd-a853-0b697bbee54f", "indicator--789ede54-9783-48e5-9c6e-d6285119594c", "indicator--be8206ef-5554-4242-a59a-4336e40d129d", "indicator--c0674c0a-5fb0-45c1-877f-a276316ae020", "indicator--3661f23c-17d8-487e-bf53-ff625cb3e154", "indicator--df7cc055-bf39-434a-9b01-16d555b686c0", "indicator--ea5ad64c-d7e9-4c3e-bfd5-b6cd1cd3f24b", "indicator--80be90ab-6875-4ba0-89f9-1eb1f226765d", "indicator--2dfce4d2-a74d-4ce5-8d1c-cde3d58ba172", "indicator--b3880f90-f759-49a6-b965-9fc7c25adcae", "indicator--5d90c453-b2e8-4cc7-85f6-94ca191a2812", "indicator--94824845-bf1d-4452-b6b4-de84e2fb3db5", "indicator--b4d9b5fb-51fe-4269-a6bf-fee4ee253eca", "indicator--fb6210f7-8301-4011-bfbb-f7655f511a29", "indicator--bb887dd4-98a6-4bec-bcfa-91ce74de30f8", "indicator--25338015-708d-4c36-8f11-b36ca64838f6", "indicator--c8ed7cdb-ced2-4c91-9b99-10e12e723263", "indicator--45f0d150-7b23-40dd-a3e5-27ebbcec2fcc", "indicator--d2c6df7b-8aa5-4eda-9426-731f1a2c9ea8", "indicator--7aae478f-c829-4158-be1d-27269d31f2ec", "indicator--abf6b46c-250c-49ce-80f8-2a4f0ee5133e", "indicator--f7625f62-52c0-4f75-9b2d-1fc3b644be80", "indicator--b12e7220-2ded-498c-8e5b-ea6fa6561b98", "indicator--193f5bc4-361a-48a0-81f4-c79ba01c61f2", "indicator--198fcb3b-37fc-4e08-864a-09d3791c6da8", "indicator--c410ee67-ac11-4d7f-913d-e870e2217f90", "indicator--76e816d8-56f5-46ac-8537-13d1b9ba2e50", "indicator--b538db06-de61-4743-91aa-82c365ddae93", "indicator--f9b72629-95af-40e1-9b9d-2a1c01492eb3", "indicator--f4645fc5-34b5-4f3b-8a67-aeef89807389", "indicator--9c6b4d73-6714-425e-9078-5b383f42725c", "indicator--cb16499c-fc02-49c0-9ed4-54f3dbc2b4ef", "indicator--eaa880e7-2861-488e-b91c-2d76dd229b6b", "indicator--f10e3566-e60a-47fe-97f3-3563fa853343", "indicator--4248cd0c-d242-4f6b-9628-fa3b8b54824b", "indicator--c11ebc34-a5de-4294-9220-d1a352362c00", "indicator--2456ee1d-8472-49a6-bf1b-0efd32901eb6", "indicator--ce6308c9-4bbc-484a-8d52-a7915292d98e", "indicator--708f9dbb-6715-4a43-a2e3-71b7e8738961", "indicator--53dc4451-805a-4cf5-8008-940c88c86289", "indicator--86db5f01-a157-4d53-a49d-8676a73a3eb7", "indicator--f7559fe7-d2f3-4afb-9d3f-35187a1ae97f", "indicator--0d447905-e3db-4967-9bdb-b72f299ac850", "indicator--55a178e7-e6b7-4ff7-a6c9-eb22c6e35db3", "indicator--2622556a-7812-4783-bc74-a25256ac5608", "indicator--24ada1f2-ff4c-442b-90d4-0b373fd0d44f", "indicator--dbe764ca-68df-476d-98c1-88296ca16c14", "indicator--6baaf925-687f-42f8-915b-41c46bc1402f", "indicator--3c95b0ae-50f5-4a3a-acaa-30916257f82d", "indicator--e03df53b-238e-45dc-99d4-db2af3eb970e", "indicator--1cce6d51-4675-487a-832d-9021dc6fc0f0", "indicator--201a256f-2792-441c-b18f-be602d423960", "indicator--af4eec18-feb8-411a-83d6-3c37c74009ac", "indicator--ff0fa13f-d0c0-4384-b711-3169d5c67385", "indicator--7edca973-0bcc-4b28-a1be-f09e288c1d71", "indicator--5ba99837-ec58-4d86-8de4-156681796d1f", "indicator--310da1c6-5b01-4327-8c6d-1db1c6355217", "indicator--d22be357-0c58-4308-a88d-701bed4d4a28", "indicator--e42a300a-0874-4f9f-8cb4-7182ed96309a", "indicator--324b2990-75f1-4c12-945a-91d6f1c1d567", "indicator--cdf0d760-e24d-4da8-be70-b316783ca195", "indicator--3abe7276-8c87-4607-8a9d-df66df26701e", "indicator--adf23dc0-b030-45e3-9b59-1739608fa8a3", "indicator--82ae9db3-75cb-42a1-a66f-591c055145e9", "indicator--b43ed0c0-44b5-44cc-908e-6e12666c4097", "indicator--e35ada11-fac1-4556-a0dc-8f1a64f687e9", "indicator--3668ae31-f146-497e-8f14-db114335f4b4", "indicator--c57617d7-1bab-43bc-b77a-bbe9ec7e1219", "indicator--3271e2d9-2a7d-4c60-a5fe-914166dff5a5", "indicator--dd3385b2-cd21-493b-a83d-50e8adaa9e1e", "indicator--62ce0d2d-9f43-470c-bf64-66bc96b1c959", "indicator--9717077b-c927-4e12-b8a1-e7451d75061a", "indicator--6ecb27b6-143e-4018-99c7-716bfb5fa016", "indicator--df2fc745-c808-4672-a9fd-115e5a21d2be", "indicator--dcfa3dcb-772e-4693-8ca9-f16e11840b68", "indicator--e230daf4-54c2-409d-aed3-ac5ab8b8ca96", "indicator--5c307fb7-1dee-4b1c-9852-2c03d5e23b1c", "indicator--7469028d-e7a6-4a3e-9161-56f4f1410c30", "indicator--d80b98bb-c050-44d5-a9c8-2bf1fd8e9501", "indicator--19159a62-6fb7-44e9-9b34-a6da20620238", "indicator--60baff2f-6221-421b-a7e7-d328ce76a8db", "indicator--613802e0-83e2-444b-a043-b581a451b7e0", "indicator--fe18264a-1459-4e64-ad59-7be153183271", "indicator--32227b21-a119-441a-8ddd-f949188c6d0b", "indicator--658c0708-63af-4360-b8e9-fce0af247c19", "indicator--6a35b09b-33d8-4d35-a9ec-ee2ef03dfb37", "indicator--e5032d64-fd1b-4211-bb32-04975e832455", "indicator--948a957a-553a-4a94-8f60-2baff514122d", "indicator--6046d750-11fc-46b1-9c21-43c7d1632062", "indicator--fcec2765-c9b9-4f6d-aafa-91f57bd7a2a8", "indicator--1698f7d0-31bf-417e-8b99-199e8d763003", "indicator--ca914489-2c9c-4123-a664-cf08f4cdc88f", "indicator--788f8b8b-eae1-464d-abf9-0687d2c245a8", "indicator--82ec9fba-6995-410c-9c53-b8dbf3c284e3", "indicator--7a5ba878-fe2b-4f75-8d00-abbf1e23fc7a", "indicator--f7adc4e0-75b9-444b-83cd-4c2692a71306", "indicator--1d8076a9-c03e-4cd9-8fd4-05d8105d0537", "indicator--175513ea-5bf1-4447-9f4b-0a3dd05cd3d6", "indicator--e8480aa9-b28a-4c7e-a6bc-d77da22b4821", "indicator--3c2fa5f0-5bee-4ea8-9935-4b898ceb9214", "indicator--d0499a1a-c135-4f98-8d69-316839933271", "indicator--b7b51224-e0ed-4c00-9feb-0ef1dd2cd995", "indicator--8a37595b-880b-4a1a-865f-5d5418ac6c3d", "indicator--b2f71d7c-06d3-4e89-b93a-95192193f1c1", "indicator--7e36318b-b844-4a84-b55d-8cc2777e98bd", "indicator--d7c394bd-7e4c-4e22-b110-b95683b9f6cb", "indicator--e75d08e4-3630-4ad4-af99-d283e27d44d9", "indicator--5223b6a5-7788-4d8b-9854-055d25a13ec5", "indicator--da808470-6889-4d30-9904-012c0fe237dc", "indicator--98bf7664-4f73-41d4-b983-a065b9b6e5b1", "indicator--1ac18dde-4e46-4747-b38d-a4f1ea4dbca1", "indicator--938305f0-a33a-4e85-ad43-7760d4ea0785", "indicator--94b3c001-638a-4601-b8e2-2fdcbf861360", "indicator--2a65c278-eff6-43bb-9304-6d8588cf2ae8", "indicator--41d75edf-67b7-4b45-8997-7ba4a7126457", "indicator--ffceabdf-5e54-4373-96e7-2c80e33e9744", "indicator--616057c5-c90a-4489-9ad7-fdb98abd4714", "indicator--3e9b0b9d-fa7c-46dc-b66d-389ba19c97eb", "indicator--9b98a397-906d-407a-9b8c-e2b52d2e9f35", "indicator--a7fc4bfd-d259-4ab8-8e06-6ccb5af556ef", "indicator--09f7ee4b-692e-46f0-b003-0d4f61bb456c", "indicator--e07eb3dc-529e-40ba-be94-e553f4282e4c", "indicator--97dde666-f7cf-4064-8a5d-946938a045d4", "indicator--afdbff93-0d20-4d35-855a-0aa99db56dc9", "indicator--f8c95844-403b-4e36-890d-9d57b46f59d4", "indicator--b717d560-5310-4f42-865a-635ed8dbb2cc", "indicator--4f36c87b-77f1-42fc-8ab2-d329d82298c8", "indicator--0c58e768-b16c-4642-8ee6-0d3e17ad6335", "indicator--57b5d96d-810f-41e4-ab8f-c045344c534b", "indicator--6ff36fde-afd9-4b74-aaff-557e2c4d6654", "indicator--e7d66b67-bb3d-4378-ad6b-0beb0aa581a7", "indicator--226d8797-d5ff-4e99-b829-404b7f30a0e8", "indicator--8b488c60-ba1c-46c9-91df-2e083995f978", "indicator--ba5b65c8-58fc-47cb-83f1-8fadbdc1917e", "indicator--98aea9e4-0faa-413c-ac26-de15357babcb", "indicator--b7cf191a-f5ad-4b2d-adf8-423258059c42", "indicator--45fc2bf2-3025-4d1b-8707-f4635dffe776", "indicator--3bd2ce5d-6a47-4f41-bbf6-52ef54cffc6e", "indicator--8734877e-8883-41e8-a750-bf1eee04b1cf", "indicator--7d135e09-326c-4fc2-917b-07e35c5b6c15", "indicator--d4857e1d-7c20-474e-8233-66de9db47a4c", "indicator--ff036a8d-d56c-4ea5-b035-9c516a6164b8", "indicator--295f7094-a12c-4489-8063-020d6c13a9b3", "indicator--cb47e1ee-865e-4570-9ebc-9bbddce3e0d9", "indicator--f3812bc1-859e-4e5d-8c8b-b2cdfea37569", "indicator--7a26877f-cf71-414f-a6cf-66e07ee3aac3", "indicator--e1a93642-0428-42bf-a9ae-d3b33dd91176", "indicator--a8cb954c-5bee-4dc4-b993-0a1ef554290b", "indicator--bb20c7d2-689a-445c-a427-fbf7123450f5", "indicator--1373aabc-cbdf-48dd-9288-649a230974fa", "indicator--e488ebc3-8bca-4a15-9b6f-e781dd99231f", "indicator--ceac59a2-dac1-44d9-8796-cac339dd2084", "indicator--e622ea62-9dec-4087-a011-449b6d9c7f73", "indicator--d74db0e7-3de9-4748-a7a4-2c7317e448c2", "indicator--ec9e81a5-30e3-4b0f-8461-39d6578f1c18", "indicator--fbd12681-6e81-4d10-8f40-43ec14a3ec20", "indicator--64c6d050-6294-47b5-aaef-6d6e6ce70b0c", "indicator--9164a6a7-8303-44ed-a358-b99ec5d9f270", "indicator--5af6b6c4-0c88-44e9-ba9b-7fc0cc1a8b12", "indicator--c38ce369-698f-4652-8827-578898c79a31", "indicator--80d2d549-d656-4ac5-af9b-7d3ca6795518", "indicator--a88f15e4-9f93-4cbf-a4dd-d23a3a8821aa", "indicator--325a8d23-a3f4-4b19-91a9-916ef04cdf55", "indicator--e570157c-cb93-45ad-8d7e-5d13f6d51130", "indicator--4a08a538-e3e7-489e-b493-c76f6d07f4a0", "indicator--d04d042a-e808-4d7d-9310-db20387f675e", "indicator--6a2232a6-00c7-4e4a-b40c-c53b88f52867", "indicator--80b9d04b-3aa0-48c8-84b5-c68f67b5f097", "indicator--cbc43cea-899f-4883-b738-c247b5770fb3", "indicator--32ef8aa7-b108-4929-bfab-93e07afa3732", "indicator--6af1c2bc-f4b1-40bf-92c7-797ddbf9f42e", "indicator--76767380-4823-482b-abde-c54c12e34705", "indicator--3153c1ea-7899-4ccf-8954-1f5f7b436d30", "indicator--ba29ed63-f52f-429d-a14d-636d24bf68dc", "indicator--ec5f0e9f-f54f-4a4f-a757-dfe51721a963", "indicator--3831fd55-f5f2-40cb-b3d9-ca330a4db0fc", "indicator--1d0c2c38-2634-4f60-8ac6-e8e01fbcd7bd", "indicator--47cf93b5-dd66-43e5-b0cc-68f2d54b6567", "indicator--835a0ed6-0f8c-4739-b789-e89541135819", "indicator--d994e81a-f589-440e-b402-e817a046031b", "indicator--d1cf348a-3d2e-40c2-9391-a36265d5c320", "indicator--fc6523e8-5eeb-44cd-bbb8-7e799e955433", "indicator--25c83078-521b-4e6d-ace5-e2bfe1c3d6fc", "indicator--a34760d8-767c-4122-a77b-71c94a031776", "indicator--f093e11c-d913-43dc-a087-5cdcea8e45fc", "indicator--85e78635-e0a1-428d-a9c8-b1b42ef3ff79", "indicator--55301d17-9d00-4394-b50e-1ed48b47f969", "indicator--982ef83a-d3db-4d10-89e5-b1c6b0da90f6", "indicator--2e3cb490-faf8-4418-83a4-d2eb3cbfd4f8", "indicator--e26b503a-871f-4bc5-b338-a011f3522052", "indicator--5abd6295-9eab-429e-bf68-eb97c4a4299b", "indicator--0bc13667-9ebb-4ce6-a073-03c0c640ec6e", "indicator--8fe1e417-abf8-4088-bfc2-150e92442535", "indicator--2161da73-669d-40b3-9add-c601de5e8ee6", "indicator--99eb10b1-68f3-41a9-8e87-ba46344cc425", "indicator--4b3f084f-0537-4c54-9a49-8b13084ee14d", "indicator--522fad03-bd4c-4f94-bc0d-7134d2259c43", "indicator--5b22bb44-c15a-4615-9ffd-9cba6a39c8e8", "indicator--fe479ecc-4551-4da9-a8f9-8f8163e8fc46", "indicator--50b397c5-0438-43d7-a3f7-1077f6891593", "indicator--c0b2058e-4a45-4eb9-8ac3-f0acd4eb2769", "indicator--ff72b319-3a65-4955-9ad9-c7168fde6b62", "indicator--8954e86b-9a2e-4f90-8b5d-aa6fa48027ee", "indicator--a0d81e60-19c6-48dd-81cb-49f01aad4762", "indicator--da0fcc24-f9e6-4abd-9ddc-3e9e15952322", "indicator--f5d80f34-53a6-46eb-a2ca-e8e033dfd5fc", "indicator--37bf2d0c-2706-4a68-b98b-4415feed8fba", "indicator--92d5cc3d-f4d2-4123-a751-bf4deef05b35", "indicator--ea878adb-c1ef-41da-bedc-8ad5e8f8b3ff", "indicator--cd14843c-cff6-4bfb-9036-2ac5ca8b6a3f", "indicator--e1a48ce7-bbaa-4ea6-af26-948b1df36c29", "indicator--d0d17692-3925-4bd5-98cf-8c8a38e04631", "indicator--6cd0ff45-622c-45ec-846c-30229ef59593", "indicator--6f35acbc-bf70-48d7-932e-1b72521979f3", "indicator--d82a4385-70a5-43c9-8ffc-4385b184d78b", "indicator--084e5e84-8f8f-4fec-9c85-6c648e280abc", "indicator--02abaf37-7d83-488e-9eb5-a88c15608a50", "indicator--a94d775d-edf7-4311-9426-742b2b505f7b", "indicator--e0e081d2-940a-421e-9513-4e3c2c2ad06f", "indicator--ad92b7b7-6f89-49d3-9701-687a77766a7e", "indicator--0188f8c0-3238-4f52-80a7-6ae48fb9f4d7", "indicator--f30047cc-cde2-4918-b564-d86063a20a6b", "indicator--6edf49ed-161f-40c2-b4b3-3c5951dfd9f3", "indicator--c2eb717c-2a2a-4651-9bb3-e40c6c50bc15", "indicator--2e4cc7cc-2ef7-4e6b-bd62-57b77e036508", "indicator--b3b4caa4-a42a-4947-9649-01854876cdfd", "indicator--20a95a3d-00bc-4bb1-adb2-d15e3b402d5c", "indicator--d996785f-2f3d-42eb-a5c4-924e86a6a608", "indicator--4d8fe543-059d-4617-9a4d-92d7c59b7294", "indicator--84d92aa2-9fea-4909-ab82-dba4c19e1272", "indicator--e801d6c3-f7cd-4270-91db-ec897322fe04", "indicator--6de642ed-164b-41e7-8a14-d1ae9500c192", "indicator--db625ab1-2b62-463c-b542-b241f3325af4", "indicator--53b30eaf-2a56-42a3-9393-d52018aa707a", "indicator--a3f9e2a8-36f0-496a-aaf2-5b534f6da25e", "indicator--edf90f4e-7f7f-48c7-a232-30e4d8e66f59", "indicator--7b8226c4-f85a-43d6-8d57-a2965f532592", "indicator--30fa0498-b76f-44b2-b77e-afa9b6fd7a24", "indicator--3817fe77-7551-4d92-855f-a6ae4b906dc2", "indicator--5d4e379e-88ab-4381-b20e-179a16073330", "indicator--98c7c76f-5aaf-48fe-93e9-a3089a879de5", "indicator--2191337c-0c2b-434f-9c0c-a03d3790e04a", "indicator--54fc1db6-c548-488c-805b-14c7f9a03fbb", "indicator--8a66b7f1-3f94-46f4-97dd-c9425a921ca1", "indicator--0bb42fb2-132d-4ff0-be72-88e2800197f8", "indicator--3091493c-fc21-4718-bc5b-a211a5c7c096", "indicator--1bce51d3-706f-426f-a01c-5f48e1d09b7d", "indicator--0728e707-7cd9-41c1-951a-32fa919ec699", "indicator--5f0715e8-5fe1-42c2-b905-af89926172b2", "indicator--3ef2e8aa-c747-4fd1-b374-d7454059c745", "indicator--637ad435-8be1-41a9-8cd7-e617560420dd", "indicator--912d66eb-efc1-473f-8a68-c560b760ee27", "indicator--70d73df1-5d2b-4579-9566-8b9e759cfc33", "indicator--14a8b1cf-3924-4268-9acf-be1323ed3242", "indicator--da8ed37a-f504-49e6-b4c7-2bca9dd97546", "indicator--0b5c5419-696e-4a31-bb8c-62c64530ff0b", "indicator--504af974-42fc-47ec-a46b-19db4e8940bc", "indicator--0e095ffa-c9cb-4ce7-8647-0b9db10abf1a", "indicator--422167bb-021e-4af1-a9f7-00bd3fe8dce5", "indicator--73178258-e003-452d-a19e-ed9b5ac108bd", "indicator--3d0a3fe1-b2d5-4f52-be3c-ed951eb1ceaa", "indicator--5dc9faca-a269-4944-9433-bcaaeb7d110c", "indicator--c0807527-b4cf-4062-81c9-070e753f097d", "indicator--65763362-227e-48b3-b844-106eb424dd71", "indicator--110c3ace-a3da-4d8d-8137-9c329e7c69ee", "indicator--53092e6f-a49b-41d7-a362-2624455552f4", "indicator--a6ba3863-4a3c-45df-8789-0c1147a58972", "indicator--7c332a95-5b1d-463a-925d-c6ab3e064ec6", "indicator--b99b9dae-5dd1-4808-8311-99a665758a4a", "indicator--17e332de-3707-4ba1-9190-b62aa14f9c3b", "indicator--0ff3eab9-2495-4f12-9861-40508604b276", "indicator--87f873cd-f9ca-476c-be55-7b99937beede", "indicator--ff12d8db-7d93-4e05-86e4-cc3078afc4f4", "indicator--d722600c-6528-4b84-ac98-0aaccbaeef17", "indicator--c779d8ab-a419-488d-a251-9a390dac9516", "indicator--b3dd8f62-bdda-4a08-a8de-85435b27890f", "indicator--bab79afe-502b-442d-8ce5-5938b48acf28", "indicator--915fad72-c93b-4ed0-93f7-d61806f1d799", "indicator--93f9639d-a2cf-4556-9088-0f845ac6e1be", "indicator--44591985-c2c1-4dd0-8470-de69f0a1aee3", "indicator--0aa82454-5537-4845-8fdf-3c27f890d017", "indicator--0f42facf-ccfe-468d-9ae5-32ae96ea88e4", "indicator--7ee1a9c1-49e8-4d17-a137-ec43d56d14d7", "indicator--54617166-aa7b-48c6-850b-f8174e9d2d4f", "indicator--240ce53a-8492-43cd-b23e-86d9f4d0425e", "indicator--53960dbb-cdf9-4181-afe6-6a3210df8a19", "indicator--a25eccdd-e9b4-428d-b96a-8c693d90bd64", "indicator--49cf720e-9119-4778-bab2-d337358cba4d", "indicator--943682c8-2243-46b6-bfb5-72ea77403563", "indicator--402acf97-26a6-44cb-9330-02ea7e7db80c", "indicator--9ccf16f0-015d-470e-b640-2fa1c872c5e6", "indicator--bc36f7b5-698c-4977-b41d-c2ff22c0634a", "indicator--0ce1d5c2-6d0d-4906-b712-4ab5c5c804ef", "indicator--faec0a0d-77fe-4075-9d2a-80184a2d6a70", "indicator--b19e3a89-7e87-4838-b25d-053ff2ab2ae8", "indicator--195a7d8a-d124-4dc5-9536-0121606403a1", "indicator--cc3aa35e-3d93-4dfe-8da1-883b5de552c1", "indicator--587b6026-caff-43bb-a5e6-5d4bd9c98fe7", "indicator--ecd0a917-dd52-4a2e-812f-599699c1bc44", "indicator--eae33ec1-c22e-4add-8506-2577ef7ddec8", "indicator--b78a2413-702f-42d5-9bd3-8e49fac9c72b", "indicator--7fbb6f45-1d64-4b6a-a46d-32b0953ece79", "indicator--2a218432-e4a6-433e-a83f-d6694a2faec3", "indicator--653fbd9d-63e8-4dee-8639-8f6965dfd495", "indicator--91936242-715f-4b37-94e8-8db7335c076b", "indicator--c174320e-18ce-42e0-b4ee-826e4a5f0e2d", "indicator--5b2e0eaa-4d2e-492a-bed0-d77ffba6e389", "indicator--cae98d78-9bb2-4f8f-b6d1-e8c48f26fe53", "indicator--07b28d88-b6d1-411d-a659-e0dff7ef6f4f", "indicator--f16e0ac8-23b4-4b97-a992-52623cbf6c0d", "indicator--a16ff9b9-63e5-43bc-bda6-0418f94f9ee9", "indicator--e4a96c18-4274-4be5-acde-78af6a0bada2", "indicator--3f30fac3-42e7-4fc0-b956-dab4175ebfbb", "indicator--66b13345-1a84-431a-83dc-070087dca238", "indicator--29009ebc-f063-42fd-b044-db76ca4cacfb", "indicator--f26cf2fd-9861-4c9f-9e26-6787e02612d5", "indicator--a4903c68-58aa-4757-be41-9d4346d515a5", "indicator--7b794654-1728-4d2b-b789-8a2707ede9d3", "indicator--d6cc81ed-c904-49aa-ab09-cf510a7eb8bb", "indicator--a60877a0-0051-46fa-92b0-4c4546967431", "indicator--1dbf3b8e-07fd-4281-9b06-fc05bd9b9a47", "indicator--f0989b1a-651d-4be1-a1c9-094509da1bad", "indicator--b086ff1e-5815-46d7-af3b-64c4d557c38c", "indicator--34d6ca8b-25ff-4fc0-a7cf-788c56d693b0", "indicator--49562b9f-2c05-44de-9c84-44db9844d1b8", "indicator--2e60c3d3-e621-474b-8eb9-afcca4049290", "indicator--2b1f1430-fc68-442e-aea1-146328df5859", "indicator--5dfb52dc-0158-4f34-b263-5bb965505508", "indicator--9f8c5c95-2ada-48b3-b129-85af9f3ecc33", "indicator--ad91873f-e559-454c-89b4-d545cf6ef00c", "indicator--8c770259-65d1-4746-9f0c-a64da0e938c8", "indicator--87572b93-7535-46c5-a0f4-48ffe48a3e75", "indicator--60ad8d85-b538-464f-94e7-a947f93be90d", "indicator--7c2fa596-dc54-4552-ae48-76cc2f643b9c", "indicator--de65f2d3-1660-4250-94ec-fb7d3035ac85", "indicator--ba753f5b-6004-43ee-a3c1-217f81a8c152", "indicator--70aee0d8-685f-4b4b-b69e-d5aa48a9711e", "indicator--55a7f8cb-b4b6-4f00-a51b-c84619c66b03", "indicator--1f18ab48-c3de-4d8e-a712-d342281955f8", "indicator--e765dc52-1d0e-4c0c-9d98-8d45540cbcfb", "indicator--b3ea0cb8-5a9a-47e8-a545-c63d7ad17b31", "indicator--f1aab7b4-750b-4f19-a1ef-f41246d3f982", "indicator--747106ea-5fcb-4ea6-bb8c-14f74c112684", "indicator--97e292d9-1d13-4ada-98c5-d6bbdbc76ab5", "indicator--7e4bcf06-40be-4d01-867d-f49f9a6556ce", "indicator--ab3b975e-0b2f-4ba0-a0ad-a318087057a7", "indicator--8069136e-22c4-477d-b2a6-4dab595e9927", "indicator--ab4f3224-84d4-49b8-a011-eb660213e477", "indicator--b9ba1bed-943c-45f4-9650-09e16c9d1477", "indicator--1041fcde-f419-4a46-b1e1-fb045b4b62f0", "indicator--272ab16f-be54-4306-bfc8-58746bc48295", "indicator--e1d37c9d-5892-4459-bd55-64587c93c434", "indicator--65aea1b5-6fc3-4288-bc7c-e5cc02c61138", "indicator--dfae0d8f-768b-411b-b4f9-6dee1964f950", "indicator--bbc24834-e5ed-4b38-94ee-6a768f209f38", "indicator--7dbe19e3-0858-4a67-acb0-4cb2b02af6ee", "indicator--aa2ba6ad-8634-4928-984b-900c43f2b33c", "indicator--15df2721-5a64-4d1f-ac6c-7807b68ff663", "indicator--e72ce81e-c1fb-4853-bccb-8e9a2ffee5e8", "indicator--18045c3d-8af2-403f-bc98-1c44e4904266", "indicator--17c93637-9d4d-47c8-b12c-3936ebbc608f", "indicator--078301e8-b6e1-4030-b143-93ace86e33ec", "indicator--eaebd325-3c3f-4659-a31a-0241bb0baf13", "indicator--09ed6fab-2b01-4972-805e-d845cfcf8c07", "indicator--92399508-e4c6-44d7-8f0a-0478361b3280", "indicator--499118f4-0b8b-4f4a-a754-8631cbc13f0f", "indicator--9b87c4b5-99a7-4a65-a664-6264fab6bf96", "indicator--e76c6107-33d9-4db3-b19c-b13f846224b3", "indicator--0d09e493-4cc1-401c-bb38-044919b31b4b", "indicator--e5041e29-33fb-43ec-b914-52abd92e128e", "indicator--635f9f56-ecac-4c34-a5d6-587e407a641b", "indicator--9676064f-35d4-47be-b8ab-fca8b81b83e1", "indicator--d079df24-8e12-4991-bcf9-d7a0e2e3c178", "indicator--b2851620-5d86-4067-8cc7-1af2d0431e4e", "indicator--1fd5f29c-8a69-41ca-b7a1-b8c291e7dc42", "indicator--ddf78763-518a-4631-b1a8-6290ff615135", "indicator--c1be84df-16d6-4868-8051-add991fc0fdd", "indicator--6b5e5702-49a1-4ebe-a211-02758633c7c1", "indicator--b1935300-8bf8-4ef0-bbf6-bf33fb283ca6", "indicator--921b9030-5158-47f9-a099-57efe22e669f", "indicator--f4b42046-8c91-443d-8a23-6ca5b980f909", "indicator--f4411a45-223e-489f-96ff-f4c5405bdf7d", "indicator--aa8232cb-72a6-4936-8257-bfe78b76406a", "indicator--8a0e7356-f0c6-42fb-a313-56059104eda3", "indicator--4bfeb03a-bec4-444a-b3f6-4a851b26a976", "indicator--b66587fd-bc38-4420-a6fc-d1f07b0242c7", "indicator--9ebf80bc-89ab-4a83-a3ce-f688a42f2abf", "indicator--186165d8-f261-4a1e-bc45-c710a21ffe53", "indicator--0fa985e1-3cc1-4ce9-9cd7-2f0ccbc55951", "indicator--394e7ca5-9db3-48fc-b6c0-c99a09cfee63", "indicator--6a8a3381-f466-4932-8a2e-2ddc3446213c", "indicator--071b2ca6-1ec5-45e5-8690-6dae6b3dbe03", "indicator--be0518f6-2ec4-4e9a-a325-523b6e370644", "indicator--a9d9b56a-3fd9-4062-b81f-d12165f8c762", "indicator--3f5ba21b-2abf-4cc1-af5d-ee42d0ac17a5", "indicator--001ce1f0-871a-4579-9003-b7b4f5f83cae", "indicator--5e1c88b0-a80f-4377-bdb7-8cb3cc0fc0f9", "indicator--5d0b7cd9-9bce-47db-9428-36ab9ec9ba5c", "indicator--10e9b340-3735-4205-bfa8-fd916c90aa1e", "indicator--5d52dd7b-b6e6-430d-82e0-65e9044ebd7e", "indicator--95f44137-e3e0-46cd-9ca1-3e5de05f6231", "indicator--c9279d40-416a-4734-aa09-de461ef0e353", "indicator--c2472ba1-5010-40d6-b711-d6b9c960384c", "indicator--105c732c-22a9-41b7-a12c-17e288ed46a0", "indicator--ce6ff927-32f6-4f78-8e26-b3e7f91f0ea6", "indicator--da876631-9477-43b0-a522-c8fe3038916b", "indicator--d9cc7f0f-84c3-4b2e-ac51-3f9a662a3bae", "indicator--c0f86c6a-a1b9-4625-bbcb-0b440574b198", "indicator--cb99a924-281d-4832-9b67-03e04f37b5b2", "indicator--d22d76b8-f1fd-4086-a7ad-bfe1bf7752e1", "indicator--f2e034f9-63a5-499b-80a7-c4e5b72b1dc6", "indicator--4f2bcd07-523d-464a-b767-79058722520b", "indicator--794f3971-ae05-4753-be8f-57c0f99d19a8", "indicator--57f3ef55-9556-40d2-a593-ba4b7ff02945", "indicator--b4a782dd-3ecf-41cc-a743-4f79eb774a61", "indicator--0466fc37-fe81-47b8-812c-2e11eded9378", "indicator--9e922b18-ab34-46c4-acdc-05dcadce6594", "indicator--915e8502-532e-457d-8bfb-73e7cb017905", "indicator--d78c83b1-a00f-44d6-b105-96cde3212f7e", "indicator--4701a6fe-9e21-40cf-9cbb-2c989a2fa227", "indicator--c6d121e4-794f-4f73-ae0d-78d76b2a160e", "indicator--72c686db-dffa-48c9-9767-a596bb1284a8", "indicator--48635f02-f1aa-4a88-a34f-e02ccf695f4a", "indicator--846683b8-3d5b-45b1-bfb0-d922366237dd", "indicator--0f1cf6ac-1f6f-4644-ab94-820c1c81b06d", "indicator--69396bc1-8678-4ce8-8c1f-a26dc026a51d", "indicator--31db1320-4f51-4a60-bf04-8b254171e7f5", "indicator--bb848224-84da-4f9f-badb-70a3eb9b0868", "indicator--e9e00baf-d94b-44f3-ad4c-d926de846b24", "indicator--671129ac-6914-48a5-88ad-ec97f7c0244c", "indicator--cbe5c006-ae17-4453-be59-d0cafcc8c821", "indicator--8c98bb8d-12a9-4c9b-91ba-ad0498c2013c", "indicator--0f019a30-dd57-4e01-85ee-bf5dc9604c95", "indicator--ec486576-c655-4b60-b2bb-9e6d84258f05", "indicator--8e7ba4c4-e61e-4502-be19-669fd0414818", "indicator--55f37dbe-bab8-4349-8f03-4702d809fa4b", "indicator--1bf9bfc1-9633-4651-ab77-a4e16907405c", "indicator--927919e6-e371-48b0-866b-c33ec6fd2b37", "indicator--545f7a8e-35b4-437c-8dac-84d696261c09", "indicator--b4ac8d6e-1d0b-427d-a2bb-404b67264b0a", "indicator--9abee57f-d18e-4de6-bdaa-afa935f58b61", "indicator--ff79f543-ee48-4b54-a66e-5e5b21c69615", "indicator--03b9a117-c0cd-49e2-b74f-e9d2afa5e345", "indicator--2c19dbe0-d07c-4d95-aa4d-135d62a07914", "indicator--9959c33a-3de5-47d9-b5d1-60ef22e25671", "indicator--45c0f5a2-3091-4425-9ee7-028f1816cc6a", "indicator--78b926ae-d4a9-4a51-946d-e227e5bb41df", "indicator--48da50c3-dea7-4152-ada1-d8e2e9255137", "indicator--eb03bd20-c449-41eb-af46-b5e97e2765a5", "indicator--6822eb89-72e3-4cd6-9616-e9294e11cb40", "indicator--ca9f8c44-8994-4727-b902-536b445c63c3", "indicator--572909ef-e212-4df6-8806-817679cfb71b", "indicator--e3b6f602-0337-472f-8989-6944e1c644fc", "indicator--23c8fc3e-45f2-46ff-ba0f-321d6931efd7", "indicator--aa0e6eaa-5561-4c7d-997a-b5f3d8fb8674", "indicator--be958d34-3c93-4a62-8ebf-b14f57d1db4e", "indicator--277c634d-8c1a-403d-be56-0bd62cc2c789", "indicator--ee1c8490-9f96-422c-8851-b7799179f08f", "indicator--0e4632e5-3ab7-4d9a-b27f-d2d28b1a5832", "indicator--11c25d5b-0f7a-4222-a5f3-9326593da622", "indicator--a0df2ddb-8543-4fd6-a4fc-57b797bb1c05", "indicator--78e05220-904a-4713-9041-cd39dbf22ad7", "indicator--e1ffeb1a-eb39-403e-9bd6-ef3a334c1947", "indicator--d7e4817c-2ecc-4675-98f1-21364b9fb54d", "indicator--1be94ab8-9649-4e36-bb3c-b72f8a405777", "indicator--48a01163-1bd5-470a-a7ff-6a6616ed73b8", "indicator--5436bb59-6cff-4e4c-a0ae-fa6e3765ca76", "indicator--bb91f451-494c-4a53-96ad-b7bd7780b88c", "indicator--51c0334a-13f8-43c6-9948-e9b743a81da4", "indicator--044bb89d-4c6b-4516-92c0-7d8558cc35b6", "indicator--53b6cbcb-07fb-471a-ac14-1643170a3843", "indicator--f64063f9-2897-47f0-b424-2b45cbfee8d8", "indicator--b3075e54-30a7-468a-aa7d-4cc0299718e3", "indicator--d56864ee-74d8-4ffa-9cd0-cb63b00b6a2d", "indicator--14a01ef1-db6d-4f33-95ec-b3e0734e9bfe", "indicator--70e895ed-119c-444d-a4c3-51398b57bd6f", "indicator--bb4aab63-c701-4c84-9b73-cbdbf35d2e94", "indicator--49cc78fe-b9b7-41de-84a4-8d6d57de9d08", "indicator--f53ec922-f2b6-401f-8086-2a8752afc306", "indicator--8778db37-b752-4d47-bdaf-b3fbd5b9ce36", "indicator--75e5b2cb-15cd-45a5-b971-f18c5a90e5ec", "indicator--be4caf85-0c1c-4fde-81b0-4f5dd950a6e4", "indicator--9f21722b-c507-434f-9def-38a436cb2e2a", "indicator--d449b15a-82e6-4f7e-a63c-8c9fd4664dd7", "indicator--2bb01aba-327e-4ac5-a665-28404c5f7352", "indicator--31bb452d-70d4-4dd0-9ff4-612c1749d10f", "indicator--1b155db4-b9df-4580-a0d8-afd2ea703a54", "indicator--67189d05-51f4-49f9-9ea1-dbb1c7257262", "indicator--398086b9-06b8-4e8c-be50-a33f86775336", "indicator--02f91b26-6398-43e5-aaf8-c59905d9ff4c", "indicator--7c42be8b-d891-43a8-bfdc-7e5ff672e4df", "indicator--0201669a-e7bf-4178-a423-7ed44a979e65", "indicator--8d28f4e2-e023-4013-8651-1c63e35fccd0", "indicator--fb928a6e-91c3-4211-8dd1-2d73006a32ba", "indicator--b663229e-ba77-45b5-9dbf-f95106138ba8", "indicator--f0a12e49-85a7-40fc-8e14-401ba5628a9f", "indicator--a8411166-21b5-45ae-8a20-d97d4f5f3088", "indicator--65311307-2f48-496e-8581-963a0729aef1", "indicator--b93ddb51-b92d-40cf-9c8d-5517d93af982", "indicator--5b52512a-c344-4421-9fb5-cfd08c07d59c", "indicator--b0993635-4875-402c-87f6-1a9e418fb9da", "indicator--e46f7dac-b1ba-486f-a992-8f3691659d24", "indicator--878284b4-a7d0-4a3e-8e98-09d1d9428812", "indicator--98b1252f-dcba-48fe-acb4-91b814342257", "indicator--89b23520-9dd4-4429-8892-9d628450ca24", "indicator--7248f57e-fbfb-4351-98f0-ab01a6c99400", "indicator--5c70c26b-8307-471f-ab45-d93364aa2d01", "indicator--52bf2d9c-c041-4f3d-be6e-e11f17ad89db", "indicator--292211da-4fcf-4207-9eec-95db6a49bfbd", "indicator--5af734fe-5602-4a2b-a92f-fe745e80b51e", "indicator--88f9ad11-dc98-4c0b-b193-416747dd9d78", "indicator--a147b88b-c647-41d1-887e-c6b51aa75261", "indicator--fc52bacf-1088-499b-9782-cad9a3e22d5b", "indicator--e9541585-69d0-4228-a10c-7baff1362588", "indicator--839c033d-1fc2-4c09-bc55-d3a56dade12b", "indicator--792467f1-054b-430b-9bb2-a1454ae53345", "indicator--7e5f8d1a-30e6-4e94-90f3-ee45df2319a0", "indicator--ec630903-36b9-431a-9c17-1677e6dba38f", "indicator--763171a3-0879-4eb3-967b-1f6303471adb", "indicator--32c4b2ce-b670-45bd-825d-019749751a31", "indicator--601f53a1-d71e-4b13-a0cd-e90d70e502e6", "indicator--7a16cc12-0819-4577-9fa7-3582b615ba72", "indicator--b5028fff-c75a-4a1d-a80d-95b9eddd9cee", "indicator--1d726b2c-a258-4778-aa92-92bf26e77025", "indicator--ebc02a4d-7039-4f59-ba8b-3284419368a0", "indicator--a96b2009-beb2-4496-9a72-81ac672a4074", "indicator--cc461e08-3fc0-4819-bcef-f37357b355fe", "indicator--d14c9a74-2fd7-4024-bc07-24e235717f02", "indicator--d5d25f3d-f78b-4b17-a599-7f19284c7f20", "indicator--f55b329f-35d6-4595-9804-d0b2a4071d78", "indicator--4a2b240c-4457-45ca-a1e9-bcead5820cf2", "indicator--c8e5a39e-f91b-4608-8c66-ef6b6f84d440", "indicator--399ba23c-f923-4ed6-827b-b4c32ed16763", "indicator--9db37832-fa3f-48f6-bf13-f46854ea05cb", "indicator--66110c8b-5497-48d3-85b2-aa5c4264a3e4", "indicator--bb847549-8ca5-4dbe-8b4a-4ef5954bc9e5", "indicator--5f89bc95-233a-49e6-97f1-d8d205dce455", "indicator--4bae0659-cb93-4c78-a9a7-ce12980ec149", "indicator--b7feddf9-3b7e-45ec-8c88-89b1af313633", "indicator--9f165939-8822-4998-950c-1ea266b56e5f", "indicator--ba1dd2cc-081e-4e23-b2a9-a409e8c09463", "indicator--95f77f11-902b-45ff-8606-82d7ecf072e3", "indicator--7dad7d9d-3cd1-409d-a58f-42677abc7d71", "indicator--9952bf0c-3ebc-47e3-892a-bcfda3c81c09", "indicator--fc58ced7-dc54-412e-ae57-3b147acfc69a", "indicator--a4af01ca-3d33-499a-b73a-e58e34d24446", "indicator--b4911295-19d4-4b44-b33b-a3be7561540a", "indicator--5888834c-a9eb-4c03-ad20-c61ca6c780b9", "indicator--57ab554d-e210-41b7-ba76-272b692aaa75", "indicator--9595dad7-e54c-4a70-b7d4-9f8d3338eb5c", "indicator--05f200c9-b9a6-4fdc-a071-594749023615", "indicator--e9d3c428-6979-4874-9c08-9f1493f74e10", "indicator--f5ce9912-80b5-4d6c-b13a-283ea95f92f6", "indicator--b5ac0503-db97-4d6b-8d48-3fdaccb055e1", "indicator--dd7a1869-b234-4a51-992d-18f65ec92118", "indicator--24818664-b6d6-47dd-baf4-efe4abb8dda4", "indicator--73425cb9-d94e-4a5c-88cd-079df1b63cb4", "indicator--0dfb40b3-356b-46dd-b28f-ae08f4e41c66", "indicator--466c8e25-7d11-4e72-aae4-625fd854edd9", "indicator--8d21a186-eb90-43a3-a8eb-0128582a81b7", "indicator--697b2ecd-f5ad-48ae-83bf-eec64a300e9b", "indicator--a83135b4-991f-45b5-8e5b-691dd76150b8", "indicator--52938ce7-0500-41da-aaf8-78df341af61b", "indicator--478d8838-5322-4322-bd51-b4df235188bd", "indicator--cec6ae2e-3023-4493-91fd-ac13203dc206", "indicator--a2f96a41-028e-4fea-8380-711205bd6e68", "indicator--89bd0eda-4dac-452a-8e8e-e7232cbf313b", "indicator--d91e4cbc-b193-417d-8903-e6eb2b8c01a7", "indicator--c7047e22-ccee-460f-b4a0-b28faf03bc53", "indicator--3dc5c6c7-b26b-41f4-bd76-967b363167be", "indicator--54d3a305-7b1d-456c-b926-8fd2abf9540b", "indicator--a320a2aa-9a0e-4318-92b7-d4717382d198", "indicator--91c92428-35a5-4b78-a382-7e3fe31b0225", "indicator--5e8518e5-bcb7-412a-9508-66bb282c12cf", "indicator--3bf249ca-4f0d-4312-bd5f-0304ee8aa2c1", "indicator--0bcee60e-2d5a-4c7b-b8c0-9bb105d3789d", "indicator--030cee12-12eb-4987-bd18-f455eb08c259", "indicator--7d32215c-1908-400a-bb90-58f3164ddd24", "indicator--d530d612-69d8-45da-ad87-89a2464705f4", "indicator--539eedcf-a30e-4c28-9783-e923f33c4a6d", "indicator--de303983-336b-4637-91a9-e107ede569ae", "indicator--b12b8986-2864-4f05-b69c-a6cb7466d71f", "indicator--a84d0fa9-b7f8-4b2c-bd9d-244596758f81", "indicator--2de1d238-5a98-4a38-8494-a8de17edd4a7", "indicator--e87a25a8-4545-4cd3-b881-d94dc98de900", "indicator--d38246b4-21d2-49f3-aef3-1d68450b4776", "indicator--0a006ccb-909c-4ac3-8699-912e53f1ec41", "indicator--20f383bb-716d-4342-a378-bebf925cfabb", "indicator--d1ece605-b266-45c1-bd05-4b66b6e41bc4", "indicator--7294d50f-b76e-4f57-85df-dc20a5f4733b", "indicator--4e9d3d59-f883-418f-a731-6a346a21feb8", "indicator--1eb8d4b5-085c-4ca5-aac9-08942d8d22b2", "indicator--2d8892c1-1173-4f11-a756-b9c5021c875a", "indicator--f93580fe-c3c2-42f2-b938-a461bc8c695d", "indicator--c915855a-e5f6-43ea-a02b-2b4000e9ff1b", "indicator--62a07469-4e9d-4f03-b8e1-3dce158a85e7", "indicator--3f331fce-ff9c-4055-b59f-6692df304ec4", "indicator--ae7de128-6cac-46da-af3d-a690540ae12d", "indicator--3f55d507-42ea-4810-abe2-e7b8ce10ebcd", "indicator--3f80b69e-16e1-449f-8dfd-35c8b651d913", "indicator--0a44cd0f-94ab-4ce4-a0a2-1b8f6cb1343d", "indicator--c109ac72-2b32-4283-a9a2-57959c9cd27a", "indicator--05fcfecf-79b8-4ebc-92d1-e5657aff22bf", "indicator--2f106219-7ca7-410b-837d-4b1a232a523b", "indicator--5648cc1a-fc2e-4ef7-91ba-9439b295594a", "indicator--97039ec6-0746-44b8-9100-14190678a266", "indicator--466dcf35-b1de-4139-a89e-e85fc814d2da", "indicator--fa3cca49-8947-411e-b32f-01c6810ecb2a", "indicator--7e46c7e3-5910-45ca-850b-f85549c0037d", "indicator--708c0242-f16e-4bde-9de4-13c4159e4916", "indicator--4b862596-0030-4f6e-b479-28844d0f0394", "indicator--046104b1-70c5-4509-843a-5bf4f3dc3c1a", "indicator--8e2a0fcc-a669-417a-9a4b-b2c5483cf020", "indicator--36cd927a-7548-4aa5-9b6c-a236dd22f321", "indicator--4c42c09e-2bd5-4380-899d-ff0207efeccc", "indicator--427e2578-9fdb-4ac3-8176-5ff04603cbe9", "indicator--b2de8f17-d9af-4e7c-87ef-66191e1dbdd3", "indicator--2d3f7d8f-c4f3-4fe8-a48f-76df48af3410", "indicator--eebdc46e-c8bd-4356-a7d1-3007c68a5c40", "indicator--fda58b4e-fd22-43dd-b311-817c7545d598", "indicator--f3a621bc-10d3-4c39-8ba9-164e73c6d1a5", "indicator--5c29229e-5c8c-4d15-b8ea-a5d6c18402de", "indicator--32672fe5-71f4-4fa7-b58c-4d9dea5d04f1", "indicator--47f30544-d750-4df9-977d-df9e8e475ecb", "indicator--be4341dd-3649-4e85-8aa9-87beeaa103b6", "indicator--2feb56a0-c907-45cb-9668-58b8bfee2dab", "indicator--a517a275-2f1a-401a-b66e-d3d6ed51ef83", "indicator--93ee4799-49cb-4ab8-a9d4-e39ff933c9a1", "indicator--ac01ca3f-a120-4e2f-9dde-92989d8dc4a5", "indicator--8be4331e-d6e0-43d1-a2f8-613937b97d3b", "indicator--57181bc8-43f3-4477-afb0-5c0a4207da50", "indicator--1ae24243-dec8-44bc-80de-cb0fdf4c1caa", "indicator--5ba6c6a1-a0af-4517-9482-5ac3b9ab3d67", "indicator--674a0848-2d7c-4a1d-ae4c-6d7d2fca3f49", "indicator--af61a0be-cee5-457d-9bb0-63febb91c24d", "indicator--265c4c10-072f-47c8-9499-e20869a84efe", "indicator--f90295bd-439b-4bd9-9e99-8a23627159ad", "indicator--b85828d6-cd80-4696-bc29-15e8dd48f0a1", "indicator--f1a1f05e-0c06-4405-b38d-990b19cbc255", "indicator--288a2255-01c7-4c57-bbcb-25c54601470a", "indicator--40308856-1698-4194-989a-b999231a210a", "indicator--5ddd6c68-972f-443c-a3c0-244a6e824230", "indicator--f576ca5e-cdd8-4f42-b2c1-9e3282cd8b2a", "indicator--3f57863f-984b-487c-abdb-d3da62953d7f", "indicator--b9fb7e75-c465-4d4b-b6ef-6c6911b207c3", "indicator--e8d5e6f9-8f36-434e-b542-006ce0a8c984", "indicator--1af1100d-6dba-4359-89dc-929de1ee890c", "indicator--4a984444-dc10-4b3c-9cb0-ad66723082b8", "indicator--eca988b7-e91d-4f1d-b0d5-0f0e3525dbf7", "indicator--e2372a92-8d0d-4e0d-a47b-2c6a9f98affd", "indicator--975ed887-a61a-47b8-b739-4cd963f91338", "indicator--14858537-5ea5-4ab3-915f-96c2325d2fee", "indicator--969a45da-08eb-43c4-a2d5-b331b29fcdc1", "indicator--3d018791-20a0-487c-b45d-e3870f67e5da", "indicator--12e72ddd-25c7-447b-a1e2-a69c9bdcfcca", "indicator--734773dc-bde5-41a9-aa9d-7d222a0c0805", "indicator--f3d768a8-7eb9-4302-b687-3c11cea08043", "indicator--f41cffad-9ba0-41cb-bf9a-02960c2eef7c", "indicator--a40d9bd7-41b9-4e12-9e51-11714f59a0b1", "indicator--fad3f4db-9486-428c-81e4-17a246135730", "indicator--3abaf839-5230-483c-94e8-eb26f575a98e", "indicator--0d941ef0-6126-44a3-a07c-2f1bf388dfc6", "indicator--8e50ee23-cb0f-4d97-88c5-af592a2dd64d", "indicator--433ccc66-1831-41da-929b-5016c318f93c", "indicator--ef99c993-e111-4cca-a124-fc2bd42a00c7", "indicator--e1cc5d29-fb61-440a-858d-27a3b2e0c90b", "indicator--a56647a1-cbc0-4efe-a94e-0199511bda7a", "indicator--dbac1eff-54bc-4e4e-84ca-72967939f344", "indicator--a67d9972-3988-4970-ad48-20330d820a5c", "indicator--00471763-198c-4bae-9410-fda5974d1ce7", "indicator--7f27da37-a42e-48e1-a546-b9952fd34380", "indicator--49f2220e-ac09-4d25-bf12-972067464d46", "indicator--474d687d-3195-4681-b350-b6a3216400b2", "indicator--a2ddc05b-e6c3-443f-b11d-51d3892b65dd", "indicator--d4137501-aac6-44b0-900d-a63bb84b0f60", "indicator--4389e0cc-bdc0-4c03-b947-6ccef9f61bdf", "indicator--317947bc-310d-4dab-8b21-5b3f438d4a63", "indicator--dd957f42-e805-4808-8d7b-be514aa548e1", "indicator--698ad7f9-508f-40fe-b9e1-f1f6c2446adc", "indicator--f18d3860-fc05-4d3e-9f7a-10ee339c21c9", "indicator--0458c4b6-3107-4242-a347-a700890731a0", "indicator--2ea4ed7f-2793-4b11-bd3d-670af2b16cb8", "indicator--42693371-6dbb-4805-96b0-1e4ee6426121", "indicator--2ffd337f-ea67-4fa0-bf18-a49a3d84d0af", "indicator--85d3f2d0-b321-466e-b053-f34540f9ae3b", "indicator--e21c9c27-f117-4963-8b31-0cf628d80bef", "indicator--b5b07c84-f420-4573-9b21-4cc96f0fd790", "indicator--fcc3b4e7-4459-42dd-94ee-2c7b3c6ea6b1", "indicator--7013614f-ecef-4a25-93a5-6f8f6788f183", "indicator--d8f05239-dfa5-45fd-90e7-b1c49d861935", "indicator--6be5ee2c-e212-4267-85f3-79e3efd6ec07", "indicator--54eeebdb-5756-4517-a16b-66317397a923", "indicator--35446b49-c824-424a-b68f-3e2de1bfac42", "indicator--42510e58-14f8-444f-8e92-9e8d31ae74c9", "indicator--b0e80a05-ac8d-4ddb-adbb-d579bfa992e1", "indicator--f1ab9c18-752a-4f7d-aa46-7d6fe2b041fa", "indicator--be25f8c8-2a90-4899-a8da-9973d19f89a2", "indicator--177f8513-c61a-4bd9-bdde-fec9622f7d9a", "indicator--c85cf6bf-44a5-4d90-8c53-f5aa4724e82e", "indicator--5f02d088-0cba-40de-85a8-d546ef71294c", "indicator--ee394af8-dc73-4f36-b0e2-d63d4b37c1b9", "indicator--c1cdd3b8-f0e5-4889-ab2e-c7540ad80b73", "indicator--b0e06260-d648-4516-baf6-23de7e5a86e4", "indicator--b36dd9f5-24ba-4bd2-8a6a-211ae78b0488", "indicator--7129f971-134f-47ef-a44f-227abf534dfd", "indicator--bdfcdf2c-7bd3-460f-8ac1-8f51e8d0d910", "indicator--957a4ef0-8fd1-4b97-be9f-8d2b0b86a8b1", "indicator--165f4cdb-bcb1-4b4f-8e49-e09d66469188", "indicator--fe6bc299-ea00-445d-85ac-edee700d1d48", "indicator--7cf9ffd4-b79d-4115-8d09-c6240572ff91", "indicator--5d889b29-5874-480f-9664-f99ed807f82c", "indicator--8881c614-8c69-405e-8137-e23a70bf1d6d", "indicator--3c81d69c-a371-4b00-ae15-31b745871a44", "indicator--e175989a-ce45-4f59-9fac-5789e0cb1510", "indicator--0208b927-2436-4495-85a0-1e1ad2524d4f", "indicator--7e19cb8a-c6e0-4218-b55d-38488ec5c9e8", "indicator--2451c74e-f1b4-4607-9734-2fde2d45aecb", "indicator--61590178-112f-4f2e-bba6-7a9623ffa3d3", "indicator--c25d9256-c7ee-4e16-b07a-fe73e1e4f3ee", "indicator--52dc3a05-d1f1-4dce-a7fd-50055b44f5f1", "indicator--a6d73791-54fe-4659-8f33-f9462c59f6bc", "indicator--166d1e01-5e51-4e1e-894a-a76a94782098", "indicator--abea62eb-17fe-4586-8037-930c7f17bbd9", "indicator--d1b434c2-230c-49f5-83d9-d0962f67fa68", "indicator--b242b486-dec1-43f3-8c23-57666ec00e23", "indicator--f500b9a0-60f6-4014-88d6-e99d94b46775", "indicator--c87dbb09-97d6-4aa0-a132-17c082b7a803", "indicator--9db03a2d-5059-4b1a-b613-0895375f352a", "indicator--97263cd4-63e7-469c-a88e-f2f5c38d52d1", "indicator--f594dac5-76d8-4da6-884a-9313b08d3769", "indicator--50d5e6d8-825b-41ce-9c7b-841f3d796c16", "indicator--8c05a178-0031-4229-8e9f-bdf8d45b54de", "indicator--760bb588-38f2-49f7-9a8d-ec1512b29f8d", "indicator--4035d3e4-ba52-444c-9c6a-6a89c67249e2", "indicator--65f0fd31-44b7-4e35-aad1-24429dbf11cd", "indicator--58739d3c-1603-4beb-97bd-2b2a97e4c801", "indicator--995a3423-d572-47d6-b292-786ea2a76b8a", "indicator--e78f5581-4165-4543-86c0-c66e46d8200b", "indicator--c6ba0f31-e5f2-4d6f-8221-404a1170446c", "indicator--b0c84758-585d-488a-8ab0-3f202c352eff", "indicator--3d4126ea-5930-42bf-9428-deda6f4dda5f", "indicator--d796f84f-ab62-4408-b798-2f84ba727540", "indicator--e01ef7c0-f5dc-4aa8-ac3e-b028c99086df", "indicator--5afa06ea-0a4e-4f82-a39e-5fad3d25873f", "indicator--78257823-e181-4507-8be4-238dfe4ca0b6", "indicator--0ae92826-1f7b-4c49-b97c-abdc53f7d989", "indicator--741f0364-dfce-414f-b60d-f5493713c25b", "indicator--8f43a184-ec23-409e-93ca-88238fc0ad5a", "indicator--f50142d8-8e74-40b1-bdcb-bfd8adbbe2c8", "indicator--90b41c98-274e-4353-ae15-160418028660", "indicator--9bf45495-0c86-4c1a-9ca3-6d98456ff4ca", "indicator--2d83afd6-9d50-4316-937a-2d982f1bf3f4", "indicator--f3784aa6-db01-45c4-9290-a711dcd78459", "indicator--dd86413b-0bf3-4a04-87aa-bc8984dcd479", "indicator--1ed29842-c8bc-4174-bf73-f0e08f33b9d6", "indicator--8e0dc859-a0e9-4db5-b601-23a2c5cbb4f3", "indicator--02dabd57-92d0-499c-936e-76c06344be4c", "indicator--f0a1683f-80c5-4dfc-aaa9-5a9f153dceeb", "indicator--2c7753b4-e02e-431c-88f0-d71d6bbeb97a", "indicator--0ff8761f-b561-45d8-839a-639b2e2b3ad4", "indicator--d3540d6e-341c-428a-9ead-1bffaa1fdbac", "indicator--cfe206f4-53f0-4832-973f-5a951f124954", "indicator--ab151bb3-dd28-4cee-8cb4-ada20e114126", "indicator--3282dd20-c5dd-4810-a195-2a8730188ee7", "indicator--1f7e9491-566f-4f42-8c87-1a3de92bd840", "indicator--a7b40c04-b075-4f3a-ac01-123a11def3b9", "indicator--38ad3d92-4789-473a-90aa-c424fdcb7943", "indicator--17b72eb9-ae09-4b1b-945e-944c1af94cd7", "indicator--95dbc17c-5128-4a5c-bacd-ee2eaa2d5829", "indicator--2c790daf-699a-4a94-aa0a-6134ac0ba1d8", "indicator--d09435a8-8fce-4665-8a47-1be2ef9ac393", "indicator--7daf9d27-7c37-4400-a800-4f285bab4934", "indicator--9e142543-5906-4597-9c26-9e63f5b2dcdf", "indicator--b93ba62f-3c1e-4b14-8d00-0ad458315491", "indicator--f0437c24-8690-4660-b247-5ed1052c9aa5", "indicator--567b3a21-9dbe-4292-b571-677232234c72", "indicator--22675efc-f43d-4525-8ee9-fbad250876e8", "indicator--d55cee97-833c-4cec-924e-7f01a63331bd", "indicator--369340c1-2905-4d0f-89ef-5ba3e9663b06", "indicator--12876f73-a188-449a-8626-29b77c05b802", "indicator--f46a9f0f-43e1-4b14-bbd2-4191487cc573", "indicator--075794cc-2206-439d-9a21-bf0be3d1de6b", "indicator--450cbd07-f36e-4f61-b04f-e251cd462a28", "indicator--0f27c2b7-5447-404e-9239-c97cfbdae900", "indicator--10539681-1e91-4331-a99f-92f2c5089839", "indicator--19d241a1-c8e8-40d6-84ba-6561dd3645a0", "indicator--5226385c-d15c-4fcc-af54-8beff21c9537", "indicator--2f7b06d6-1ac4-4632-afe8-d27bf9e7427f", "indicator--63e81e66-69c7-4ebf-845c-776aa25fde40", "indicator--06c786d8-cfd7-4fc5-869f-9278d9128f08", "indicator--d492d92f-79e2-476e-938b-ed886027656f", "indicator--a45358ab-2d4a-46f5-9d55-7483986cfc38", "indicator--723260a2-7069-48cb-810b-387b4d019e90", "indicator--3aba01bd-0aef-471c-9d3f-1106f3089c1c", "indicator--7529c0e6-558b-4aa9-a538-639f7a677338", "indicator--16e75958-0a51-4ceb-b494-1b2d1579fca3", "indicator--400eb8b5-9669-4bf4-b211-f311b9aa8f88", "indicator--447064cf-7a5b-438d-a091-8485ef3c70df", "indicator--75596191-7a8d-468b-9c51-95648710209d", "indicator--4296f95b-3b1c-4c1f-ac47-7a02ef64a02c", "indicator--26b9d1fc-554f-4ed2-bc2f-244c899929c8", "indicator--9163126f-7180-45a8-84e3-1d9dbb0e8b61", "indicator--b42c27e7-1237-4f63-af54-a585e432819b", "indicator--03518f9c-8cd4-4dbf-87cf-aacf02e734d2", "indicator--d96ae741-006d-4257-9551-8b7670928bc5", "indicator--190fd202-477b-4ecf-9c1f-64f241076919", "indicator--76875076-afb7-4f72-a7bf-25e6a065671b", "indicator--8a02ff2c-d8ee-4fd9-b4eb-4b42cb3c6d59", "indicator--5ac7883e-4ab6-436a-98d1-eeed4696caee", "indicator--4511e233-271e-4ca7-8c15-d07fcd1e0ad7", "indicator--04a5cff8-a284-4ce1-ae37-49a7d3ceeeb5", "indicator--c74ae0aa-3c5f-4589-b6be-1cce02aa802d", "indicator--4327613e-e638-4fec-8eda-bf4a795d9211", "indicator--a411c3cc-ae24-4f29-ad58-ed3b9b9ab465", "indicator--47a910b9-3bbc-40aa-a670-cc38bf691b47", "indicator--55755c4b-fa26-43f3-988c-123a8755e971", "indicator--d58795e5-115b-4d78-bb5f-a7546fb52542", "indicator--cd1d80b6-8101-425c-985f-34acf1bbd73f", "indicator--6149652f-52be-41c0-82c0-f99df58f4a32", "indicator--9c0f815e-bb29-4062-a586-4787e8b5790d", "indicator--41bdc9f9-f4bf-4685-89db-fad7d04f0434", "indicator--fa7dd599-a1b3-499b-9dc1-710443369f8d", "indicator--79e13e2a-d201-484d-9215-1a6ae2e0b0ab", "indicator--896c46b5-d397-4307-adb8-018617388cd9", "indicator--f9c2f9f8-f522-4389-80c7-c00355560c0f", "indicator--eedc208f-d1dd-45b9-b383-a9ae7fa99492", "indicator--3122a3c2-0131-494f-9c11-0f772b8762a7", "indicator--fad1b31b-e9b7-41eb-95c8-29e6cfb34cf3", "indicator--c6a3079b-05d4-4fff-a89b-a86e2f8a8752", "indicator--5f912aef-d578-4a68-9dd7-569d42064753", "indicator--1b6b8b6d-391b-421b-a07d-6c0589042947", "indicator--d8b36661-51e5-444f-81a5-a3adf282dfa4", "indicator--a4127a4f-b9b9-4c8d-a365-f72d02eb0891", "indicator--e9a278b4-db64-4dec-8a43-a78d1d516517", "indicator--b5b8f7ef-9103-4d29-ad83-97b301d7ba45", "indicator--2893b02e-4370-445d-a395-ca6565867bde", "indicator--daa72037-0364-4db2-bb06-75e5eef62ca4", "indicator--50b71427-6fe0-4a23-9e95-f6eab34d1e9e", "indicator--1d765ec0-e890-472b-affe-d8168e494043", "indicator--4ea49ff4-a029-43f1-a143-ddec61546c68", "indicator--b9b3e37f-10fa-420a-823d-6cbcc9111123", "indicator--9630c20c-f1c1-42df-823d-aa229d7ec3a6", "indicator--ee343165-70b0-4f92-b374-1a83b6d59622", "indicator--dc9edcd3-3421-4062-9d55-a6eca14c377d", "indicator--90b76883-cf87-4c2f-8b21-8421a2acb1ad", "indicator--d7b90af3-e750-4a8b-8d89-737e0d66408f", "indicator--38d477f9-fbee-4c46-80e7-bae903f50129", "indicator--24168195-494b-47cb-99e4-2d169e6d37de", "indicator--245457f4-025e-4e89-8092-84c4046a7e09", "indicator--20e34b13-4207-4bb6-8eb3-411f4d95bcf7", "indicator--c7743724-93f4-4973-abd0-34e86afd4595", "indicator--0bfee3d4-731a-4e43-919e-b99846394acc", "indicator--a2a3fc0a-bd09-4c83-9632-c818f14e6562", "indicator--2b75aa80-53fb-426a-a901-0ad7f6a1326d", "indicator--48d98054-a17d-4a08-97b7-9dc078536c4d", "indicator--7173a4ec-c6e4-4b0c-880d-77eb59b6941d", "indicator--7b067a4b-d81b-411e-bb5b-9f66de69fc70", "indicator--5ab8ca66-fe1b-4037-a97d-18eabce863f4", "indicator--24b9d7ef-14d5-4906-a1ab-9d7f286fec51", "indicator--510b02ee-5257-4685-9ac2-099f71175328", "indicator--5a2f960f-1616-4eaf-b56a-00707f1d48fb", "indicator--212c8c92-c83b-44d9-8900-69a50ff6262a", "indicator--b4bfca9b-13fd-4143-98ac-1f13e0898363", "indicator--24214ef8-f2e5-407f-9bf6-f0772abc6fc4", "indicator--30f3de5a-4d8b-40df-8ab5-c08de907096e", "indicator--7ce43995-64f2-4cb4-b485-f46b7b9d5492", "indicator--779bb1f0-68a1-414d-b072-dd2dd2488e1d", "indicator--2a46168f-443c-454e-97fd-a1a137a832d9", "indicator--902101ef-a75d-45b8-8a58-62d6bb67ef4f", "relationship--32579f88-ecb5-46eb-9a9e-6123c9164e3e", "indicator--f8d0da3e-6cca-4726-8cb6-a68ea0826c0c", "indicator--456e9062-3518-4423-be3a-0efbbff7e5c9", "indicator--2131f7fe-d354-4c40-90d7-ed8b8608d63f", "indicator--3b08998e-2adc-478e-81b4-f49857376b11", "indicator--85022bcb-1f29-43e9-be60-5f929dbc3cdf", "indicator--49e4cea9-245e-44c5-8366-ab6c8d0c1c8e", "indicator--6c06cb28-d8ea-4343-83fb-c3bf70fcb187", "indicator--7a10d6ee-f99d-42db-90ef-3281e867eced", "indicator--d2a71769-9bb1-44ea-aafb-e4d55b71aa4b", "indicator--0858795b-34ce-42c1-ae62-d593aecc0997", "indicator--a49b3219-f00d-48f9-9ddd-19f8b776d34e", "indicator--470248df-9d45-4d8e-aeeb-dca714e88ce9", "indicator--17039a8c-e834-478f-b489-5d31e32bd087", "indicator--996add68-70b8-4973-a94c-3fafd34d0a48", "indicator--b209cf0b-0e94-4f53-b176-dfbbf5dc52e3", "indicator--0652334a-a84c-4da5-964c-a2fe8f6f30db", "indicator--dc222f64-842a-40b0-a972-5ea98aa078aa", "indicator--9501128d-9699-4421-9b13-6441af84e860", "indicator--670da889-d6fd-4f86-a2f4-28a0a4f29c20", "indicator--70c6b4e5-7278-4a22-a657-734f48942f5b", "indicator--c911e3b5-bcd6-462a-9b09-ef232dbfa3e6", "indicator--0a895430-490e-4e0a-9c35-8e35a526f783", "indicator--6ad2dc79-3fc4-49a0-9b2a-bdda12a3886b", "indicator--8df3b549-829d-48d7-9add-aeea2e491ac2", "indicator--8bc45b09-4839-4f3a-b85e-d129ece54c81", "indicator--fcf355d4-33f5-418a-9637-acf0dc8de28c", "indicator--82acf7b7-a1c5-4fe9-9048-0cda81b375ed", "indicator--131c8307-d938-47e6-9d79-101d33bf0175", "indicator--9a3076fe-34de-49e8-8393-a354a302a29e", "indicator--4a7f76a4-5441-4a01-b985-cd1ba0111432", "indicator--702f8dde-7164-495f-bd2b-007bd70085ab", "indicator--b4b25a8f-91ea-4cf6-87ed-521fbe4dab29", "indicator--cd5eaffb-c59b-4a43-bf92-1280276f4d6c", "indicator--8f721aa3-a2a5-47fe-934f-6851347303dd", "indicator--83106641-4bd8-468f-9b26-2a66a3475436", "indicator--8fd0ef20-edb5-4dbd-9706-672efbade60c", "indicator--2bc957d0-024b-4521-8bd8-57e2a0772718", "indicator--45dc02bc-aec0-49a6-a7ac-9f0064c7676d", "indicator--2873c7f0-7fa4-45a6-a9ca-04440099b854", "indicator--e7c2435c-c8d4-401f-bf3a-5c01d5e39a51", "indicator--212be20d-2fe6-4d98-be9e-bb7162ec634b", "indicator--6d30860e-93ce-4977-af77-41c5096e5fd3", "indicator--ec9bded7-9a62-4c65-8921-103f12ec136a", "indicator--08ec01cd-918c-4ede-b78c-25309073e145", "indicator--7be0273f-af03-4379-b222-8f063ff92662", "indicator--0c78eca0-8b1e-4554-ab71-980b06a79b56", "indicator--a222dc7d-d56c-4758-892a-d656364a025e", "indicator--8a9c44d7-5298-43a7-9edd-54b5f5b4ce3b", "indicator--fc9be99a-c6a0-463f-b700-0fb6950d0b06", "indicator--e2906c37-b352-4e05-9fe4-09e03101694f", "indicator--d99627c0-7551-45ec-acc8-cc4943873c49", "indicator--b286c3c7-6e27-4f2b-8d2e-4403f82018d5", "indicator--a57d548f-f287-4969-af7e-1d99db3c8628", "indicator--eb88089c-94e3-4fc9-935f-72c6f0c5c9db", "indicator--0700c739-e92a-42dc-9ed0-5f4bafe509b9", "indicator--cb33f906-b718-4b0d-87bb-3cb10fe02acb", "indicator--89f2e6fe-d64a-4af5-95d8-c8cc527adef3", "indicator--21b04049-b7be-45e6-8e9e-b6345291f79a", "indicator--93501b79-d2ac-4a44-8e5e-d6570ce1b737", "indicator--30940912-6fd5-4a42-b3e7-8c8c83bdebe2", "indicator--28ef0764-69c7-4378-a7b9-e8c14fa58b4f", "indicator--0970b01a-4d9d-47e4-aee4-bb99afb4d8eb", "indicator--426671bf-21ee-493e-b898-5d14c5f267e0", "indicator--09fddc67-9ad2-4c42-b381-696a6f9a2126", "indicator--ac352ff7-5587-4a7e-b68f-c2f8e60aa388", "indicator--d6b8d5d6-786d-4d93-a18b-60e79eccd352", "indicator--60d33b74-3af7-4e00-8282-20372f72aabd", "indicator--e7bedffe-e49b-48c9-abc4-6056c98eaec4", "indicator--9ec29e07-9a57-495c-ac89-5d0acad7b246", "indicator--9cd54805-2105-4748-a04a-8547f3ff705d", "indicator--870ae136-2f5c-4a32-80a9-7ed3614a0a05", "indicator--6df1c037-8245-4e3a-a0b9-bd77bbbeed1f", "indicator--c58774f9-7967-46c5-8d64-d0d4e0ec8527", "indicator--b982be03-af62-42b0-8337-e269d459c955", "indicator--810ce467-39dc-4821-807e-c133c80210af", "indicator--f36e94d1-45a5-4381-ae39-b762b52082b8", "indicator--fe5dd18c-2004-44f7-a306-91e3d8aef41d", "indicator--251eaef2-81ca-411a-bf38-b5d164a4ad15", "indicator--d857cf33-b5ef-4368-9c7d-be107806c4c0", "indicator--f8eb0769-1c29-434d-b96d-19c3658aaa2f", "indicator--6b2b5fea-c8fc-403d-8843-f2beac445ecd", "indicator--154500ec-b26c-4799-a213-5e6de8229bf2", "indicator--030861d5-c50e-4352-84df-1885a903cf51", "indicator--9c44191a-9b6f-4bb3-997d-a9d4c9700f9a", "indicator--f2eeb4e7-0673-475b-9190-ba85637fd889", "indicator--d92ca470-fd08-49db-82bc-9485151dfb85", "indicator--c2178b17-36c3-4ab1-a46c-8dca8017169e", "indicator--0855db06-3208-43c1-a61f-b01d517fc323", "indicator--9025879f-8bb4-433b-95df-d12262670820", "indicator--30ee8c77-0df3-44d1-b8d0-ca1839f7074e", "indicator--ffc0a5f8-efa3-4cd7-bde6-6b6a6190ccf8", "indicator--6a6c8b0c-ad36-4829-9024-529b5a9a1a28", "indicator--36a6e94f-79c4-4910-8fb0-7d64b6a0bbb4", "indicator--bda92ad7-c78d-4b15-bcb1-18b0d4982847", "indicator--cb45f67a-3c01-4aa7-976e-52084c4e6845", "indicator--61d9d941-2298-419b-9b19-b5095efe64a2", "indicator--ccf5e542-be9e-44f1-9c0f-1358f62432c4", "indicator--24563540-3bb1-444e-9b6d-6fa12b6f7b83", "indicator--4499577b-b3b3-4916-9f5a-bf10c6c16825", "indicator--a4ab7e45-ae53-494b-9d07-54b195aa3d29", "indicator--5e93d894-3d27-436a-8d88-53f7c9639c2b", "indicator--c58301e4-9cd2-4380-9ea0-13ab466e495f", "indicator--33d6ebf8-8a59-4c90-af26-420beff9b8e9", "indicator--37df9ecd-9400-4d63-86e6-11e845d70117", "indicator--a2a206fc-d117-4588-8fdf-c32662d122aa", "indicator--af11d7b5-d158-4ca0-9fc8-0b88e1e0c7da", "indicator--d31118f2-dc4d-4d5b-87f8-f687d75c24df", "indicator--cd2f5050-d57d-4740-b8bd-3c8b57eafa7c", "indicator--72f4356b-b593-44b3-90bb-bd56bfa8ab04", "indicator--d342a9f3-7b31-49e2-a855-6b0e9ce9cfd9", "indicator--8d831a92-6b3c-4d98-8b9a-f65d080896c5", "indicator--89912e4c-02c5-48ae-8fbd-85ec4311ac50", "indicator--ecbb1e30-cbdd-4fdd-9464-2acfc77a60dd", "indicator--a79dcc92-9a3d-4812-8706-2f31d789864c", "indicator--8021128f-4f1c-4241-a337-4d927dfb7671", "indicator--9de681c0-013b-4db4-bcd3-fcbf4e97207f", "indicator--6ffd19fe-849b-4b43-9fa4-242fbc0642c4", "indicator--91fc4e04-e4cd-474e-8ce2-9ecce4473341", "indicator--2731f903-5f8c-4d2e-b2d7-759b3389fea4", "indicator--5d1fdd7f-5711-45e4-9f9c-39c8c7f716a4", "indicator--6edbf946-4df5-48f1-9daf-62c02327492e", "indicator--fb92f4c6-79ec-4f9b-b6d3-72779cd541b7", "indicator--a1788d0d-eb0c-4e45-9675-88e54a7552c7", "indicator--1e0f7d9e-b725-4359-ad24-a25658d21f50", "indicator--43f497ec-d3c7-4eee-b9a0-dfaf23df49de", "indicator--ba0cf2fc-3642-4044-bbd6-353c0fb0184b", "indicator--d7ea3b0c-5aef-42f2-823d-5cced0994052", "indicator--2979e92e-69ae-41a5-8eb4-7d635eafc3ec", "indicator--3bb8e105-fd3f-4e11-a158-439f9c3624b8", "indicator--8c3311eb-aff1-4ebe-b551-c514e3429c5e", "indicator--ac62145e-a05a-4cb6-83c2-71cc059b6d31", "indicator--af061c7c-4904-4a22-9b5c-3749fcf89c5c", "indicator--ec17899c-a06c-4999-9912-0007b89d7e9c", "indicator--06833a3f-100a-4ad7-9bf2-dfea6c2d166a", "indicator--bf3f674b-dd3c-45a7-a962-1b862c1f5554", "indicator--4f487c20-9c7f-4eda-b85f-6bc121bd4ddc", "indicator--79bb8147-9a31-470f-aef2-f80d7f5fbc44", "indicator--ecea80f4-606c-4c4f-ba4a-f99eda93a6b8", "indicator--fc1bc140-fb21-4334-86f5-0dcce1585d59", "indicator--fd89dcfa-520c-4371-8aa8-86594b6057e5", "indicator--3fb9f2b1-c74b-45ca-a0b4-d360465e16e7", "indicator--c148cb06-a80c-4a19-9f88-5752877e34a4", "indicator--b6118d49-a0d6-4c3c-91af-b3e05fee2f1a", "indicator--c697de20-05ca-43c0-addc-bed69c1eb70d", "indicator--0cab6a65-2d8a-43d7-9813-a37e301b68fa", "indicator--f39e5815-1308-47a8-8924-15067a61a611", "indicator--d2210f10-9e08-4c50-b25a-ae0f1f6d4b68", "indicator--3c5a9390-6afb-4b41-ad25-79ff50faa0d1", "indicator--d1d29429-6211-4864-a0db-1c478083c6a0", "indicator--7d15fad8-73f9-4506-93d2-03fc2f31bee4", "indicator--69de9fab-6959-4f89-963c-f3f0852e5833", "indicator--9339685a-8af6-4894-ac32-58b38c18b7f4", "indicator--59d7379f-8b96-44f6-90bc-a020d3ddcd0f", "indicator--50878861-f774-4a9a-8451-94208e70e3de", "indicator--836808a9-de2a-405c-b88e-fe3a3d44ed5a", "indicator--b6b7d0ed-6220-4ba2-aab7-058e3929fe16", "indicator--261f17f4-aee0-444f-8ce2-7d1b620fe6af", "indicator--b862f57c-53b6-4c5a-b1ef-3a768c23969e", "indicator--571eadf5-f010-47cf-9ed4-0f8b4ec2964d", "indicator--e2e864c3-4dea-4587-b617-b7dafd4469be", "indicator--181c9198-a6b6-407f-ba5c-5e69ec3b0eb8", "indicator--ac28e903-cddb-4d2a-95bc-c4e58576ff47", "indicator--bdb233c2-a32c-4593-a974-0900c4ecc53c", "indicator--18bc94ab-a501-418b-a75a-99704a84db97", "indicator--e2c17337-6198-47cc-bf0b-0d4f9d08b17a", "indicator--0f27f991-5882-4cc9-ad14-0112e6e71d31", "indicator--9f0a22c7-0e22-4257-a099-cec0f4a6fd0a", "indicator--52cd0555-16d0-4fc2-80fd-b79ee1c5baa9", "indicator--2319bf7e-9011-40af-a864-71dfaeecd56a", "indicator--566b8a4c-1422-41ef-8bb4-c990b94d01ae", "indicator--949557df-98d1-4461-858d-c3a92cf95643", "indicator--b814825e-429b-4aee-b61b-bf54fa43f008", "indicator--89efe592-aba2-4cc9-9109-8e95913239e1", "indicator--538e2b5a-54e0-4557-9b91-d8c921dba05b", "indicator--7b8b63bd-6740-444f-9d4b-5b8c71123a65", "indicator--89828d2f-21f7-40a9-9d6f-0340ab4adf6e", "indicator--1b36ef02-543f-4ba4-bdd6-c42a77eed9aa", "indicator--19c3a1e8-bd36-4451-adf7-0c9da38920b7", "indicator--aeb724fe-5bd1-407f-b119-916780e4e06e", "indicator--280960e9-66ab-4c3e-aa36-69134f9a8d40", "indicator--e83b2a6e-3298-4dff-9d93-0b175ce30c58", "indicator--717b1134-a6d1-41ec-8293-649b07d5fa29", "indicator--8dd8b6ba-0fcb-495a-aa81-36df5286643f", "indicator--4fe3c7d8-896d-403c-819e-68e6e113f8d1", "indicator--1ae691a6-72c0-44ae-81a3-c19f18ed3195", "indicator--324e2e2d-6c10-4453-b299-7dea90db4fe5", "indicator--62c55cda-a828-4841-9219-924b85b359f9", "indicator--cd5af0d0-a8ba-4ac3-8b9f-b68341a93fed", "indicator--8688856e-5ae2-4b08-abbc-3c201cef1c95", "indicator--f1025b29-9c9c-4280-874c-88bcb2f45869", "indicator--06422e12-1c32-43c1-b07a-d5d7f51ab1fc", "indicator--a8f0c445-5aa5-4015-8b6c-2f3d78bde1a0", "indicator--7292110a-0048-465d-bd50-55acf6a80a17", "indicator--5616ffc4-de75-475c-8945-367e4aabb96a", "indicator--f040929f-0e5a-40cf-b56b-9419bec086a8", "indicator--e79379f8-44d3-4676-8533-7c76e5238a50", "indicator--a41ebd24-b837-49f3-905e-2d4a1782c2ca", "indicator--bf322b96-2998-492c-b1f2-e4782ef77ffe", "indicator--81b5aea2-b772-410f-999b-cb4f153965d4", "indicator--ab7a349f-de45-4256-820b-88291c53b58f", "indicator--96e96c26-3e01-4c25-99cc-e04f60e07703", "indicator--3aec0bae-203f-46cd-a0a6-a7acb68cac96", "indicator--a5eaceec-b74f-4f11-90f2-c0b493a06d37", "indicator--6244148a-94a1-416c-aac4-83b61e24bd5b", "indicator--0e461fb5-10a4-4666-a33e-605653863ead", "indicator--68be649a-6a35-40a5-8620-e543513268a5", "indicator--564f5b61-d004-485e-9068-2de3fbd161ff", "indicator--6f28e4d6-faa7-46c5-9908-b5e79ef5fc59", "indicator--46471d89-7019-4b22-9a65-d49fbe4eed2f", "indicator--3085b297-b8fb-4e0d-b65d-15e95425be08", "indicator--34784034-ab84-4926-a36e-1dece557f83c", "indicator--c2b54b0b-2535-4241-84f1-1c773e1513ea", "indicator--35ab41c0-4eda-41c8-ab19-1bae21a7550a", "indicator--b34efea5-7ca8-427d-9f64-9548f3b748f3", "indicator--c18756ae-45e8-40c6-83a7-fa0a896514fc", "indicator--ac83bbc0-e9b9-48cf-b6b2-532ef93f0795", "indicator--21dfe273-8667-423c-a24c-7cfe0101b4e4", "indicator--54fbab94-96c8-4354-9b41-da7f0cc1d142", "indicator--efdfadf5-27f0-4e71-a8e8-7f6903e23c2b", "indicator--a6b41708-388a-4c3a-8242-7fb29bd8d197", "indicator--6807965d-058d-4ddc-a1e5-66cb04ae0f5b", "indicator--c3b26724-0afb-41a3-a022-758b000fc15d", "indicator--83ce77c3-9c24-4fed-8594-c02fc576f76c", "indicator--2bb75f4c-c9a9-459b-ae1e-378ba676651e", "indicator--0799ce4b-cf48-4b19-b5c1-ef7918ddaa91", "indicator--dba64560-a4be-40ea-bd9c-400583c43b2b", "indicator--7a1c79de-8c41-43e8-af43-e9331ea16f0c", "indicator--be542fbb-afcd-40dd-90e4-6a0df205a796", "indicator--9246cf28-7055-4474-ba69-6eb9f6d86a55", "indicator--cad9a066-5cad-4a06-a1b6-3657c0ec8232", "indicator--b150533e-87d7-4649-b299-4710f285a5c8", "indicator--2222cafa-8123-4eb8-9f3e-d712631e45af", "indicator--3aac9b91-a606-4c09-b14d-f0e9512e2090", "indicator--15d57112-47e0-496b-9609-1b8feb178374", "indicator--17f8bcc6-e77e-456c-9e9a-95057066ab70", "indicator--1411790e-e8c9-4fed-8a54-1eb2efc5ba80", "indicator--fdd23557-7a60-44b4-b359-73ae722ce3f2", "indicator--f6197bb9-595e-4b08-b568-915f4cd6ee4c", "indicator--fd3766a3-9b83-44b2-955f-4b248be34a52", "indicator--ba792cb4-13b1-4848-82c6-8f51925476a6", "indicator--d46b157f-0d9d-4df4-8f3d-ac33849e9c22", "indicator--a8324266-ed31-45e7-9104-3aa3ef5b564f", "indicator--3ca72627-5cab-4321-b1da-5f9dc9f6334e", "indicator--a6fd3eb6-dbb2-4fec-92d3-0a02cdc2cd42", "indicator--5348a294-5c51-4060-9e03-b234be372059", "indicator--e00f6dfb-9170-4115-96a5-751d989f4675", "indicator--e16039b5-932f-4f17-9958-c0feb24ee8c5", "indicator--788f9885-c441-403d-ac5d-1f35df248974", "indicator--e400626c-f32f-432b-afc5-6cd4298f5163", "indicator--7a234f5e-903a-43b2-816a-eded5e0cd0b5", "indicator--26060c06-8a95-4979-a984-eb1e5ba16dd2", "indicator--15b89f1c-b3eb-4cad-9fd7-72da6d6e3932", "indicator--b1134fd1-9987-4853-8889-59c968710d8c", "indicator--e55a4a6c-bc51-4f91-b823-5519b264b8a3", "indicator--c613e2b7-f5f1-479c-9c6a-ebf51e0251df", "indicator--841fce91-93a1-4db8-b197-65d9268b886f", "indicator--0bc1bec7-d347-4f03-8487-1512c37809fd", "indicator--cae53ebd-a82f-4b25-9a2f-dda501460b79", "indicator--7d880bfd-469e-4079-b067-c89c6426ba91", "indicator--40ab8456-3aeb-45f9-ae96-f0087b0beeb9", "indicator--4936e956-16f8-4ac0-ad57-9d4c6ed70764", "indicator--54c20cdb-ffc3-49e0-afcd-544719ab7c64", "indicator--779532b2-ff3c-4f75-99a6-a0a8d69d9dfa", "indicator--a524b073-c4a5-4173-8ad6-11d1efb7bb0a", "indicator--253c65a0-d427-4601-91e2-eed5bdc763e4", "indicator--76ee2121-4af2-4de2-ac0f-b6062cab1d49", "indicator--539693f5-fac5-4129-ae5f-e31fde22e57e", "indicator--db1d9f41-5aea-4be3-81d7-c6f076dcf411", "indicator--bc84c366-fa75-424e-b1c6-63ae1e3dc66f", "indicator--6b0986d1-524a-4e98-9475-ccb7f6b86cc7", "indicator--5315c010-222b-435e-99bb-ee3acce68d24", "indicator--1e5a8ae5-9a64-46d1-a130-29d9a01df8b1", "indicator--7127eb66-6149-41d4-8136-098ac0aebf42", "indicator--dbcc6570-1007-4035-b67b-e3a59c4adab5", "indicator--e75ef16a-c49d-4809-9cd1-acafd02dfb9f", "indicator--de01bea9-50dd-4edb-8985-eabc3e9c33a6", "indicator--860b37aa-abf1-445b-a0b3-1257290060bb", "indicator--f2eab526-11c9-4786-b151-a068f6c86bc3", "indicator--e8a0d7e4-e890-4cfd-be9f-d4b8df62d9fe", "indicator--9ee9beeb-0aaf-499a-9eb7-1baeb4bc1a10", "indicator--43241b9e-4c04-4d56-98a4-9d6aedaf2c90", "indicator--3092b859-229e-4d84-9678-04d542d9f4d8", "indicator--e8750863-8026-485c-95f9-b8044c345a65", "indicator--0ae4ed03-7114-4875-8c90-38bfb65f374c", "indicator--04fbd929-09dd-4aa6-a436-84cedb8ebe52", "indicator--e955a73d-a069-432c-9da8-55c34bf29596", "indicator--1902f473-69b7-44d2-9c61-cfc28bb14152", "indicator--e494d2a3-4708-4512-b03f-0cff36368b57", "indicator--f8543d2a-7cbe-48ae-8c75-a7e5c19bb084", "indicator--12872287-0c2c-4f77-a9ed-640442e70989", "indicator--e0868022-0e58-4104-9e46-cec0b85b2ab7", "indicator--8ed1ae23-5988-44ac-97c3-0fa7af4790bc", "indicator--0e725c70-79f8-421e-9d2a-aa074e7dfb76", "indicator--ad54184c-d6d8-491b-8fec-da0c6349cc0e", "indicator--af8c3805-f296-418e-9e01-46f367abb993", "indicator--cbb00eb0-c3aa-4ae6-a855-5cee98b38de9", "indicator--d7731507-43cd-4c0f-8b3e-dbb4d0cc2b8a", "indicator--dd73026e-24f5-4f6c-b2eb-4ef7d947fe70", "indicator--d11a88cc-2ae9-468f-91f4-ca47ca357540", "indicator--06a158b9-1bcc-4209-9644-60ab7256c7be", "indicator--3427a2e1-729c-4b14-96d5-8777b95d9919", "indicator--4b2b9226-f3e8-479c-a574-5990308be680", "indicator--18c57864-6f36-4d76-9c67-2c380337f966", "indicator--b9795964-631f-448b-aed2-1de055d6f456", "indicator--65316af8-d959-407a-ae50-88367e9477b1", "indicator--1da096e2-e740-43dc-90db-b274060136f8", "indicator--a7692712-2225-4339-ab3d-1487568c9ebe", "indicator--8e9a3ea8-3a64-49e5-aef0-0ffcdd66deb4", "indicator--e596f4ca-682e-4da6-a3d2-0a1736503529", "indicator--ebcab871-01b6-4e34-867b-2929d7e8cec1", "indicator--1bd78e06-8057-4417-9baa-c7f56e1765f6", "indicator--dcb97fed-19e9-41ee-b60f-6a7ce3a21287", "indicator--f4e381cf-1ad7-43dc-9671-203ba2e94457", "indicator--e208f726-9645-4b53-b759-c2fd2e160560", "indicator--978c081e-97c7-431e-b30d-af633d81c6c6", "indicator--76aafce9-a8b7-491d-a2b4-b06c8bce0e96", "indicator--d2d65a87-d334-42e7-ac65-34a7dbb41ce5", "indicator--9b2b0d3d-f9da-4c47-a99f-b13c352f437e", "indicator--85ba63f7-3994-4bfd-9cda-950ded96ead2", "indicator--67cbd65a-cc57-448d-b4b2-f25140ca6290", "indicator--c289af03-bc5f-4420-a58d-dbe7bc1195ed", "indicator--295f0802-d296-41bd-8512-1d67e111da39", "indicator--09da3576-1ee2-480f-9f32-d6dd4a28d1ff", "indicator--b2f70ecf-643f-42c0-8234-66f9ddcb124d", "indicator--aae09f7f-114d-4da9-9985-c7771a73291f", "indicator--17bd1ff5-d905-40c5-855d-f5d2ea8ab5cb", "indicator--9edfbc16-800f-40b9-b44f-c9665bc4bdc3", "indicator--9b698064-cdfa-47f8-bf34-2d9dbe4de0fb", "indicator--0808a1a9-bc08-4be6-befc-15b9d305dd78", "indicator--d156d89d-5f54-457b-a12e-3bb168f1555c", "indicator--128d72f5-dc37-48af-a144-dbd41138a8b5", "indicator--a73ab2ba-fe10-4691-a5eb-0689a30aebee", "indicator--d25e40c3-8649-4134-9e3f-3dcc3f9d60ae", "indicator--bc573c02-fe49-43f6-afc4-37d176240c47", "indicator--aa170792-95c2-483b-85bd-277cfa78e615", "indicator--78ae5802-065b-4c1c-bfbe-b9ce6062d5b6", "indicator--c25089b9-58fc-4d11-bdb4-1035016e6e01", "indicator--9478230a-9aca-4120-b311-254cd1e43bb5", "indicator--8088d55e-c9eb-4567-91ef-f8f3d7ea514f", "indicator--e1e17c01-33b4-46e7-806e-f9a3b2d2c58c", "indicator--830a4523-ab4d-4dbb-bea9-705b8708ebd0", "indicator--273991a2-96f0-4e14-a196-eb130f247858", "indicator--43a9afc1-44fa-48e2-bef0-aa2d8bb142d1", "indicator--6397fada-ec0a-47ff-9232-97d850a8a6ae", "indicator--ad450c82-e5f0-4a2e-b228-5abc713a17de", "indicator--b8073628-4dcb-4ae6-99d2-870964ae18ed", "indicator--135d8c63-d9ef-4dbc-b97f-d78f81d6d289", "indicator--1e7efe5f-650a-4828-9925-429057bf1a98", "indicator--dd8659ec-4767-4d3c-b3ac-b6c5acc1eab1", "indicator--bdc1707d-f4a4-48b2-b713-ed0fc785a884", "indicator--4d5740f0-3e73-4d7d-b7e0-3aa04876ec1c", "indicator--96594c66-a8b1-4227-b9e3-8bed51d93857", "indicator--7120eaf4-7e86-4d42-a45a-9481e7c76f1b", "indicator--41caf478-09ed-43c4-ba84-bcaf458af8d1", "indicator--72ea8270-d309-4aaa-975e-e21b5ccd50d6", "indicator--393e069f-0bbd-4dd7-91af-dc7a2bfb9677", "indicator--6ef08514-a950-4124-a1d7-49db10d19f38", "indicator--fe481c03-f985-40a1-819a-a9cca7efde20", "indicator--ac6990cb-801f-4840-87c8-39a48d58b239", "indicator--1aef22a4-c5ce-4c51-8441-29052d02dc7d", "indicator--2f91c00a-0ee7-4a4c-9a75-0f038585fa71", "indicator--587bec0e-9aaa-4a19-b19c-fd32563df2c8", "indicator--22b7749e-1e8c-4aca-a2ea-f7c5a3645a05", "indicator--7951cb1a-9260-4c74-ba25-156d80aeced5", "indicator--fb18bc75-01a4-4ae2-b6ba-371a15cbf032", "indicator--c0c3457f-d4e8-4d04-aa09-efb80b44b8ac", "indicator--98dd9cfa-172c-4e9f-b4b3-99268c1d3fce", "indicator--b3a213b9-6c36-46c5-98aa-f2ae40bc33f9", "indicator--c49c0068-0b39-440f-8609-3764b68d2b5a", "indicator--fdb894a2-593c-4a18-8fde-5f761e56d510", "indicator--941da606-f8bf-4a6c-acf1-b5f2692ae340", "indicator--ca0d09ca-15cd-49c4-871e-620abe28aea5", "indicator--25828479-c34c-4e87-bfac-3fb9c4d399c1", "indicator--a66ad7a7-be2d-47ee-bb39-fb25a10ed847", "indicator--f30fe1d7-f096-44b5-a8a2-15046b22ddd6", "indicator--fbbc3277-939b-4c60-a7ad-7be8e1fadc43", "indicator--05782008-0430-44ac-9cbd-1ed493ebca91", "indicator--acf98653-c297-46e6-a191-6d099036c8c7", "indicator--44534c65-9e9c-4026-92ea-e9826ade56d1", "indicator--98a7aeef-dc36-4175-9356-8eab2d117956", "indicator--482e5d72-f4f0-4f3b-b165-4754a3373463", "indicator--19b3e98c-a92e-4fe1-afad-99a41549ed87", "indicator--d4c82e28-4f06-4eed-88c3-2597ae750a33", "indicator--b7605b34-6623-4ffe-9a9f-e12947f2ae6c", "indicator--60f9fc0e-dfca-474b-b77c-5dfa22da59e2", "indicator--392edf6b-6e0b-4913-a84b-84d16a125c25", "indicator--7b88c0fa-b082-4ed8-95bf-c2a90a86f84a", "indicator--d672dae9-2623-42d9-b6a8-9539807b897e", "indicator--7fba47d3-375c-4967-9710-e190eb20a246", "indicator--d85b94c1-a8fc-452f-8753-06b0ed0f054a", "indicator--d27d2625-1725-4259-a90b-ae0bb48691b9", "indicator--fd72c7a3-731d-4073-aafc-47736a778b9c", "indicator--66172491-dcf9-4b25-a9da-96a58e9f4c37", "indicator--7cd742cb-679c-44c5-97be-bfc9d3657b81", "indicator--040e2f19-51e6-4e6a-9f67-d71a62cb6a34", "indicator--36be09da-eeaa-4554-a36d-4b431f97511c", "indicator--aa3e33ad-f8e1-4476-8d9f-f0b7f6015292", "indicator--62b97b7f-a8af-4bc4-a404-780a144c7d87", "indicator--1afa0fdb-ceaf-4009-b6a0-8f42fbf9aec3", "indicator--a56e83df-5a36-43bc-8e27-512cd01a94c0", "indicator--8a8214b3-173d-454c-9ef3-ab38d9cff323", "indicator--7f8a33f9-8c55-4b78-9e78-ed11e8fcb259", "indicator--8c881ad5-4991-4f45-ae87-a099ebb4cbd4", "indicator--bb94e1b1-d5bf-4ad8-8f78-17d673ce1ef5", "indicator--a52cff45-8e18-4f2c-8391-4fec911e25f7", "indicator--240f1479-f881-4eeb-992f-a33d4cc1c4cf", "indicator--ead31920-500a-4bbe-898f-bdd7e45a0aea", "indicator--215c307e-682d-4afa-ac0f-721d12ac2435", "indicator--cf31ca2e-9232-4b5a-8511-80c19b75fd14", "indicator--d7dfdf1d-a3bf-42eb-b8e6-4519073f2269", "indicator--83e3fe83-0d03-4131-bf53-54faf9e8b3db", "indicator--4042ce76-27ed-4da5-ada2-c03b8cda7437", "indicator--36e54c74-f6c3-46ed-ab65-f7dd428b5cc0", "indicator--7a74debf-23d8-448a-afa1-2c599246eab4", "indicator--bc319133-ff02-4c41-aa6b-d1241b22579e", "indicator--95f2c14f-ded9-45b8-8597-9275005f43d3", "indicator--b519764e-a3c2-45d2-ba64-779082c66226", "indicator--4d08faad-dfff-498c-912c-128f89783820", "indicator--2e11955a-30d7-48db-a76c-4ea34185fa8e", "indicator--e0337943-8162-4d16-a9a7-04b9dc1b24f9", "indicator--0f678c9d-c159-412f-9541-8d2eabf9a53c", "indicator--f0ecb9d3-b8c2-49ee-b8d8-c5caebd3095d", "indicator--600ad359-84e3-47a7-aa68-6d361e13188c", "indicator--c1b9f9f3-63f9-47d6-9002-183a948210dc", "indicator--ecf63e72-331f-4949-8b43-83c6396d5147", "indicator--572fd1a5-f3fa-4637-ab18-90c1a8d052a4", "indicator--858e4d6a-7c79-4655-a437-779755d853b3", "indicator--afab39e1-4bfa-47cc-b5d4-95069d72ec7f", "indicator--37d5157c-2419-4ffe-b827-240b43941944", "indicator--9a862c9d-61f1-4525-a8f0-9ac1356a6ae0", "indicator--ea878787-1f59-466a-91e0-5367962b9226", "indicator--39250f55-5a11-41cc-92a0-9f74a5834b93", "indicator--58ed8043-240c-4424-b62e-c9ffa5e7fb8b", "indicator--0ade17a1-b1f1-4122-8c57-3c7f975daad7", "indicator--721e4c0b-cdaf-4c91-85e8-cae6d0f2555b", "indicator--59b7f48e-ebed-4c07-8886-463d4849984b", "indicator--9f7db003-96c9-434b-87be-716194b81662", "indicator--1d436608-675b-4c7e-aea6-5ece7a75947d", "indicator--e02832ab-8bfc-4b5e-9e16-5fa40659e0ef", "indicator--46c5f0eb-2ea7-47f7-af4f-aa748a7e4479", "indicator--8a1b6ad3-debd-4864-9225-bfce92abeb63", "indicator--12b877bd-eaef-4e0f-a9e2-be216d8acc67", "indicator--34ecb75e-079c-4efb-8472-9760a7119e41", "indicator--88c64b65-e96b-41c0-ae0a-7618b82f8bc5", "indicator--b903e440-9e01-4ae6-9c9e-57bd1141e563", "indicator--b57c3bbc-9a1d-408b-8899-2580a757730a", "indicator--aed3621a-4d69-47f7-8708-af9aa897f59a", "indicator--4fc74e72-a267-48c4-a9c7-43aee47819b3", "indicator--283941ac-d981-4708-be02-7713785d98f0", "indicator--efedc13d-e4cb-41c2-8f59-dfa14f90b0bd", "indicator--58f23797-422e-4d69-9dc9-172cb15b57a3", "indicator--27b2478f-fd9e-4f24-b1b6-0275d5260126", "indicator--3ca4533a-49fd-4d96-b6f5-e09706276e75", "indicator--d65be961-b32d-48d7-8b07-d33038c46d97", "indicator--bffb96da-8e14-4f0d-a986-6dc8aeecd7be", "indicator--aabf5dba-03f6-440c-8633-2b95d5284b83", "indicator--cc4525c4-c3cb-4257-bb65-d8839e5c15a6", "indicator--cd128235-7b94-4fe9-9606-d6549b13120c", "indicator--d239525e-f2ba-476d-ae21-7454f8b55823", "indicator--997248b8-f86e-435e-a534-a3c1c8fa0053", "indicator--6465af54-cd78-4806-ac54-4e87b2f6c8cf", "indicator--6c9cdfb0-b7ba-462b-9753-140ad9d2be1c", "indicator--ba29c49d-9c28-49c4-9cfa-bd877b85d53d", "indicator--9d795cd0-26d8-406d-8e2b-3d44de81f7a6", "indicator--f56399a2-e0c5-4af9-adad-241447911586", "indicator--de994f74-037f-4132-8b55-2967a292118b", "indicator--943ceeea-7827-413f-ac59-22f396f55a81", "indicator--37c76c1f-76fe-404a-b626-02a5dd386a66", "indicator--74daa0e2-9d19-44f2-bd92-7998c02ea8c4", "indicator--e24f6d90-9f1e-40d1-974e-769a1a802f5b", "indicator--47bee9d4-631c-4f6e-8e5f-33c8c68ee544", "indicator--d1901b23-214e-4d6e-a9ef-8981fdefa279", "indicator--f68ba565-54b2-4dea-8624-c821b6f88a3f", "indicator--e69909fa-4c44-4b54-8bed-8c0a8044fb0f", "indicator--0e5d6614-9736-4785-81ce-cb68cea215a5", "indicator--7e85399d-e953-4ad1-89d6-fb941799d0d1", "indicator--aa845951-e574-4672-9fca-8495db350881", "indicator--005f1c8b-c9cf-4ef8-a9f0-02a894864a98", "indicator--f6355c25-ee7b-492c-9a3f-96e0e91c0ada", "indicator--11c632c8-1c4c-450e-963f-3410d60111d9", "indicator--03fa2e27-b66b-43cc-b6ff-18453bbb2583", "indicator--0571edb6-69e5-40f6-a5d7-1d97e003ff2f", "indicator--28797743-713c-4c34-bd5c-1b82055bcc52", "indicator--8a6e363c-af94-4785-9acf-1ee557849669", "indicator--e91ebf13-f188-4e62-a862-e0db2f49042f", "indicator--59f07c4e-45c8-419d-be2b-040d38c7ca14", "indicator--044fc445-3ecc-4d1c-915a-02fa5d97d808", "indicator--1d85380c-93f1-4870-809e-db90b916c6f3", "indicator--051ebf05-52bc-4e08-88a2-90ea1a193363", "indicator--900bbce3-56e5-48de-9116-26d7719a7a3c", "indicator--f45099fc-2d0e-4d1a-bd5b-217fcb6f16bd", "indicator--b35bef6f-021a-4a76-93a7-f5fda08e1f30", "indicator--7766f312-667e-4ef4-81c7-8df5e55f9505", "indicator--3cfa5f47-673a-4074-98bd-2a6f48f6c15a", "indicator--0c1244ce-7c55-4b4a-a941-d312097de824", "indicator--1eaf05b9-b050-4dbe-ac43-0c698ea9d2b6", "indicator--b196b0ff-26b1-4206-8404-daee8ceb1b93", "indicator--a28c7868-5ed9-40eb-97ff-fc5640dff44c", "indicator--80d7e36b-10e0-42d7-a971-c05611c5ee63", "indicator--315d9977-fb9e-4e39-85b5-1807225ab62c", "indicator--6ea7418f-7134-4c10-8008-fc0a29865369", "indicator--313a7834-a233-4794-abc1-1b163514869a", "indicator--e1cc9c8a-6365-40cb-94c2-30edf982bc2a", "indicator--b9384d15-7f4c-4f5c-8853-81000cd375cb", "indicator--bad35197-f8d5-496e-89b6-b32556866b08", "indicator--f21781a8-4aec-456c-b7f3-928e35545b46", "indicator--ca909ecc-5f2e-4343-b995-749de39a2daa", "indicator--bf030063-5287-434f-a660-097732063bbd", "indicator--065f2aa2-3bdf-4a40-aea6-c8fe072325f1", "indicator--81f95e4e-ca21-44ff-bc0e-79b7aaee885a", "indicator--b55221e4-9b6b-4ed6-bf22-377de0f6a53b", "indicator--dca03ba7-d104-4d10-b388-7bb631a234b7", "indicator--cc5b7735-b8dd-430e-acda-cfdbb229842c", "indicator--e99b9e89-bd1e-4ae4-a8d6-d8411aa6c72b", "indicator--c6cd3e17-5296-4677-b775-6eaf241909f0", "indicator--42d8735f-d92e-4f97-894a-735a17c7f0a4", "indicator--515ad25a-ee21-4ba4-a747-a8a254ed583d", "indicator--491442cc-98d3-4e1a-a35f-369c78302af1", "indicator--05512335-7378-4ee5-ab3a-8b1eea6fc3b9", "indicator--a4ae90af-a3f6-42ab-bf05-c966bef8943b", "indicator--5038f9e5-6bab-409b-b963-6be70143e841", "indicator--c2eb2bb8-f812-4876-9f2b-49de5aa303a3", "indicator--96ccb27f-375b-434c-abdf-8d169140dcde", "indicator--5c9c7864-7307-4d5a-bd1d-c23cbbf08642", "indicator--e4d961a2-0f6d-47ae-bd1e-bc9c74afe5ce", "indicator--6f2ffc80-2da0-4ca2-a306-f6efef761298", "indicator--1a7e44dc-b44e-4f16-8928-9d1e62e5d337", "indicator--593e59d5-98b8-4a75-9f3c-de0336fcfc90", "indicator--a172cf06-7a8f-4026-97d9-db78dc91a930", "indicator--b7655785-6956-42d2-a4a3-86f5a81eee20", "indicator--e2044ffb-1f54-4e2d-8770-b1949a242e32", "indicator--33e1ce41-850f-4aef-8f87-7dc6c48d7dc4", "indicator--67c295e7-3d16-47dc-a904-d93ee056c600", "indicator--b152ba5e-5234-453c-ad9a-48cd05370a30", "indicator--8858973b-4b66-41e4-8d0c-75786873ff08", "indicator--4a633453-5f52-4e74-883a-8615c1922f90", "indicator--e4e2912d-5f85-4f4b-be10-5173a5293923", "indicator--42b76c73-a8f5-4140-888a-85e789011ad6", "indicator--d5df657c-3d9d-449b-92cb-a2f387d9f74c", "indicator--dcd76f5f-0ffc-4569-bdeb-2cd6e5e08ba4", "indicator--e7f1d51f-12e9-4690-9537-abfe713c5663", "indicator--81a5cd94-4aa3-4249-9992-385a26d1df08", "indicator--eea25f17-ea36-4402-956f-bda597fbe479", "indicator--c2ac70c8-9310-4ae8-a99e-f67ea2094445", "indicator--8fd21681-4ec1-424b-ba3c-a2a76d970ba9", "indicator--4b50edc0-e8ae-4cf0-b61e-23f225210980", "indicator--50b83021-470a-4c5d-b9c3-3ef46980c911", "indicator--554cb5e3-e922-4f09-93cc-144fe4788f43", "indicator--9478fd01-272a-4347-844d-395319971b1f", "indicator--a4cf9534-1033-4643-b137-25dbe80695bf", "indicator--7dbbc069-12f1-4f08-b850-164fd54e005a", "indicator--661ff23e-b0c3-4269-845a-dbedc51690ed", "indicator--6b28f56c-68af-4bb9-b582-e45c55ae8721", "indicator--b974a682-732b-453a-96c8-cae7d3f8c921", "indicator--24985198-54da-435d-b1f3-8b302180d0c9", "indicator--b6708f3b-4184-407e-80a3-21b40702689d", "indicator--c669aabe-7c7d-4361-8f1d-67ce5f026b2a", "indicator--5c05fa61-d0cb-4620-9e29-312c69288b2d", "indicator--d54461ee-a706-49f3-8018-a6a2be13efba", "indicator--ea80e97d-3b83-49c8-a7d7-e1fe2382c718", "indicator--6fbec674-0877-46c0-a755-96d7a3595fe5", "indicator--63ec19a9-79d8-482c-8f05-939ee959f73f", "indicator--dc0792a3-9b1a-43b1-ae7b-c6dcffd0ef20", "indicator--bd6f6aa5-17fe-4b3e-bdf8-d37b5fdd348f", "indicator--225e0092-14a1-405f-b24b-0f6fc6a71994", "indicator--bb44d30b-d2b7-457f-9fed-ac0d415f0d64", "indicator--2ff6611d-0e0f-4004-9701-4dda8fa99e47", "indicator--4d57408f-2241-4fbb-8150-e73383e5252a", "indicator--29f737bc-7dda-448b-8079-d484a3a9d3e0", "indicator--1ea3b5e3-6ac7-49f8-ae6e-fb2b74b8b88b", "indicator--485c94ca-107e-4f48-8bbe-9318a3aacfde", "indicator--5308e10f-36bd-4e49-bb2a-ac5da64c094c", "indicator--8679a87d-58ea-48c0-a0cb-0ce888a2558f", "indicator--43f01c87-9656-4329-8916-4925ece8ef82", "indicator--1a1bd1e2-4ac9-4418-abd9-18ddb8bc4f9e", "indicator--e6f402dd-9626-4658-92cf-5014f8834acb", "indicator--bf0bca13-3deb-4c9f-93a6-b66a8e3cef24", "indicator--858601a8-89ec-4199-b6a3-de05edc7f31d", "indicator--b21401a5-8dab-45c7-9d2c-cb8f54a47706", "indicator--027c9475-8525-4337-9c8d-e265a06e2b82", "indicator--ae7bd514-d159-4501-bb93-624f653c01f3", "indicator--b30f57b9-266b-40fe-a9b0-8440daa6f0c5", "indicator--2741a108-eb31-46d3-8611-225c66c59653", "indicator--50bf0618-ea91-482d-9e45-0f948fe21ab8", "indicator--a73727f5-892d-4a2d-b3b5-bf6c80fcc4da", "indicator--ffbdbd3d-264a-4a77-b3ac-b7b39346a97c", "indicator--c472bf4f-e73e-4cd7-963b-a61235e628b6", "indicator--f7937be8-a12a-4c1f-98b1-792814121bf6", "indicator--3a088ab5-e496-499a-853f-dc5512be7e98", "indicator--ada0474d-e862-40be-9fc5-31c4bde2d26d", "indicator--829b1fdd-f3d1-411e-9624-587b9c05007d", "indicator--a6c996b2-66ca-46ce-8c9c-cb8eed09bfe1", "indicator--7322ce30-c532-41b7-8309-a3a941535fa2", "indicator--9dff8f20-ed8d-452a-8c22-6a0c8d349705", "indicator--644e78f9-1e6a-4270-acf0-eb1aeca80596", "indicator--03b5716c-1fd6-44c0-b8c9-684791140dd4", "indicator--96f0b6ef-0890-45df-adf9-dc14d06189b4", "indicator--5443d360-4ef9-4190-aff1-80c8e987c723", "indicator--86b8b784-1bc3-4623-b646-1e9bfdb0d0ed", "indicator--397b1b6d-11ef-4bde-b826-d32ef236d123", "indicator--fd75aca8-8371-43dc-b2b5-226aece3b61d", "indicator--e58dfe06-28ff-42ef-8e39-ea17d8c39687", "indicator--7c883e9b-4342-49f8-abb2-dd0264e281d7", "indicator--94f654ef-a157-4721-bcfe-4829e679ad3d", "indicator--f9c38542-62be-4ee5-997f-3894bdc00a5c", "indicator--1dbf0066-9d0a-4cca-b963-0e242b23826e", "indicator--ae20dca8-b8b3-438b-8577-ba353e041407", "indicator--03985e54-29d1-400e-aa81-66955b00d2ac", "indicator--a2f3deab-3614-47dc-8067-e764ff1274ef", "indicator--e249b2ae-3068-4025-a8b9-b24cb4fd3b2b", "indicator--f445d813-cbc3-4c1f-8ce8-f4f525f2cd0f", "indicator--6a0a05e7-0963-48a2-abdd-7eca25d88d45", "indicator--69e786e6-6fe5-466a-b854-dc68d4235bb8", "indicator--f1881c99-0377-45bd-9502-6364d1cb4d52", "indicator--b8ef0bb4-f5f2-4d8f-a3fe-ba9154c8599f", "indicator--1a157ab8-a172-4757-b09f-3150507558e4", "indicator--47f555bb-a266-4f1c-b8be-ea9376722af4", "indicator--35b9deea-9da2-4323-9d23-12c7c6086971", "indicator--9255d7f6-7920-445a-b52f-aab79ed7186d", "indicator--cea86ec2-f61d-442c-ac94-629147e827b1", "indicator--1502d939-e6a0-4f35-8894-c0463b90a16a", "indicator--2e4cd543-1303-45cf-a7a7-b92f27dddf72", "indicator--72e8824c-a0b0-479f-9ad6-dbb0e777ca6b", "indicator--b32459d0-f9df-4a16-bfdf-815807958afc", "indicator--62d0f28c-6e15-4c21-b51c-9d99b320eee9", "indicator--9a2afcfe-e23f-4bc9-bea3-11601134fa0f", "indicator--eaf0d724-3296-456b-b533-096661baa4cf", "indicator--87d5175e-f383-4fc6-b258-2363745c7e55", "indicator--086454ce-7f06-4e7d-a9ab-c5f6865e8c75", "indicator--77cf3ec1-388c-4ecb-ae81-14686dea1b6f", "indicator--75cd0a72-ad50-4136-992e-f117ab668095", "indicator--0b76a25c-b106-41dc-a521-785b2ffb6d03", "indicator--503d19cb-4570-4ff9-8d81-a49dc4b5ba7b", "indicator--299de424-6533-45a5-b771-9c78b3a14d37", "indicator--eeec0199-65b3-49a9-8b3a-63a505d61a4b", "indicator--0c2b0a50-be4a-47df-8d29-9a7088a1ce6b", "indicator--7fba3fdf-781b-41e1-9fef-ac01b60e781e", "indicator--d713f416-4c71-4558-b3d5-cef82eac9324", "indicator--17d79750-5131-4a3c-ab0c-c877690e6fc2", "indicator--cc2db3e0-9c33-4fcf-8f0c-954e0b0b10c4", "indicator--0316d9c0-6397-45ec-b8ad-3bef1212853c", "indicator--975cbf76-7841-475f-989d-712d7f941ff6", "indicator--6702f471-5045-4c41-b1b6-ae424634820f", "indicator--9fc0cb71-6635-4f4e-b054-1c04b848cfca", "indicator--0bedac48-1f27-4da6-bdc6-b46dedba5955", "indicator--a8cc28b5-ab89-497e-888e-bb0c9e206660", "indicator--bb570c76-6973-414b-b615-7fa82c7ca803", "indicator--41eb026c-42d7-4620-acce-e50ea59c39e5", "indicator--240873da-32c9-4898-a0d8-288b0397c945", "indicator--4c32a6ed-0795-4b1f-9d1e-3baaf83a6ded", "indicator--f0acb0df-fd93-410e-ab9f-f70760f26b89", "indicator--75046c9b-5495-4fff-a681-d7454bea7543", "indicator--8f284d05-a832-45ab-90e0-dfa7dc40fcac", "indicator--e81112d3-9bec-4b8c-a168-0cdff68dede1", "indicator--de02dcf5-5d94-47fd-95ad-a8c8d17489c4", "indicator--74873f23-cd97-44f4-bef5-8c867b60b808", "indicator--c1de8fd6-8042-43d7-82fe-18b08f7f1479", "indicator--31d8c834-2c18-4441-825e-918b25331aa4", "indicator--6e2fec2c-5410-43a7-b58c-5bbcfb195aab", "indicator--8c76565a-78ba-451e-b0b8-de63e3fa7786", "indicator--5111e6e2-4a1d-455a-8cf6-ec9717574093", "indicator--5e627818-8844-412f-b69d-9548c8a35e61", "indicator--3b3b09d2-2ffa-4bd2-87c7-89a99d2543cc", "indicator--b34dc984-97e3-4742-8f52-e0f4517d89f7", "indicator--72c83704-52b2-4c27-b0f6-61cb0d74a350", "indicator--84bfb6bb-4590-4c7d-98a7-c695c5484d6c", "indicator--3247a198-bbd1-45fe-81c5-1e66abab77b9", "indicator--dff1bef3-1d3f-4de6-bb85-e707a77bb5da", "indicator--ac28191f-195a-4a9e-a906-114ed1ccdcda", "indicator--29eb0069-74de-4bab-a581-9c970ad3fd71", "indicator--b8dd87b5-4208-4d78-a22f-082e709b3c74", "indicator--639a39e0-c9ce-4820-a0ba-474449d61f28", "indicator--209870b5-eb1a-48dd-b480-a307672c43fc", "indicator--2dc7cbf7-b069-47ca-94c0-5b02852e0fdc", "indicator--1d85b828-de84-4abc-ab2d-044fde81960b", "indicator--2215afd0-6149-4377-89a5-17178ae8b0ca", "indicator--01df4eda-c9d6-4e37-b1ac-b502ff248139", "indicator--fb66cff1-ab70-479d-a638-5dc44bb7ae5b", "indicator--4da6cad1-3657-4170-a250-694e9b7bc6fb", "indicator--c29953d9-a905-4c63-99a7-7ae43d9b6e26", "indicator--52d7b866-e344-407b-bc61-1658497e55b7", "indicator--51042345-f8ae-4cce-a2d6-cc2ba2f44163", "indicator--d7a097c0-747b-4820-bc0a-e099febf3331", "indicator--b4995f69-cbbd-45e9-aa9a-2972602e825d", "indicator--e3bd9bf5-1939-464c-83df-e292d4a46149", "indicator--f1ad7bd7-581c-407c-b50a-77923c974559", "indicator--617a0cf0-e45e-4aa7-a0c5-4b0397240fd8", "indicator--6868fa4d-184a-4b4c-8ad4-8b7255c26602", "indicator--8fed6545-7064-4f49-a714-5c1509afac4d", "indicator--285ef571-29f8-4ee9-8f4d-defd91a785e4", "indicator--58ebee3f-d690-45aa-9d4c-71ef2a609b6c", "indicator--fc801cf0-41d4-41c1-94cf-06760919b903", "indicator--1a9c51a7-3541-4143-9c0e-e26236ba4180", "indicator--0c32b1da-fdad-4431-b125-189e1af8c334", "indicator--e9181757-a63c-4125-aed6-84df5060c2dd", "indicator--63624b2f-5cd2-4271-bac8-dee68e4d2cd5", "indicator--cd3eb199-4858-4ae4-a2b8-9d1737fe29be", "indicator--d14284af-b65f-4b85-a01f-1279ce7d66f0", "indicator--4657888c-d313-403a-8d9c-473d80bd7bfa", "indicator--2bb59406-05cc-46ac-89c0-7e305b62de29", "indicator--bcd74dc9-381a-4ef6-bf7d-9e2de2dd5a6f", "indicator--ec2fca7d-ba49-4346-a7c3-a27dac8d2ea3", "indicator--5f9539d3-69b9-40b1-bf8e-8e16865f169b", "indicator--48e6f445-e08c-4676-b37a-3948cc9f1578", "indicator--cb1a5052-3eac-46bd-9b7a-e19a0c9b2fb7", "indicator--ef1ccd99-a354-4e7a-8b9e-fb0c5ad33bcf", "indicator--c3eb5e6b-98b6-4a58-ad18-3db2cd0f43fe", "indicator--636416e8-4777-4407-b6b0-567cc64144ff", "indicator--fc1ecc89-5d38-4305-ab2d-d60923d36e7e", "indicator--38675f93-bcf7-4580-b726-6f889719755d", "indicator--4ac34859-43fc-42b0-829c-27203df03922", "indicator--ddd0eb17-d677-4970-8107-a63cd28b1670", "indicator--f572688c-1f68-47dc-b03b-1ded1bbe8898", "indicator--7208fb2b-909d-4bb6-ba58-b322a3098a2b", "indicator--59ededce-e72d-4e1f-8432-36a8f03fc95c", "indicator--ecb6db2e-55e6-42a5-9f67-eeff7b9570b0", "indicator--45c36dd8-0395-48b7-a0aa-d53777206b55", "indicator--1362d95a-d04a-481d-b232-f1a2e8dfd9cb", "indicator--7c532c9c-eb83-4e43-9355-74cb68d0aac6", "indicator--f31bfd91-e4c8-4fc6-a5c0-fd21edee77ed", "indicator--2f379bae-3e80-4ce3-92c7-bbd174963c9e", "indicator--86182014-9b3f-4789-bc3d-3d305dc316ac", "indicator--ca9170bb-baf5-4c53-83a2-466641ece669", "indicator--9ac570db-969a-401d-94cf-86c821e94531", "indicator--b5c16883-ba0f-4ca1-b28b-831b9fa07892", "indicator--fb025bba-a263-4bf6-b11f-ced343ff691e", "indicator--9e945f64-cf1f-4538-b2d3-a3f4815e39e9", "indicator--ce908f3f-370d-44f9-91df-e6eb1ff6dfe3", "indicator--bfadf96d-b977-4dcd-91b8-4d96917cd910", "indicator--10fd83ec-a2e5-4fd5-96b5-a71c2009f3fc", "indicator--7d835836-f71c-46b9-8232-786c6b3ba261", "indicator--c69cca8c-dec4-4bd1-bef2-c08e551e8245", "indicator--bf2a5fad-812e-44f8-8b64-fae00012bccb", "indicator--fb150d76-961f-490d-8b7e-b6c2509b8e59", "indicator--7b658ae3-c8ca-443f-8b56-790e215b2194", "indicator--200b8ea9-c5d9-4571-867a-2adfe8f4b678", "indicator--5fde3f9a-f2ad-480b-ab21-7059c3a85d4f", "indicator--8b79330c-bcca-41bc-ae84-02da4abcd9a8", "indicator--e4829aea-3fd7-4ba6-9a10-1fe26390a608", "indicator--44a855ec-11b7-4a32-a867-bde6ef614744", "indicator--731e0e6f-3d02-4202-91af-e0e9cdc3110b", "indicator--0c9a66c5-ccb4-4445-a2a0-c1676c0579f9", "indicator--fb040869-c19e-4d0b-bb38-1a19f308c4e3", "indicator--eadbb18b-ec41-4ce0-9c59-7eab946fa892", "indicator--acf2dcec-401e-4a62-877e-9a7a228b61a5", "indicator--22c0f66e-9dfe-48e1-81a6-051baef89ff8", "indicator--2313234e-5c08-4f3f-b9c5-4d76dc83cc8b", "indicator--ccc139bc-f551-408d-8d18-8d3be6b75b02", "indicator--e2e8e7a6-14ec-42a4-befa-f3db578b20ef", "indicator--42a51fbc-cbde-4848-b815-3e75762b5613", "indicator--7284fe45-9a65-4cc6-91c3-1e342274dc31", "indicator--3fb1e6a0-e494-45f9-a706-c1f5825e6136", "indicator--28625c02-8d8c-4d05-9c18-f0079d62ae80", "indicator--2a077e7a-9d19-44b6-bff0-2627e5cde9bc", "indicator--8b677fc8-eb62-4d01-96f7-56f2a306196d", "indicator--c0bd285a-3ac9-4faa-b24c-5555a2cd244e", "indicator--47d11482-77c0-459d-a3fe-99a2b6a8391c", "indicator--75e0c8b2-df48-4052-9f69-f0c7e3164158", "indicator--5257aa18-d1c7-49b4-a0ec-a0b775b695f5", "indicator--facdcfeb-2aa1-47c0-82db-fd6326bc1623", "indicator--0137a5cd-99aa-435d-8997-152c91a187e7", "indicator--9edfe724-eefd-4c52-9e8b-f4ff70ddf177", "indicator--ace50946-d438-4e2d-9892-aa4075ffbb35", "indicator--732d67ba-6194-43f7-8168-5767a1b5858f", "indicator--5a76eb34-549a-4a4f-bcb8-28366c904e64", "indicator--5050f9c0-587e-400e-881e-682e29348a73", "indicator--3ca623c9-7856-4d41-8c59-0ac2e460d069", "indicator--20524f59-ef1a-4de9-a331-14145dc755c9", "indicator--cdf02845-8450-41c3-b092-ecb8f61a716b", "indicator--4a0e9227-a223-4190-ae41-c33d95426769", "indicator--981996c1-5140-482f-8eff-2dd260b1e524", "indicator--9699bf39-acb5-4004-af6b-4d6a6d4fafc0", "indicator--061dc617-6875-4a04-a9fc-912d14ecfd72", "indicator--f6a71976-6db4-4d2c-a332-fb171fe6859e", "indicator--996945a1-f612-4c24-85c9-81e10d8901b1", "indicator--0544da12-f3b6-4896-879d-cbfd7c38929a", "indicator--79e73703-7218-42ea-8ca8-af2d717310a8", "indicator--868a6701-51ef-4569-9f30-fe6dc35b6615", "indicator--9223027f-2670-4899-aa7b-30bd7a503089", "indicator--e5ad3d15-a0c4-4164-add8-b443d0e586f7", "indicator--dd9214f1-d9a5-4ba7-acb3-9ccb0a548686", "indicator--381c2b2e-2aad-489d-830b-90b1ef4d85f3", "indicator--825bda51-9805-4524-bf44-14a83226c76d", "indicator--0d09512f-7d4e-4cbc-a76f-f37904933ccb", "indicator--ffc9f590-7b61-4db9-910e-eaab8f5ae151", "indicator--cb536a7d-7089-404c-b900-902efba47102", "indicator--7b04826c-b68b-4e0e-bd48-91c971b20500", "indicator--f3537673-c0d1-403a-8ad4-8c42f81facac", "indicator--63cdf4cd-649f-433f-b4b9-8d3e93a52902", "indicator--1d91ff33-8f9b-40e5-bf78-dc743baf2d9a", "indicator--cf2b83d4-3157-467d-9010-aa0aed86f482", "indicator--4e449697-a9eb-4cd3-ad05-a48e768baab5", "indicator--cec79a16-cf09-4acc-81e9-95ce889d4069", "indicator--4f119bdf-5179-4c35-8b16-b6e9333c01be", "indicator--caeb26ac-423e-49e7-b39f-93725d70060d", "indicator--fa1bfe9e-dd43-419e-8da4-ed68f9496c05", "indicator--abfc9726-e90e-4c4e-bdd9-75a6796024e3", "indicator--477cd66c-3b87-4e94-a66c-4b4038ac790a", "indicator--4197ef66-ff5d-463c-be20-dcf2a23debef", "indicator--84432595-8db6-422d-af20-724febe41a83", "indicator--9c1b3981-8bcf-4873-8aae-75171866b3ef", "indicator--041bed3d-5441-4b72-8133-a9092554e0b3", "indicator--939d09ce-e508-4a6c-89e4-d1627a637e79", "indicator--8711f9ca-e8ea-4ff1-9d49-17f1a2a4a91b", "indicator--a858124f-d813-4ea7-be5b-9c52998864da", "indicator--ac817d9e-6abb-4e3f-9142-ec27c797b64d", "indicator--f80acf26-975f-4abc-8edf-ed566d0cd031", "indicator--d9fdffd9-3b38-4f70-afc9-df2bdf10c078", "indicator--a94dbb5f-df1f-4119-b755-4df02e68a6a4", "indicator--51f6dcca-0481-4e88-9531-afe02e021f2e", "indicator--c7f8053b-45c7-4698-be54-b26b27c71965", "indicator--bd4b68d7-2132-4793-9894-f5bc7deb3da6", "indicator--74a76225-af87-4de5-8588-9e159cbc111f", "indicator--18fcf2a7-5b72-40eb-bd21-617efb0765d6", "indicator--55c0af6d-55d1-40cb-9a4d-fdeeaa15e8c1", "indicator--ec300e11-901d-4698-a6ed-9a69c3df3694", "indicator--63fda5aa-f7f4-40ac-b4fd-64c907faf613", "indicator--f2908fdb-13db-49c8-b1cd-2e737919e539", "indicator--46d0f07d-a435-44dd-b67a-b5b6e5b4e3c2", "indicator--a7097cd2-6883-43d1-b378-37bea202bd0c", "indicator--cc2ed98b-178a-43eb-a120-74386be6edae", "indicator--a65a7ffd-d4c4-45f5-add9-32a3d887b351", "indicator--a5cfcd22-2a3c-44e4-900f-3aee95077553", "indicator--2e64279c-42e5-4113-ab69-c75c11df2b31", "indicator--188b216b-b3e6-4d31-a7db-63b9a5f3302c", "indicator--b224ce4c-f9c3-414e-8b2a-3c286ad6d7d5", "indicator--50549478-2aa7-490d-87f8-dd3e76d9bcb4", "indicator--cf62ebad-aa0e-41f9-be51-52d9d09afcb8", "indicator--0f59c099-f34f-44ae-9b28-ae3c91064a76", "indicator--b60af681-9317-4743-a3dd-363c0433206a", "indicator--b5f51246-70c7-4729-91b6-582c6dd9d73a", "indicator--de0d885d-5ce9-4986-bd98-f98fac353cc5", "indicator--4be584dd-6a82-48ab-889a-5b0a7f82b650", "indicator--8dfb8002-808b-47bf-a43d-74c871f3c509", "indicator--afac8d23-69bf-458c-8047-504cc8d0e023", "indicator--d5e46f17-3bea-4a97-abfb-14b636a13399", "indicator--43f424b8-7bea-439a-adcb-2f4483a3f4a9", "indicator--f1d97911-2570-4e80-b2e6-f087d3fa7936", "indicator--a227323a-e098-4195-b945-242a2a52a241", "indicator--292f52a6-174c-45b7-b717-cc211cbeb79e", "indicator--8612ae04-7e83-4165-9879-cd425a7302a6", "indicator--2a2bfdfa-1fbb-444c-82c2-dca1f9cd3572", "indicator--48b0133a-cb67-45b0-b6f1-97ccbe4e7ffc", "indicator--e354fd3e-06a5-4d2b-bd0b-a744e418b964", "indicator--09f12ab8-3ccb-4fec-b00b-36ee25f6949c", "indicator--151847c0-3ec9-4ff1-8c6a-695cdd00085a", "indicator--2134c167-d26f-4612-9c7f-cd5832155cef", "indicator--bc99be7e-dcb2-481a-9169-de571e19c633", "indicator--49886c9a-9304-4049-b00a-df8c3adc0282", "indicator--edc54ea6-cac4-4e77-824e-21e6fb41c0d5", "indicator--de81713b-6feb-4100-89a5-27ff0f910bb6", "indicator--435316d9-bc96-4ca1-8017-9d9c0cec30ce", "indicator--8e44e14e-b3e0-40b8-8566-afe06c6d4555", "indicator--9ea4ba58-3237-499a-a6c3-997c75ce0e17", "indicator--b76bb17c-f43d-41d2-84b9-df293b66ab45", "indicator--80b89edb-cd0c-46e0-bf86-a6b6211795a9", "indicator--6180c80a-2f32-4cc3-98b5-739ae2cf5b7f", "indicator--ed38fa00-d67a-42aa-950d-ffa3d49617ed", "indicator--601e1854-93bf-49c5-bf3d-1e06fa4a7ae5", "indicator--21875dd6-4d64-46b7-9408-156144f9a364", "indicator--f3471443-3601-40c6-985c-1757088b03cd", "indicator--686253a7-ff92-46fb-8fea-623b093ba9b5", "indicator--74417410-3bd5-4ff1-bf1f-6d619436c06c", "indicator--2cd05152-e4df-4c0e-872e-da94a465da29", "indicator--a60eb249-450b-4000-94c1-007b0414364f", "indicator--9f7a2e64-7823-4f1c-9001-32fb6be5386a", "indicator--c9d2609d-3dcb-4df8-a3f1-ec3fd6962f77", "indicator--7e3d9f2c-9cd9-43f7-bac5-50667311459e", "indicator--f6326162-b2bb-44a9-8fa3-c9214142acda", "indicator--19238d67-7688-4579-b56c-355884a5ce1e", "indicator--30809e07-32c7-4866-b930-5a2747a4ab93", "indicator--dd1642fb-49fd-43ce-a9d8-bf2b08f70502", "indicator--480b45bc-ff0f-4c53-917d-3d417f2f77c5", "indicator--bcb700f1-df89-4bcf-a1d6-eee3d15604f8", "indicator--07bf89ae-214d-4b15-9810-0d85b2107358", "indicator--a473e8d2-1060-4f63-96a2-12bc0706fdad", "indicator--0cbe1e80-2c4b-4679-8b4c-82bc7486e1ae", "indicator--4800dd28-a59a-4cda-b672-65d6cf5b97dc", "indicator--9111c9a2-998a-403b-b37f-85fe977f3f89", "indicator--c68fee33-7bf9-460c-b272-c19c602d9956", "indicator--86003246-a0df-4789-9d96-543f577e0eb0", "indicator--392c41f9-2591-43da-ab9e-bc0f375d6000", "indicator--8a53cedb-7b91-4777-b4c0-089d035f51e6", "indicator--35a31d3c-f6a1-42a1-8efb-2157863ec186", "indicator--9b993f99-8c64-4633-8600-30ff25c1b8de", "indicator--0c4e15dd-3afd-4d24-8efc-40584f3e4687", "indicator--de85b1d4-c648-4d7c-8727-45a96a19bc38", "indicator--571c2f4b-91eb-4b2b-a032-e015e4d97145", "indicator--0a683b58-b08e-4f3a-80d9-9d165bd8ff1a", "indicator--f6e0b7bd-ffa2-4723-9524-8d56a165eb83", "indicator--10750add-6e8d-4570-8822-c39f167fd355", "indicator--ec7c2f7c-cb99-4265-b024-d019a0e6abdb", "indicator--6756594c-c771-4c3d-b7fe-e839e7921de7", "indicator--5ab2ff18-8865-4dbe-8ff7-fe56564af25e", "indicator--42922114-75ad-444d-84c8-3f881941e2fd", "indicator--f2963786-b9a0-4df6-b3ca-94a933af0683", "indicator--a4e1558e-d227-4e31-9a4f-213489d992f8", "indicator--67e97be8-af5f-4218-8ad8-70ce9b81f344", "indicator--e8e132e2-31e8-46af-8ec6-5ddb80f7e12d", "indicator--c2e6eb43-9e4c-4736-bbce-ed9dc72c3d62", "indicator--c93b002e-62b5-4af2-8b64-70f771426d46", "indicator--e87e64f8-61e0-4496-9340-7be4df4f6bbe", "indicator--6d8df704-c77a-472d-81c1-6baa4766512d", "indicator--abb3f518-59df-4ba2-8b1f-de2e977ffcdc", "indicator--b6007309-2b86-40c2-81de-b1fd2359358e", "indicator--fd490c89-ceb9-42fe-af57-179aa9aed6de", "indicator--6d7d7bd2-e8b3-48d8-8239-66645b3909d1", "indicator--ecffe5c9-1214-4677-8599-081ac90504ba", "indicator--083db33c-7a1e-4182-9618-05bf20954229", "indicator--ff5c340e-2516-4209-846d-8f7fbd497117", "indicator--d5b2ea3c-6ae9-4f4d-841d-c06d0c65668a", "indicator--094d3957-7eaf-4d6d-9f25-4df36afc523c", "indicator--a0dbddef-974d-4399-97c9-987c18b75986", "indicator--7a0312f9-943a-4ac2-8f2b-3257068440a4", "indicator--7cfffa7a-132e-4188-9487-fa34dbf37ffa", "indicator--09b2cb88-e619-4937-a869-07eaf8795f3d", "indicator--967b24e0-1b9d-41ec-a140-301bb1bc8ccb", "indicator--1006f1d1-380a-448e-b3a6-d0e38ba356a9", "indicator--270d23a2-5193-4d8b-b67e-e6f9d98c37a2", "indicator--6d2d4b0c-d072-4197-bd3d-b9acd29d66da", "indicator--7b2142af-ce7a-4182-8f4d-bed8cd2bad73", "relationship--7df94199-04b8-4494-96b9-f4eb833ca74f", "indicator--5ece8dac-1517-41a2-8c74-c80ca072f149", "indicator--2e9c0552-6344-41f1-a555-ed5fc42337ca", "indicator--b4643c3c-df08-4039-8b43-f566fd14b8e4", "indicator--c6e78b29-1602-49af-8c1c-3aa9bc904df1", "indicator--4c348a47-a528-44ec-aaef-7a357ad45231", "indicator--424b8666-676d-45ba-a27a-99d4f8e85319", "indicator--35a7a6ad-0546-4a49-b387-72317d6a62a6", "indicator--747e9469-d048-48f3-a3c5-ffc420c84c18", "indicator--7d246383-a0ea-4f0a-8992-8bb6554b8183", "indicator--fca60355-6318-4375-a989-890777dd978b", "indicator--ee248955-11b5-47e7-8f98-168464117426", "indicator--a483b0e8-e347-40ea-a134-347e42647416", "indicator--d6073ce6-a46d-4aea-a6a2-641cace7b550", "indicator--9f961d87-8f8d-49c5-82f0-06671e92598d", "indicator--21a60f77-7c0e-4f70-8032-3c6d9ecc9418", "indicator--e8bb46db-8709-4566-b578-5c6e34193103", "indicator--fb0dcd90-620e-4b0d-a867-2b94ef74e0e3", "indicator--b00d376a-ea23-4d92-8693-fb3c4017c921", "indicator--2d54aea6-10ed-49f3-b121-6e2a2dcd74f5", "indicator--f69a3f2d-f195-4b12-9fb6-bb809bd1235e", "indicator--25104cc7-dbfe-49f8-b773-2f827873be1f", "indicator--80b3c9c4-77bb-441e-9e9b-d44c1deae4a6", "indicator--f9d98b36-d182-4390-ad7f-a08430ff19c0", "indicator--2ba1f15b-bcca-4317-92ed-3f7b73de1830", "indicator--dca916c2-9e5e-4828-99fe-870423f0ea6d", "indicator--47e66490-9da5-4a3e-8ebd-e073a14bafe2", "indicator--f8b5811d-fac5-4759-bdab-0dafd072ac8c", "indicator--48e71422-f708-4f05-b963-f7ba45e8cec6", "indicator--bc7f07f5-d060-4df6-a691-be9ac22becec", "indicator--29822829-e5e1-4bed-ad3c-ae2efa40698d", "indicator--eb2bc3f6-d7e8-4c82-a426-4b54fa2fec23", "indicator--18e0b710-5b6e-4a48-8ea8-b80b5e3f7c84", "indicator--5cdfcd12-a020-4c49-a9aa-8416ec304a83", "indicator--d5ee086a-6cac-461b-a286-3f8a70e7b856", "indicator--e245bab0-96d0-4ff9-9a9a-a0244c47ae19", "indicator--216e1458-e830-445e-b13c-e3e46f9e0ebf", "indicator--888083a4-6a7f-4e98-85d2-2f8d20ee1b71", "indicator--921a79c3-c78a-442e-a9fd-9ab1fb811574", "indicator--4a3fc190-ce99-475c-9ac8-76f36cca48eb", "indicator--a610fbae-123b-476d-bd7e-5ca1f0af4f36", "indicator--d9d12b41-730e-4d7c-ba3f-fe0901765393", "indicator--0b9cb5d9-f10b-42e8-863c-fa187a64b08a", "indicator--f63f4a11-094c-45fa-b886-b8ab82a40c74", "indicator--c52c227d-6b48-48e1-ac47-92a32bb5c45e", "indicator--cf7cc5c4-9314-4bcf-97d9-400da1b33ba7", "indicator--62ce8544-5f23-419c-8562-ef78915b9f21", "indicator--9a019079-302e-4d5f-b6d7-e2f0be4eca32", "indicator--d5eedf33-6029-4794-9e33-f37224f1c078", "indicator--7008f3f4-4703-45e5-aab7-5dac08fa629c", "indicator--2b3cb518-f479-49ff-9732-c7a3f83c50c6", "indicator--83a56c66-702b-443c-9e15-db7d96ea7bff", "indicator--a2b7fbf4-066d-4b7d-ae92-54bfe1b3fda9", "indicator--b0464a2e-ef7a-4c2e-9731-29a70be08f83", "indicator--62bf5995-ee40-4fa0-a8c9-da3f09612053", "indicator--2f1e876a-aa88-4bae-bb2a-ccdbf96aedb3", "indicator--31f70038-25e0-4a4d-bffa-a7736439f232", "indicator--bec0657e-a213-4ab5-b321-5f56b289fb40", "indicator--8643729d-351a-4e9d-860e-ee77f6ba9a14", "indicator--7f765061-f9cf-431a-bd90-86326d8daaec", "indicator--ccd13949-dd84-48aa-bcc6-0017e9d41edb", "indicator--47ac1d32-1118-44ee-aa12-e1f7cfbc9e90", "indicator--2062c8c9-a395-427b-9b5f-cbddd8d81897", "indicator--70ba8e7b-556c-4856-a884-1d850d7dc14b", "indicator--b2d68c43-7076-4b0d-ad53-3481c747d438", "indicator--601f7a5b-58b2-45ec-a64e-1fd571bfcb93", "indicator--bf3bb9da-5dc4-40db-b08f-23906c44d3f9", "indicator--9a3a47b4-d6b9-477f-9741-5c7ee04459b9", "indicator--b1022c8a-3d27-495b-bc53-6eee37fa3e44", "indicator--d0d090ac-1247-4f78-a800-0ee0d7e351d5", "indicator--f8a8e4de-086b-4a6c-84ae-d45e5c4ac21c", "indicator--cab62947-6fa4-480a-a305-bf5c47dedef4", "indicator--66bc1c84-4a1b-4e73-8c91-b49f92b68f33", "indicator--75259a76-29b4-43fc-b7ca-307af8615ff2", "indicator--ea044890-fee6-4333-bc9b-ea800b4f4cb3", "indicator--48655d1d-28d0-4f55-a8ba-99adfdd821af", "indicator--314298ed-56f8-4b9f-9119-04e8bfa5286e", "indicator--ccf831ff-6f7e-49b5-9ac4-bd10dbafd4cc", "indicator--a4cf1160-21f2-4aa3-9f3c-012c5f64b7e5", "indicator--0232b398-fa77-4935-a4fb-9736b63cc21f", "indicator--20116626-4d4b-423b-989c-949bcd1eabe1", "indicator--f9369603-9085-47a0-87da-26d0ed2f2ed2", "indicator--f3d11a7a-d943-449f-8ae7-5077135ba959", "indicator--0dd96aa4-7a23-4690-8fb9-1c989915327b", "indicator--f3bd3f52-240b-4aa0-bb90-fd8f183bd48d", "indicator--9a6efde0-f262-4c55-ad11-46d1dc8a2d1c", "indicator--fbb063cd-d9c3-4e9e-84ae-ab346fda8b74", "indicator--83fad016-7b2e-4f57-820f-239ec95aacaf", "indicator--cd01b417-71d2-42a8-9995-fc9ae536ae89", "indicator--a25d1153-c1c4-42f4-a598-64f5a8e3b4e4", "indicator--c4444f78-66b9-438f-9f35-4c42d6bbbae9", "indicator--948c7d8d-0207-4c9b-bb8d-98a0074316c6", "indicator--f1d1149a-6656-4fe6-92f7-cf391e825be8", "indicator--4047a64f-3b72-4df6-8d05-3d07716f15c1", "indicator--700d7842-fc17-42d6-9f24-e263dc86a00d", "indicator--bc391d39-2b5f-4885-b3ca-793c781c5108", "indicator--020a855f-2660-412c-94b1-44dff5f3523b", "indicator--f11089df-8a18-4662-a0f3-42234fa5f925", "indicator--fc02d9df-47d3-4c46-a013-d25025d10ad8", "indicator--5a4ef405-3b06-468c-a88b-896721a7b554", "indicator--85122845-3de9-4681-822a-f11eb941351c", "indicator--a45f4380-579c-4fc2-8bd0-ce113e8496b9", "indicator--8a3d2a81-de2a-42e8-b3f0-1bf457236409", "indicator--ae729114-824b-402f-8f7c-3f56fc45cd27", "indicator--fbb8db0e-18be-4317-9171-43590b4b5b0b", "indicator--e5bf9030-305b-411a-9f48-8a3224c02416", "indicator--48210468-2a44-4f3f-a31e-8443ba0099b2", "indicator--33454c54-e006-4f5d-b729-71a93afeabbb", "indicator--68deda8e-614f-4dab-a08c-2adf698e298d", "indicator--858545ed-b4ad-46a5-99d7-803482c21ea7", "indicator--204e923a-0075-4670-bae9-b513ddb8e767", "indicator--e90f5c74-cd06-45df-8526-fd95e7483ad8", "indicator--302b641c-8c31-49a8-a3d5-0569c8f06a20", "indicator--138c322d-f20f-469f-86d4-9bb3e644db0d", "indicator--96510f7d-46f5-4339-8aad-3bafffaffccc", "indicator--42f80511-2a8b-4818-91d9-328cb30d1e5d", "indicator--619c153a-5445-4266-9765-7a627dda50d0", "indicator--8a7af4f8-2f2c-4f76-86aa-21d704adecae", "indicator--b45391c3-57f3-481b-adbf-3a0843edd83b", "indicator--b838a533-d132-4438-aa75-a2ba3e4cfa0a", "indicator--2a2e690f-8bac-48aa-9fc4-7d653fa09604", "indicator--e0f618c8-e4cd-4154-a0b8-3da10dc80973", "indicator--9b957839-3d6c-4051-8b02-cc6f8a96a0c5", "indicator--50a806b3-23d8-4207-9586-72229623e46c", "indicator--e317c799-6707-4879-95a7-c3962ed0fd07", "indicator--10e1d10b-182a-4d5d-a2dc-0d9b2a46e753", "indicator--f35d9d0b-3021-41fe-8909-2827ad86d9c9", "indicator--26a0bb0e-b3d9-4526-95a7-c0426188c836", "indicator--f672ef0a-c278-4c5c-92f9-424f8a3bbac9", "indicator--314d19c5-f0db-4499-9d31-f48e66928925", "indicator--4b1d1e29-628b-4edc-8e50-e76741d641a1", "indicator--4c493d94-ee18-4838-a4e0-c84f7b6b1c64", "indicator--b962aeed-afe2-4384-ac5f-558aa0a7e3b4", "indicator--e6e1442b-4d65-420e-a0a4-61f3f6cc619c", "indicator--ec446a42-cb0e-4005-876e-b387d8a4dd96", "indicator--6989b54c-4b44-4670-bc51-48de7c3d8993", "indicator--426d544e-4a5a-4bc2-9703-8cb4265e2ae2", "indicator--d5bdfb53-abe1-43eb-9c08-dc6bd75d9f45", "indicator--fae61d43-04b7-41ee-9682-f173414f4dcc", "indicator--92dc69e6-8c62-47cb-a603-acc7afaafb97", "indicator--ef7cbede-38ef-4c73-a5ef-9bbffe2790d7", "indicator--80510e2e-04a2-465c-9244-9b4d43a30181", "indicator--de39200c-ee2d-4fbc-9fe4-0b1d08388417", "indicator--88b3e24e-851d-407a-b99e-718585987521", "indicator--e5c052a6-072a-4c49-aa9c-ea71b486ca13", "indicator--e6923326-bb3b-40ef-9b9e-2810b996d607", "indicator--3505efb7-6d72-4ea6-85b7-4cf6a96474d8", "indicator--46e4f9be-00d2-4d47-b139-b283186d0e6c", "indicator--fe76c2de-c082-4ad5-9542-4c20f7d83a40", "indicator--6ea54ea4-5f0f-48f9-9273-0e7320c14e5a", "indicator--958afc9d-700e-4b3f-bcdd-9b44ab88ad6c", "indicator--4af32d9b-2598-4213-a500-20a87b6b746e", "indicator--5d1a7b41-44f4-4a60-82d6-3467b35bd7e9", "indicator--a64220de-886b-4c0f-9b24-2f76786828e6", "indicator--4bc0e402-562c-4c17-9f6f-796c26261175", "indicator--4ed64c96-b27d-46e0-9292-2e610a2be36c", "indicator--5e5bb193-0870-4765-af13-c227086509e0", "indicator--2d69e06a-4ac6-49c6-9633-140b09197f2b", "indicator--d5ae3300-007f-418b-96b3-9040757e9a84", "indicator--4648e6e9-3526-4f71-b817-c42036bf6f7a", "indicator--ebe64352-cc9d-4674-90e2-7847be5ebdcb", "indicator--7093e3d2-7333-4982-92a1-f4a70a8b7979", "indicator--34107e2c-f546-49ec-b7f4-588a1f81d27f", "indicator--c3acafdc-bb44-4575-804f-a46f1b856ea5", "indicator--f319fd74-af00-4254-84a4-a6444122e57f", "indicator--9450cf79-4e2b-4044-a56e-04c53a62bcb8", "indicator--e94d9f00-1808-4a77-9456-76b0f506c79e", "indicator--66bacc09-0023-4cc0-a67d-4f6648b0f56f", "indicator--af80266e-1a0f-446a-b6c8-389e9dfa8c49", "indicator--df4744fc-0c17-411c-9b6e-6a11e19aa176", "indicator--d8084824-4e69-4061-a8b6-4863b36ce590", "indicator--107adc40-a9d0-413d-a770-fde34146c7f2", "indicator--dea3ea3c-6350-4e8c-b877-4d95c4d327b8", "indicator--e6da8329-5f56-4a2a-a052-504d35594aee", "indicator--1d921eab-322d-43ed-abf7-ccb1aae9841c", "indicator--462e6985-5a39-4ae7-a091-2844dc791c7d", "indicator--77bc9ea4-d950-428c-9679-11eb3f8aa8e5", "indicator--6d154476-c24e-40d4-84a4-c573649866ae", "indicator--8c3746de-056b-4939-8f1a-8feee05914ec", "indicator--508f9a43-7a6e-4bfe-8b86-c9e92fb70ad3", "indicator--27f2d695-bd6b-497d-b3b6-e6bec5079fdf", "indicator--6a05c60e-11b2-4473-934a-d47769faa594", "indicator--285304be-bfe1-4d77-8ff1-9d86d982006a", "indicator--51a5e596-1343-44d8-a078-979ae9bb3cb4", "indicator--8d58a593-7a5f-4924-9858-0bfc56a3aeea", "indicator--4b72c0a6-184c-4782-8d08-da2a2f5bc015", "indicator--a3608330-b726-4a46-a14f-a0d0861cbd37", "indicator--940b6900-df1a-4d73-a721-5b1d4e45aa66", "indicator--5468f502-50c2-4759-acb7-e578e96e9f4c", "indicator--37acb698-178c-409d-9dad-ad876d825008", "indicator--72f23af3-09e0-44d0-9ffb-cf515492567b", "indicator--690961c1-bc47-4df4-84eb-ab17db238675", "indicator--7ab07dc9-69b7-4385-aa37-b3c0cb1a865b", "indicator--62ee7634-22e3-434d-84df-c5a2cc76d283", "indicator--be2ab199-ac6a-4a26-b879-9353cf8c6a2e", "indicator--04435354-f8ff-4751-bb8b-7d1df5478f75", "indicator--5762987b-128d-40d7-b264-69bbfdcf0567", "indicator--2f0c2f25-ee08-437d-bf18-36558272dd27", "indicator--09fb8ae0-5df4-4804-a9c6-9544b605d51a", "indicator--1a350003-6b45-4734-b493-4e92615f443c", "indicator--e7589518-a665-4cec-b64e-81080857aab3", "indicator--adba2a29-d641-442e-adf7-6b8f6c50d555", "indicator--0c955fa5-a56e-4e64-be59-412ff6a77e72", "indicator--cc7ede12-e438-4219-bdcd-8c0b32f06dd2", "indicator--8697067a-446c-4bb0-83b5-7be2131b2d6f", "indicator--518a194b-c319-4bba-82f4-8b78eaf36dbe", "indicator--21cf4cfa-54ac-41d5-bfee-8e43b7939e9d", "indicator--c1b806c8-ba2c-4ea2-a757-412e1560338d", "indicator--27a5fc04-0ffa-45d9-bb42-3a2607f56a4f", "indicator--d8add884-64d6-4276-92bf-7bf8644b9b00", "indicator--1ab40a4a-9608-40aa-98d0-966d2e3c89e7", "indicator--aa0b6744-ac0d-4cff-b98e-b08e6f748201", "indicator--4ee5af54-c074-40e9-b263-f442b4f92306", "indicator--28294261-fd90-48e3-bd67-54105ad49638", "indicator--259cb37f-c8f4-49a2-9493-44edef30f587", "indicator--2821b5c5-e769-4baf-b87e-58e89cd9f505", "indicator--88acbe89-cb71-4f9c-91c5-eac3a71278f0", "indicator--b08f4693-478c-45b0-9def-2c98ce8ce8b7", "indicator--c61d9674-5fd7-44cb-8df0-56f991a57e39", "indicator--bfffc9ae-c2d5-4b02-b313-525ec408e851", "indicator--4bc4c52d-e98b-4fe4-9eb2-76a83118fe21", "indicator--fbebae22-0777-4a9a-869e-229972979fb3", "indicator--a742344f-ccbc-483f-8328-7182179152c5", "indicator--022e210c-004f-47fe-a9f9-d64a68782f65", "indicator--5c7b8d1c-d252-44b2-9237-9b5836520050", "indicator--4457b2f0-8a1a-4aed-a5c0-2f0da404efd4", "indicator--de310d81-4643-4509-b1cf-cbaf5b9ca813", "indicator--881b3634-1b3c-403b-b543-0db28a5af91a", "indicator--cef49a8f-c101-4c75-ae50-510ee13bfd01", "indicator--3cdbe243-1736-4567-9e0d-4de5dcdb4818", "indicator--27e1175d-573b-4671-aa3a-b70ae072a421", "indicator--9f1a2185-5ebe-40fd-bf4f-1cbb199f4d79", "indicator--9658d391-de7c-4965-a00f-2189647209d8", "indicator--1d427e96-4407-42c5-84fa-73d6398f15a8", "indicator--57d8b2bf-81bd-42d5-bd2b-6d27dbd1eb3c", "indicator--c418e644-791b-4f5f-8915-c47f23e55f03", "indicator--b886ce8c-3816-4eba-a311-29d989b83826", "indicator--d48671c7-ed7c-4363-91d4-5848491d6e5b", "indicator--d64ecb47-65bc-4884-99e9-3f960f79b259", "indicator--44aec761-e8c8-4793-b2d5-a74e8c4d7d83", "indicator--1b328b1e-7a88-409f-bfc5-d5716d43bee1", "indicator--14be7335-003b-40ed-8d7b-4d2897b75d5c", "indicator--9af63748-c051-49fd-8612-91d4222bd84b", "indicator--a239ea8b-8b1e-466f-be84-8f20f98ae48d", "indicator--0b2a1a61-5821-4fd2-9dce-777def059402", "indicator--b843d2b1-d8cb-48b3-9e79-179ab36cda9b", "indicator--ef426f1d-e8b7-4e30-9997-88f7c140d0f0", "indicator--478ccc43-88b9-474f-9646-39343ee811f3", "indicator--753062ae-7d64-43c8-85ff-67b2aacf83ee", "indicator--d1107cae-2287-4838-a6a3-b346a3a6329f", "indicator--0e7ccccf-2266-4382-89e5-34be7e2a4e0f", "indicator--756710d2-bc93-4b17-a461-82d53d43b407", "indicator--764a1b78-9219-4ac7-90a2-e3682ee8633d", "indicator--423a4671-9685-4423-81e5-71552d478321", "indicator--db6114f3-a0f9-41d0-8fbe-5f3a202981af", "indicator--c3bcaddf-4d3b-42f1-9ee9-8d973672c39a", "indicator--1c07c10c-da7f-438b-adcb-a39a7870b5d4", "indicator--c55972dd-48b1-4ef3-bfa0-3a58c4474287", "indicator--9faf37f0-a0ad-446a-8288-ef9612fcf54f", "indicator--619f448a-b0f3-48c3-a363-ec6fc1d0d2b3", "indicator--ea92d99c-ea64-4640-bb1f-ca34e6928d5d", "indicator--c653ddcf-1cac-4b5d-a470-407f26040c38", "indicator--16deb694-3c66-4432-95df-49660973718b", "indicator--e6bacbbc-5a50-4ecb-a968-e359e103d7b5", "indicator--b8bd9ba2-4edf-4b80-baca-b7f9fe36e671", "indicator--fcc1abfd-051c-4b20-9bce-7089d7eda802", "indicator--5528a2a9-c373-49e3-ac93-e69b38aac03a", "indicator--45cb0c52-974a-4b1f-98dd-ad94668127bc", "indicator--f31f40c0-87ca-42c9-be01-3b07c85b43be", "indicator--7bad97ae-9658-4b81-bd76-df547f3feaab", "indicator--2279642d-b8f5-4419-b35f-f34df3b64db8", "indicator--0d3cd20e-9384-4728-bfc2-e86abdc515e0", "indicator--876f3307-4a67-4643-8c9c-a863fe812053", "indicator--de5242de-307d-4899-a246-1518b60f5353", "indicator--78a45774-c1fd-49f6-beec-3d62c17c50d7", "indicator--7106de41-8555-47d6-9e13-922ec728fb0a", "indicator--7ef0de43-8f92-44da-bca1-8566ea114860", "indicator--7f610338-1123-41fb-98cc-8850d26a7a69", "indicator--4dba69a0-76cc-4d90-adbf-8d51fbda2764", "indicator--6fd360ea-e27f-4988-a654-78a4124c810f", "indicator--7d270e62-563d-42f5-96d6-f79246c4d2d8", "indicator--347a6907-f0c9-4b18-9349-d708318ff37d", "indicator--7dba552a-9c42-4a33-ac00-5be0f69dfaee", "indicator--6b181003-f043-467a-a334-898fa6f4da45", "indicator--6c52f700-52ac-4a53-8c0e-c323a73ac79e", "indicator--a43284e8-7163-4bbd-bd89-4a7935b70727", "indicator--20eab373-e43a-4b6b-b33a-6f592d819d4e", "indicator--6743148b-e264-49d1-92a9-cbd67b63daf4", "indicator--2128a544-66e5-4538-b010-b8afd9d19c40", "indicator--d963b5bc-2e69-43d5-92fc-a03df65c1a41", "indicator--f7c470d4-ff88-4a92-a6e9-246aeb21f67a", "indicator--ff788756-df9d-445e-9b61-907328168291", "indicator--933cca8e-af9b-45b3-9fb0-f34c2f7b5650", "indicator--77ab5ec3-ea06-4c2a-bba2-448894223786", "indicator--8614a09d-5f00-4eca-a180-db99d870d55d", "indicator--07536821-d818-427e-8ea3-ef5ad59356e8", "indicator--ba3c99e0-af5f-4917-87de-f769f7dca1cd", "indicator--8e85f43b-ba15-48fe-a417-d59ae63f98ed", "indicator--20dcb6ea-5ea1-4359-b85c-c6f9569a2899", "indicator--a84d4486-0f04-4318-b564-04e4686b2a58", "indicator--6eef10cd-6438-479b-ad34-a9c7544fa994", "indicator--918e06af-3081-49e2-a373-f7762acd3122", "indicator--a664493c-38b2-4114-a003-5ee1d66720a0", "indicator--6da41d89-b5ca-4127-a408-49890234443a", "indicator--5704ab55-09eb-43e7-b382-48ef7272344f", "indicator--2b860c92-3915-4b19-a458-71b398a26feb", "indicator--33d4346f-e3a8-4198-9bb3-628b5df55e46", "indicator--fe4db7b3-9d20-493f-bdf7-85a78eaa9b56", "indicator--bee5ac1c-60d7-44d9-a0e7-cca81e97c56e", "indicator--2da1fdfa-3c9e-4420-94bc-08474c68b8e2", "indicator--b57667e6-6ede-4491-8572-4cad864e4ac1", "indicator--d7a82a78-24b8-45b5-a4a5-ca4e59d27c18", "indicator--8746f6c4-7610-4b32-864c-45a69b362510", "indicator--6bbee2a8-1205-422f-8c4c-1aff40c4439d", "indicator--a909f8e4-d80e-43e1-84ea-e1a06d2d4100", "indicator--df1db174-b2aa-491a-bcb1-398a5354c4f7", "indicator--9a6d1860-c8b0-4185-81c2-a54409901448", "indicator--82533bfe-163f-4d87-9186-3db0c3d3e6bd", "indicator--45c0e94a-d1cc-4537-ba51-ea18643e2ef5", "indicator--980ef835-d139-425a-91e2-97107e7e5db0", "indicator--1d9f9e9c-45a5-42c3-ba70-a3c75f8c665c", "indicator--0f35f3e0-135b-4987-8ba0-3bc0bbac5109", "indicator--7a750102-01ad-4cc5-8648-755a02eae148", "indicator--947b389f-3f65-4b3c-8b9b-e17f4922e3d9", "indicator--60b9277e-0eb6-4f56-91fb-28587ef9e99b", "indicator--e9868e02-fafb-4bc0-aff8-efb0dafdd203", "indicator--d6fb839c-5323-4ae0-ab20-bff75ffac261", "indicator--a71c6f17-d51a-4432-970c-7d52e34bc19f", "indicator--08de4983-d52e-4d74-8fb2-82ce69796c79", "indicator--34296d56-e662-4ead-8c40-e1ae6f05508c", "indicator--76a0eb0c-be66-482b-8a3b-ff810903e565", "indicator--73f7cc4e-b17a-4bb5-8226-af9254278f6f", "indicator--d4c2f95d-4ef5-4981-b2df-d090b7091895", "indicator--da1ecadc-0481-4fd1-8da1-1553b96e1fab", "indicator--4c075ea9-5972-4e18-8282-a25b95bd1dd5", "indicator--0d5ea0cc-7a49-4832-ba08-b0629a4c87df", "indicator--409c64d2-286e-4f58-83a9-50ca9d5132fc", "indicator--c613484a-452d-4b66-baaf-4035b7ea73f0", "indicator--cdb057dc-08a3-4f72-9d8f-eb09948b8831", "indicator--0b958a7f-dc55-412b-b73d-0167e231f8e8", "indicator--92dd469e-5006-49c0-8df2-e71e1631feaf", "indicator--7707779b-29dd-4fbd-9180-ea65a5dc5452", "indicator--68c9a0fa-c87b-4603-809d-dabe184e1f6c", "indicator--4881cc13-1b65-46cb-9b04-6d2dd81ed4c8", "indicator--d06242a7-6802-4bcd-8814-1d9cccae7ef1", "indicator--35c04ed5-bd08-4f36-9e4d-ff3fb6d24c47", "indicator--eddb61c6-9cb6-4c17-864f-fa7438ed8a2c", "indicator--eff32313-4b5a-4a3f-ba22-f012793030ff", "sighting--9433b85f-b8a4-42ce-ae61-7baa59603019", "sighting--843f1c50-e7cc-4a98-9b16-844d85a11384", "sighting--057998a6-07c6-4694-a35a-636f8f7b4324", "sighting--812859ba-c862-442d-a4a4-0fba174c08de", "sighting--539d5752-0602-4709-8282-980eaf58ef71", "sighting--bfa797eb-516e-4b49-acbd-74dc90e0bade", "sighting--30271cc1-57f0-4d5a-ac05-563103899bbb", "sighting--45d3915a-9300-4353-a086-7f506f716ac4", "sighting--43d255f3-99bf-44dc-8ea5-8c59be9b2b8f", "sighting--4349b3e8-d2c1-4c61-bdb5-e70bd394f091", "sighting--8924dd3c-f8bd-47e2-8bdb-5aebc3ae89ad", "sighting--e118204c-1e37-447c-a3b4-f49f77b12ea5", "sighting--4738c0d2-3477-4a31-be13-0d9a2f89c5d7", "sighting--fe402375-534f-4e3f-b421-7f59cebf9a98", "sighting--b25ab94f-9982-4d9c-99e8-107a822d99bc", "sighting--73ce4e1c-2c4e-4d1a-9162-07908393a65b", "sighting--adf0b9aa-561a-45cd-81de-be9652bfba3a", "sighting--a3dabd16-a1f5-4cb2-880b-2878ee268a0e", "sighting--a7490752-9fa1-4066-b94e-aaa3a320b7b0", "sighting--0f095e84-5a32-4679-be20-d9fdbce44c4e", "sighting--a9ccdf83-60b6-4de4-b6f1-8f8c94dcb092", "sighting--03331172-9ff5-419a-b5b5-f7a57fafaec9", "sighting--5074a14d-524a-434b-b431-1a71fd9b381e", "sighting--21aa42ed-32e7-4982-a0bd-302e1de5434a", "sighting--2335e29b-ae05-4cb4-99da-d4305fd05cf7", "sighting--1fe6ac75-038a-4539-ba2b-8d77f554e1e6", "sighting--d894ba61-4d65-4b6e-aa70-51a689d3513d", "sighting--fe53a18e-940c-45ee-a358-7e0f558b4c17", "sighting--ca81d47a-b229-4ec3-9ed1-0e881ff9908d", "sighting--c038764b-81d7-4623-b305-37c0289bf79f", "sighting--8d2bb43a-0d88-46c3-90d4-764dbfbd0d49", "sighting--8ca64c63-03c0-4c43-96ec-2ae04bf05354", "sighting--9f230cb4-8b55-4ad2-b64b-13b2202bcfcd", "sighting--09b2a4d2-bee0-4722-8b03-f7fd31ab9426", "sighting--e35dd992-1194-45a6-9162-97b119df5b91", "sighting--485b18d3-4f50-4868-b57b-8f6241c1ee06", "sighting--26e963c3-fcc5-4793-9332-8b7d8e0af276", "sighting--60d820cf-fa80-4e89-9f42-27fb98619321", "sighting--822ad79f-5b5a-4361-8a45-5a9d03c83cca", "sighting--fe8cbf25-b1ef-4ea0-9e06-9d0a1bf3e897", "sighting--7eff470f-c932-4b23-a09c-79e40eaf29bf", "sighting--a1e8745d-6fc9-4462-ad33-c33267f4ae43", "sighting--d860ca9a-29ec-481d-9bd4-03e4e55c4555", "sighting--b079d026-eda2-44c6-9463-94630cc8fe98", "sighting--d01b98e6-6c6c-4425-b46e-e2dc7f03b7c9", "sighting--830c586a-bacf-4c54-b6cb-baff80e5f5b3", "sighting--ef4f184c-9b66-4923-ae0b-ea68e6bb2ac9", "sighting--2159f393-8112-4cf8-bd49-0230809ee6c9", "sighting--2284a68e-2173-4b5b-9ab5-6f43e7fe6258", "sighting--cb79819e-3e7c-4a30-807f-23e8e9bb8d0f", "sighting--a947b53a-153c-480a-b83a-b5703a2d243a", "sighting--bc8bc2e2-933a-45e0-ac8b-97dc7a5531c9", "sighting--c4c93aa6-529a-4be1-b265-dea75a1476f6", "sighting--8b4d7cfa-f20d-4286-a462-57f269721096", "sighting--27098e19-8721-4518-af6b-78259a5665a3", "sighting--0fe35061-8082-4b30-938b-c672fce44f30", "sighting--17abfc52-1165-46f1-82fd-dce2fa803e6c", "sighting--6a0a9225-1d4c-4f82-8ff6-d326410e8656", "sighting--5eedc0b0-d3a4-4932-8058-9cdfe55bb2a0", "sighting--b74de761-b196-4e55-9b89-e4e1e28549d7", "sighting--03d7280b-39f6-45e6-a35d-f08f6bc0d384", "sighting--9033b0d7-b859-421b-bff5-21eb338d0984", "sighting--af4e4bb7-dd53-4bdf-adf7-0ccc4bd56966", "sighting--4b9c4f48-7092-4e86-b6be-7041a486ba9f", "sighting--5c20f064-e87f-42f6-88e4-cd4d73d1e461", "sighting--33fe1177-ee56-4e60-b577-0cd8505496da", "sighting--b4781980-d458-4a17-b8df-4327b5c6fe8a", "sighting--d0686ca1-f2a9-40c2-ac32-0a2eefad8043", "sighting--6eaded89-4a6c-46c3-a671-f4801f119b16", "sighting--6187c011-5a1d-4b9c-89a6-36e030dc65ff", "sighting--fc9f6ec7-8806-4d86-8260-2d5607ac3c6b", "sighting--0d3424db-423e-47f2-8821-19fdac80e7c2", "sighting--92564834-3ac6-46ec-8dfd-7909aeb9bfca", "sighting--dd911133-827f-46bc-9780-fd38f4f80f7a", "sighting--8f99fbf8-20be-4ba2-85c4-8f987ce2d540", "sighting--d6ad1924-e463-4567-95b2-fd138781d523", "sighting--34f8dab9-7e9d-4345-9a84-79ab959cdff6", "sighting--1a630514-2a0b-46f0-b64b-5d637ea9a2b7", "sighting--4f353040-d79f-4abf-af80-c2f415cb4e6f", "sighting--0b03ea58-5e0e-4f24-8749-340f4e7297db", "sighting--ccd8fef8-6de3-4cba-aa8f-11cccf3c24cd", "sighting--5cc9e3c3-c91c-4084-8d3f-c4ab713f2e90", "sighting--99cb7bae-bb1a-45f1-bafe-24a7861ee4eb", "sighting--472b7f39-9a8f-45a2-bf04-47773785ffd7", "sighting--6465967f-206d-4701-9f82-5c530983479c", "sighting--4cb36748-24cc-47ea-ae2d-8d5accd42bcc", "sighting--277dab3f-2464-4fdb-825f-ccd8175e1069", "sighting--f7a2b53b-65cb-44b9-81b3-f59fe1b2e154", "sighting--3fb94380-2788-4d88-9102-9a33e323c93b", "sighting--b87bac3f-b301-4550-9fdd-98ecbe0929e0", "sighting--0fea736f-732f-4b04-91b1-c637f87ddb33", "sighting--06cdd3e7-e80f-41b1-b50d-fa22118b8ca8", "sighting--68bb1165-b522-4379-bc5e-93bc421e54ca", "sighting--e42de0bf-17a8-4c46-a48b-deb0d873ca90", "sighting--2ef75cae-0591-4402-8518-36064ba22304", "sighting--9e7128b9-7cc7-4b37-b879-a832d9650323", "sighting--9a98a575-1eb7-4881-96ea-a1f83eca3c07", "sighting--8586c444-5cac-413d-9ef0-38c127407644", "sighting--09c2687d-b77b-4a2f-9fa4-4e13667206d1", "sighting--69864ff8-fe08-4e5d-94f6-165289ad0126", "sighting--1a961cb1-6447-455e-a32a-f6b58773d837", "sighting--ccc0e3e6-4837-47d3-8db7-73280b0a1a2f", "sighting--2157f349-2ada-4606-9c74-9a0190691ea0", "sighting--e8bd0b55-24aa-47d3-8f46-28ca23d220c6", "sighting--cc7d4be9-8379-4b85-85d6-f3fee0db0f10", "sighting--561b2742-9dea-49cb-8b2b-6d307683ec76", "sighting--e72bc3cf-d11c-47b1-91be-530e3d1c6585", "sighting--4b65f248-0d28-45ba-8a63-16e2a71fdb36", "sighting--cb7cce97-e006-4972-8e4c-e25e34d4685b", "sighting--909b93a6-b897-4e51-afa8-4f4be99f3d77", "sighting--139144bc-c109-4479-b46d-7bc10c10c6cb", "sighting--63196fca-d663-4f92-bf38-9a49a01fcd84", "sighting--561ba9cd-593f-4208-b7e1-b05cc1fb9860", "sighting--40abc228-af1e-4fd7-a7e3-e2dca35126fd", "sighting--a674efd0-a2a6-434f-8b2b-821a9d4e9eb6", "sighting--11327c08-45c9-41e1-9a1e-0fd4171291bb", "sighting--8a8ac136-3a2e-4ed6-b499-78a9bdd1b0cc", "sighting--444bff15-916d-4228-a06a-9ab3344d1e3d", "sighting--f14c6f52-df84-4bc0-b9c9-7fb3ad23d8c5", "sighting--c71077b9-7522-4cf6-b4fc-12dd4061c020", "sighting--fc8a8c7e-0643-4adb-bd0b-7801426a75d1", "sighting--a7d2ca36-a8c4-4931-a61f-3774958ca8ef", "sighting--4677ffdb-7bb2-4ecc-8b58-75f6400546d6", "sighting--1e0d2cd3-7b3b-41fb-919b-1729562b6bbf", "sighting--e8e9ec13-2674-47b1-9727-cddfca56e735", "sighting--4d8e1294-ebf8-4482-8c8c-2ab7a4f41c42", "sighting--2845ca39-251b-4166-860f-40ea51471ad4", "sighting--dbf2b7b2-67f2-455a-9757-6e8db5751c7a", "sighting--16b45ef9-44b9-49db-ba2b-615bba347ef2", "sighting--59886d39-b3eb-4e51-b012-60d165402316", "sighting--12035ff6-0b4b-40de-88da-7f91046a7cd1", "sighting--4ea0aca5-3cca-4ff4-83ec-aa805b4d9481", "sighting--43a2484c-0a3e-4470-8022-74329f6627c1", "sighting--6c18a2c4-46d8-45b2-8809-daa7d09d03bb", "sighting--d4a574a0-6ff6-4ff5-873c-c36dfc6e4edb", "sighting--d51b3428-6de3-43df-84fa-37d1961d8f98", "sighting--52d428c0-b632-4f2e-b06f-33d3e6224d4a", "sighting--90cacb7d-2e36-4540-b8ee-633acfc03812", "sighting--fcd242ea-7ca1-43a0-af6a-368245677408", "sighting--d2f49ca0-8ff2-4577-b17f-6c4f87371518", "sighting--f4db3512-fe91-4a03-a4d2-72f43a4537b4", "sighting--c8ddd1a6-75b8-457a-9d48-65fe2c542528", "sighting--b3ceb574-f592-4004-b0c0-cdf5f846b67a", "sighting--74daab87-518e-4b82-8b07-7eacd3043cb7", "sighting--23cc5d8b-06ef-47c1-8a73-d74fea7d28e1", "sighting--7a4fac7a-5c81-4cb4-94e1-a6e1e217808d", "sighting--4d254983-6b10-426b-8475-a98d0be92dc1", "sighting--ee5ec12e-7f3c-4349-84b2-0a13757be1d0", "sighting--a3fe59fa-9623-4a35-ae26-ef1dd97409bc", "sighting--7822ac64-b5a7-49e6-b2ed-f494ab5ff68b", "sighting--f4b12adf-720c-451f-8532-e1dd03d4ef52", "sighting--49134b57-207a-43cc-a886-5b30ef5fb23f", "sighting--8af2c9ea-2cd3-40c8-8924-e9e806756800", "sighting--330cf47b-f249-4442-8e67-df71f0722966", "sighting--470526e5-74f7-4af8-be03-b86712a04fc1", "sighting--5d4c1831-590a-4770-b6ad-a40d125dc1f6", "sighting--e7ff3f0f-6227-49ca-bd8d-03a903a96ff9", "sighting--db9b1943-f793-4574-94e8-abbc76474bb0", "sighting--0815f2b1-c416-44ca-a505-892d9d376d9e", "sighting--cdea2c11-b633-4287-95b8-04ca9f442e82", "sighting--2fadadc7-64f9-4518-871b-211c50cbf1c7", "sighting--855addde-d1cd-401f-a878-e316a59771e7", "sighting--5ed70b23-8075-42a7-9a18-ff8906eeb3eb", "sighting--a34eb617-ecf4-46b2-b09c-1e25c2d8ea9b", "sighting--d1e692f6-9bf9-4f9e-9a24-244efec00be9", "sighting--3702494e-298d-41dc-902e-fc5f2d8f248d", "sighting--ebceec69-23f2-4845-9799-fcda6fd13044", "sighting--d28381a2-7fe4-425c-beb2-02eb89cb3a71", "sighting--b0120f9e-5cba-4d39-a5a1-94e3e4262620", "sighting--ae5498ac-8d86-462c-94a9-38cb3d319bd1", "sighting--52ace521-8f00-4888-bbb8-e211849c5480", "sighting--a5c78784-8714-4aed-8d6d-971c647ce79f", "sighting--04ce81fc-99a2-46f1-b6b0-0f501ac03b08", "sighting--ed950293-53ad-4fa4-8aae-7e0aa4e1a838", "sighting--2d990a24-8f8f-4544-97ba-5a90232d929a", "sighting--cc918397-7faf-46cc-adb1-f6b30c13b429", "sighting--76d483ad-978f-4ea8-896f-6077c344df28", "sighting--e32c252b-b8fc-458a-9342-b27a51894243", "sighting--abebe03a-558a-46ef-8121-21fbef3583ea", "sighting--226c7243-7f84-4c85-b025-c313c5e37407", "sighting--882dcf9d-2e08-4a97-9aa7-f211b26ac54f", "sighting--75c64f48-2bd0-4bba-b3b0-35942b2fa0fc", "sighting--b228c9da-37cb-4dea-ac66-0e68acbe6d35", "sighting--cad763e1-43a3-4802-a045-789c036a1488", "sighting--00ba5478-3b62-41c9-925e-d93c6c89aeb2", "sighting--a1370152-4af5-4c46-94f6-916f3fce28d4", "sighting--ab7d72a4-7b3e-4e7e-8067-6c799aa2650d", "sighting--252aa0b9-b920-48fb-b6cd-7d4966b64041", "sighting--2d24e00a-2980-44ce-ae40-32e25505fbc8", "sighting--23801433-1dfa-4b6c-bbc7-1e7c4c2c75ab", "sighting--82cec6f5-0eb2-40fa-8204-caae9cb52f55", "sighting--82e5d64b-8997-41d7-9a54-ba548e13a508", "sighting--caceaa4f-8ffa-47bd-a4b7-4d5b0efde693", "sighting--3d037419-cce0-4939-a016-8eb0a124162a", "sighting--5ffff167-27ac-41e1-aa1b-03847184523f", "sighting--471927c0-55c1-4932-ba3c-363b8c7c9b37", "sighting--c2b611bb-74f7-44fd-b833-20403aeabdec", "sighting--dd7d4136-3515-4d75-a528-c8be2d5d8cf1", "sighting--0b6a5e2f-1590-4f52-a350-0a236d15f235", "sighting--5de62cf7-350c-4a1c-8603-177981b14126", "sighting--c0b55a8b-c522-412a-9d00-a2aba12e7c14", "sighting--313dcda6-5454-4445-8c8c-b616b5d03f51", "sighting--1bb0d98f-b99e-4f6c-9794-ebb6a8ab1776", "sighting--4be89f96-33b0-4c74-bb83-7406699eb5f8", "sighting--3e86396b-f93b-4c8a-9585-ff4d51971762", "sighting--bb31f0bb-c8c4-447d-8ec4-93e65ea57e1f", "sighting--f5bc0e1b-2147-4e50-9013-9202d70032a8", "sighting--eda269f1-0a01-4fb0-b229-a249b5d7bbb2", "sighting--b9b29c94-8e52-4a74-9aeb-6ae97979a1ae", "sighting--12b4e59c-ac69-466f-9bfc-481fa2d34d4b", "sighting--9f9f7f87-efe1-4efe-857c-37d7fe4d6e20", "sighting--97d87979-d893-4f54-95df-62d957299777", "sighting--4a1803de-a822-42a7-bedc-bde76fb6edf3", "sighting--e309ceb5-39db-4aa0-b709-03b7b49e5bde", "sighting--2d576085-b6bf-4e8d-86f4-eeecb930feb2", "sighting--706c314c-19bd-4cab-a707-c07ff7be9ccf", "sighting--8119c6f5-4f7b-4895-a512-4584c471059c", "sighting--84323c4f-911a-4184-b77b-82021b2742c8", "sighting--5eb85870-63ef-4cb5-b828-6869a27d8167", "sighting--a72b52cc-856e-4644-9cce-a61936fe60fa", "sighting--b4806d3b-5259-4e93-9caa-07ca92bda71d", "sighting--57fb9dac-61b4-45a2-bde9-b59a35cace95", "sighting--d115c739-8880-4426-8e53-55012947f105", "sighting--d6f39b6b-b46e-4509-8215-07a202314485", "sighting--e86f5e65-18b2-43dc-a51f-b400dabcaca6", "sighting--69df4455-3961-4520-bf2e-8015a4834ad6", "sighting--376ada12-004f-4792-a09e-ff4d2acdae01", "sighting--c3b85662-17fa-421d-ac60-42ea41d89dd0", "sighting--98242694-6f80-40a4-9497-6b8b3fab6ef7", "sighting--fe8b4757-62f4-49aa-b57f-39e45872cb17", "sighting--44e7ba2d-5477-47ae-93b8-b2d5872a9627", "sighting--424245a4-3abb-420d-94d1-6f8321108d62", "sighting--3d3add0a-ea3b-4371-b92e-dc1f436dcdba", "sighting--cdcb5840-7ffa-4499-92b4-c3884d4b5665", "sighting--522b49b5-1e50-4a79-9380-c077e8ab56ba", "sighting--727d18bd-b988-4057-8b3e-bf1e476330d5", "sighting--305785ae-17ab-447a-80c7-2ffb5e96828f", "sighting--31c14067-e89b-4465-90b7-432c3e8fbdb5", "sighting--bdf9a520-bc84-49b0-9dd8-e3908c6b3881", "sighting--33303391-09e1-4376-8c6e-2ef31fb0546f", "sighting--a816f74b-4741-482e-926f-eb88d57d1951", "sighting--c5eb1e47-9aa3-419d-9ce0-4be5e965cf70", "sighting--7bf66a72-3c76-46cb-b89c-2646aae58c19", "sighting--8e997420-d810-44bb-a195-82af88ddd2c7", "sighting--4340d0ec-2f56-43a5-95f5-9158ea466acc", "sighting--8a502a7e-3a28-472b-9e6f-b543d67acc06", "sighting--ff4025df-e463-407b-b0e0-7ac23e90bf1a", "sighting--44eb6ab0-8d08-43af-a64c-c5d240f2af22", "sighting--ba96df08-53e4-432f-b98f-3326ae6f7237", "sighting--1375c490-6967-4bd7-ac06-63b18c597a0b", "sighting--f5305579-03bc-44d5-9f16-7e91bbef7412", "sighting--c0c7c033-9cb8-437d-a25e-541fad67bf6f", "sighting--427fde19-6dff-4fb0-a3c9-c5c04cc32cbc", "sighting--4599e7ea-cb84-43c2-9657-85cc9666c4b4", "sighting--7b87c389-aed0-4719-bb88-f7cfe4eef6e3", "sighting--8a4c2f4a-fe23-4e9f-86d9-2fbab1f460e8", "sighting--488a19ba-927c-49ca-b0e2-3b41247d2f31", "sighting--fb84d94e-30f8-4fb5-aa99-cd513aabda15", "sighting--1a731b31-dea0-422f-b689-8997da3e7374", "sighting--abebc02b-6632-41ab-bebb-0e643ccb6edc", "sighting--004c4125-37e9-4f1f-9b51-d7dfbf99becb", "sighting--f56db929-5791-4992-a9a5-a4f45d5b0583", "sighting--a176ec10-dad2-4561-857c-a7cf69cfdac3", "sighting--bb5fa1cd-c475-456f-a87f-e14c097b4a49", "sighting--4d5df938-d7d2-492b-b432-fcd8ffb3cf67", "sighting--dde90c67-9d0f-4adc-91d8-389ee61c8965", "sighting--1df68866-3cd3-4127-ac1f-6bce63a89455", "sighting--4a486726-4fde-4704-8cd2-6e60b1c3a35c", "sighting--797ad46d-1d2a-4417-aec6-e74b7053b992", "sighting--983880a0-68a0-4f0f-bc18-61d42d12979a", "sighting--27065e6b-d1a2-4b8a-bfbe-5ec4dbcf53e0", "sighting--fc4f808e-b909-476a-bfab-2d20437c27cf", "sighting--e768c455-b3e6-48c4-b024-e2a85f63cd54", "sighting--2cdc483f-1468-489d-b2e9-4673d6f861fa", "sighting--7a7f506c-b60a-416f-9a56-95e949387888", "sighting--3ef4e5cf-c1c9-4bf7-8a05-9d843cb595bf", "sighting--35023b0c-673d-4549-acfb-3a3068957a6c", "sighting--3b64de92-323a-4771-9880-aca8b1f83c9b", "sighting--2c6889be-4809-4904-b391-3d48a63788cc", "sighting--ea44d030-0f97-4471-828b-7c4991b75c2a", "sighting--d7b73644-4788-44a6-877f-4a333464fa25", "sighting--d31d8fb1-fd28-42c7-8d28-3afb7f051b92", "sighting--104f558d-bbfd-4baf-be34-d3a42ead8fc7", "sighting--5bf7c074-8daa-4633-8296-9b35f866d465", "sighting--8155c0b2-f15f-4df0-b552-c758263ac82e", "sighting--35a14f75-15c9-4fa4-9e23-d7c06117df0f", "sighting--6db18a70-2526-4fdc-8626-e792a162d170", "sighting--3a5cb246-f696-407e-be1b-7577d67bcf78", "sighting--cf70fe56-f13e-4fd8-b31d-bdf83d8e6948", "sighting--0aa8e10d-09e5-42f3-8228-5995dd86c3eb", "sighting--421bcce9-5f03-4f2a-b41c-e7886a4423d2", "sighting--f0b4b34f-ee98-4da1-ab58-d8dc3062e6bf", "sighting--8d1d0f62-40d1-463e-8353-76d4fd8882fa", "sighting--40b0740d-de91-43f8-a18c-24aef00eb0d0", "sighting--46bdcda6-402d-4e1e-be7e-fd65e27889f5", "sighting--4954b4c9-66c9-4aab-980a-4bf937a273cb", "sighting--77231513-12a9-4aca-9625-d736a266b99e", "sighting--bb9eb5fc-969d-4a92-ad2d-c4d0105ecca3", "sighting--0e82a0a8-ee95-4875-b81b-ecb4f864c52e", "sighting--268c6b5c-8c90-4034-b7af-06d84456ae8a", "sighting--b21f8857-1f24-4a96-9f41-2f32eaf4fcdb", "sighting--c0e3e65b-3b58-43f2-b7a6-7a85b29e832e", "sighting--c19b3f56-c648-4270-809f-b8452465ac17", "sighting--e66ef911-7e7a-44bd-9c50-bac24f9b3c22", "sighting--cbddae16-ab9d-4ace-a330-8fd8d2233982", "sighting--bb80e5df-a472-4f56-aa6e-9a01fefe3158", "sighting--bffdabc1-362a-4d88-a166-c9108bfe0291", "sighting--fd9fe235-f109-41c2-99c1-b28a96ec1eba", "sighting--b4696e6e-47ef-43d3-85d2-0425541a025a", "sighting--5399b0d5-48bf-4686-b08e-8d78b290d6d3", "sighting--f3059b85-8ec9-470b-81b3-4e8576cd6fbf", "sighting--6651ae44-f5bf-4657-8d52-db17b313b468", "sighting--39887ce1-a57d-4da1-aa29-4f92d07f399d", "sighting--3e5cada2-9fc1-483a-953c-ecfb8b37f2d9", "sighting--d3fccbd0-76c6-4044-b5c6-029a5e2c6406", "sighting--f961e131-6c55-4cb4-a5fa-a33756bfb1c3", "sighting--aa17b1ab-ea88-49a1-877c-53ec5309cd6d", "sighting--bc2cc27b-f533-46fc-8b3c-f0a837e2f2e8", "sighting--490ddd35-290f-45bf-8757-282e39715bcb", "sighting--426f2781-44e4-4623-9be3-4b66c9e46964", "sighting--051a8adc-c8b3-4acb-b8fb-3939609a62cc", "sighting--f9d4a16d-f8ee-41b7-a56f-4acf733ad128", "sighting--5f6b326b-1873-4956-8b42-1b4110d4dfc0", "sighting--c921dfe3-aa13-4c97-9f40-a480b6e91d8b", "sighting--f899b9a1-defe-45d1-9781-ca951bec22c9", "sighting--10fe9a0f-f2be-4d5d-b435-dd50af0f5cf2", "sighting--045eaa8c-7460-4b90-93d6-ce7e23ac2785", "sighting--3d06da93-2bb4-420a-84e1-f183b52e3fea", "sighting--af0ac6b7-6055-4c4c-b5e5-12830be066f1", "sighting--3ead04ee-8451-4a6a-ac78-f90cf2c8e114", "sighting--47ad9bd2-fc92-4f32-988f-0f94a829136d", "sighting--ccd799d5-1c96-4333-9d06-adce4d4c25e4", "sighting--3adf1868-25d0-4668-bad1-965cb5baee21", "sighting--21d49629-1626-4740-9644-5a007b1aaa57", "sighting--c1bb533f-c828-4293-8c86-bb760efe7e64", "sighting--94dd1e15-d8b8-4bd0-b3f0-9b9fd8c5eb68", "sighting--fd3d5174-994a-4ec7-a745-5f5e9a1e1086", "sighting--eb9b2eac-019c-41a6-bcc0-a7b592f86713", "sighting--dee22345-1763-4982-8e23-c00fc3f748b3", "sighting--0b756823-a468-4571-af2b-79bb938b98ae", "sighting--ab89dd57-3c4a-49c4-9bda-62da97397b2b", "sighting--4edfd7ba-3d60-404e-86f6-31b68966c263", "sighting--436d0ed3-437c-4ba0-a3f5-487aa38daac1", "sighting--97bfdb6f-64ea-4a27-8e7d-1f301c75b98a", "sighting--b97303d1-b446-4988-99df-9dceac7d6776", "sighting--43b09f67-85a9-4d3c-aefd-19cdf746b779", "sighting--da210465-d48d-4de9-a7e0-8536687ee52d", "sighting--ab839dcf-5e53-4cd0-a331-99920fc1f922", "sighting--45856290-2cdd-41f4-bc1d-1899ddcd1e07", "sighting--5ad6e81e-5002-43d8-a9e0-0c708392c59b", "sighting--4d17976b-707e-4459-b580-4fbc3d34a96d", "sighting--76e63ccf-a7c7-4b37-936b-f37aa3ce0f2e", "sighting--17f21c10-ccf8-4116-9600-ef4719f4ed40", "sighting--3a82267a-64c4-4e3e-a958-b739f9c49e48", "sighting--5ac73e59-e0d0-43eb-aae3-117f2adf296e", "sighting--01a51808-6c2e-42a5-a1ad-cdfb4c2f3054", "sighting--e17ba110-2ece-4406-8db7-923d989cc3fb", "sighting--3c657e84-1488-463d-b2b1-bbf54785ca65", "sighting--4a725339-259e-4f47-85d6-0e1226ee6413", "sighting--5eef4eb9-d354-48ff-89f2-ae3706bfddf2", "sighting--fbacf0a6-1f40-4201-92ae-5b9b8660e072", "sighting--3b6e4c3a-c309-47d2-90ef-1777beb9c592", "sighting--b294b8b5-1f0f-4116-8268-dc393656d9fa", "sighting--6505e839-a12c-4685-a8df-46ecfa97877f", "sighting--7f42c413-6666-4a73-9289-59e4ca7f5c71", "sighting--dc8c7f4c-f1d2-4cb7-850b-08ed2c964a52", "sighting--633fde59-d8cd-49bb-9806-553a75d477db", "sighting--7c40392f-cf2f-49fb-ba1a-a34e8c18e809", "sighting--ec4ff776-4dd3-4072-93aa-ea1af6ba0e0b", "sighting--b7162667-35a4-46f0-9ef5-031feb76c206", "sighting--7ccd2b2b-e52c-429f-8ac1-bd019fdf2de0", "sighting--b99e4014-3f5f-4b58-9ec0-e422ec18d178", "sighting--0041a343-ac5a-498e-86c1-2acd6a2505b4", "sighting--aa4e615a-8d0f-47af-8f66-baf2e94ef6c8", "sighting--ee86cd1e-290b-4a34-9ec1-6c9e22a7bbcd", "sighting--dd9e0963-ff8c-4d2e-a042-7de650260f2e", "sighting--5b3fcd07-3076-440b-81a0-1da07cd0700d", "sighting--952051d8-d681-4e65-911a-bee2d4e1bc11", "sighting--954e8b8e-4ce5-4b96-8b23-3c6f85b36bb8", "sighting--d64c4a60-7512-44c5-be49-2fd97cced175", "sighting--00b7c3d6-b1dc-4ff6-a56b-306d020fd4d3", "sighting--1aaa3023-b2d9-4eab-88f2-f69519c08baf", "sighting--c32c3d5a-06d3-477d-b2b7-cc7ce4302bd8", "sighting--78c806cb-af8a-4d27-b858-4d1df801875d", "sighting--e74af892-db6f-4420-a063-7b49c1f9ac83", "sighting--44b63e1e-d762-495c-a1b6-f90a9da68337", "sighting--5f78b992-226f-4b04-84de-833e78aa81eb", "sighting--d74468cc-cf2e-471e-b61f-ee1dca58da03", "sighting--b3e885f1-f925-4e57-bec8-b32231bb1710", "sighting--7dfbf9af-33c3-4e0a-9229-17e3a14ab426", "sighting--dbb1c2cb-de0c-42e3-a469-501bf0b9d11c", "sighting--d26ddeb7-9812-4be3-93d6-6cd7a38941b7", "sighting--2c3c41b6-91ee-4cba-a818-2a24a2fcd041", "sighting--6e2e7280-c202-4fd8-b4a8-4f910dc37bde", "sighting--bd9d881e-35e3-48f5-8f76-b72dfd183803", "sighting--fb005217-2698-4e9b-a6fb-792dc4c6cf67", "sighting--c39040d9-5afb-4a02-bb36-82ee2aa387f1", "sighting--38213acf-119c-4394-94ed-ede067048ed8", "sighting--e69e1e05-db3a-4b06-91fb-d306734c49c5", "sighting--daf0138e-b4f7-4aef-8444-aa2c62f44470", "sighting--ef142a5a-e41a-48af-b306-3d208cf0fe06", "sighting--1413c774-3e64-4281-bb60-af3bafb65801", "sighting--a98fb182-8219-4e12-98da-6212ac80cf19", "sighting--ba549a17-ed36-4180-9152-33131cabcd20", "sighting--9b20bfa3-c542-4302-8060-1644f95ea0c0", "sighting--520d746a-bd1d-4930-894d-764bad8be6dc", "sighting--b629b515-8138-463e-8582-8f24c7a62667", "sighting--eeeb12a4-9ada-4e0b-9ce1-a61870f40bde", "sighting--ef3c397e-9fbe-4282-bd14-c50a03c9e5fe", "sighting--2d9e48e1-f754-43fd-bfc0-c421ef86354e", "sighting--92dded40-6f5f-41bd-b2e1-205add41d9f5", "sighting--38de586b-1862-4ad2-a0b0-9647d5c69d24", "sighting--6f14f9a1-fe1e-4913-956a-122176891e05", "sighting--5e2c3542-b58b-47a5-a8f4-fc7405abf4ec", "sighting--1766d228-2347-413c-a334-7a227dfd4b0a", "sighting--3a9abac6-62af-46dd-b61e-3da9ad055d3c", "sighting--ba69cebe-1dbe-4df2-a385-1ba7133e0aed", "sighting--8734cc49-c9c5-4c4d-8afc-09b1e43a0c32", "sighting--369af9b2-66d7-4d51-8d4e-a9023785835a", "sighting--310609cd-a79f-4444-ba41-fd651b0cd4f5", "sighting--cc934244-4546-48e5-8665-ddfe449b7441", "sighting--1e87feba-7f03-40c5-bb25-1712cc4d197c", "sighting--ecde9f4a-8f3e-4b5d-bedc-80fc8313bbeb", "sighting--38fff640-fa88-477c-afb9-c886a93f1196", "sighting--2c08e4c6-8414-45b3-a507-d458c4ae4142", "sighting--f841809a-c9d2-4862-89b0-e58341d85c21", "sighting--3ceec07d-818b-4ac9-b079-819405c5a6d9", "sighting--cab42935-c42e-44d1-9ca8-4df32c26d1e2", "sighting--78efa9d3-7fff-4233-8a95-e7ff3e981703", "sighting--1cfda43b-5e75-46ae-b36a-6def9ecfc414", "sighting--fa6ae332-9a27-48b2-bc68-ab1a8aa7bdb0", "sighting--11bea7ec-da74-4a23-9dbd-749f5fb52e87", "sighting--1609cf56-4204-4ef8-b875-488553819a34", "sighting--4fc5af86-c86f-4537-8ee2-a198ddc8678b", "sighting--cd63ad46-e9fb-483e-adaa-40a79525a3b4", "sighting--921d6a35-d1fa-4ca4-bbe6-d861356aea86", "sighting--0ad0df8f-7288-45ef-8ee7-57dc6ead6472", "sighting--8d695f46-ab9c-4e54-a151-aea66238f8ad", "sighting--9fde0d3b-bef7-413a-b486-d3faa594add5", "sighting--f05c6325-3943-4065-9623-48e12e024379", "sighting--fe59218f-4ce7-4d4a-a1b2-02b1957e23c4", "sighting--da9faf20-d3d9-4b41-9017-e67f9d1f9610", "sighting--8a22d4b4-ce84-4f09-8ac5-b348bdafd9cf", "sighting--d66b3d68-e7c5-419c-8dcb-562f52402c34", "sighting--b8172c60-54f0-4cdc-a455-81b652688b81", "sighting--4538dbc8-d39b-4fc9-a27d-7aa795622f21", "sighting--38b93a26-ce20-4668-96ee-ac04fe3fecb6", "sighting--e62a7b06-ae8f-4a49-8a45-79f3b05ded1e", "sighting--800318dc-3d05-4358-8c00-e02274ccc672", "sighting--3a3b4e77-da1f-4de4-b2d0-7a5c7ed5945c", "sighting--c1ae9bd2-2286-4092-a89d-42932a1da5fd", "sighting--98c29ff6-9984-442f-b568-767ff0c09a01", "sighting--98e92390-9900-4847-bde0-134262bc865a", "sighting--738265ab-c4eb-459a-9b28-b01b1264ac30", "sighting--f1e91a9f-e4ee-48d5-8242-649f696b4e4f", "sighting--775c082d-afd9-4801-8136-428f6fcb3bb4", "sighting--a15a09ec-520d-44b1-909c-157639aa92b4", "sighting--08e47dd2-28bb-442c-b3a2-5c987df48ea2", "sighting--556adad8-d26f-4b62-89f4-07ccebb4876c", "sighting--1afe9703-f4ca-4ecd-abd7-852911ee3a63", "sighting--5bb02527-29bf-4a7e-8e07-8dcecf04933f", "sighting--9ce1cfe7-10ca-43bb-aa13-79b4138af294", "sighting--f3d10c91-6595-4fd4-894a-f1d648bb57c2", "sighting--e5338662-6928-4b7f-89ea-f35cbe5706b5", "sighting--9e9b09bc-ee4a-4d78-b2fc-a8a927040114", "sighting--45d0944c-686f-4908-bb75-5fc8390ef735", "sighting--b36e347b-8e0a-4aab-8367-e37db5cf24c9", "sighting--59aee62a-39c0-497a-844b-ab1e24267f12", "sighting--c19bbeae-e36c-410b-ad05-211e53bb6e48", "sighting--d2ba6c74-d485-4e4b-95c1-10319a556171", "sighting--04896390-0f0b-4531-8e57-4eb5dd49d628", "sighting--630cc02f-1a88-42ea-bf75-40a82e1a1b44", "sighting--b1a1b886-a803-4be4-a0b4-5cae54429596", "sighting--977a0946-bea4-43b3-9334-95837e94421e", "sighting--8650d2af-51b8-4c05-ad57-9f0fc265a99a", "sighting--899e49eb-5756-46f6-9207-7847ee7508c2", "sighting--14f3fa33-d16a-4bfe-ad4f-4b9d6d697246", "sighting--c7335960-e705-49fc-8972-d0fb275c24f5", "sighting--aa5c3684-28d2-48f7-950d-2ceaf42c4f66", "sighting--1e15aeee-a933-4dfd-a0d6-1179b3dfb0de", "sighting--211bf208-9745-410c-a237-1f94447db930", "sighting--bad7ece3-f810-4bd4-877e-b01292120050", "sighting--7117c815-26ae-46cf-a5f7-db83a6b4dc40", "sighting--c9ba7c62-7935-482b-ba08-525363546b87", "sighting--0a7c84d1-853f-4ea9-aa07-fc847eae03cb", "sighting--598ebb42-cbef-4187-a4d2-8d150ab6a0d6", "sighting--c88f6394-3d4e-4e58-bc1d-902f0d73e27c", "sighting--3d7dc213-b5de-4608-8dc8-c027a179d2e3", "sighting--68671e23-5576-4816-95bb-6966c3f3746a", "sighting--d1328d18-0986-456d-b683-6ab3def436eb", "sighting--d2eb454f-931f-4a5b-afaf-323e80f175d3", "sighting--2303cdc2-9300-437f-8a18-c1e55569ea12", "sighting--18437290-d979-40f2-a379-673dbbc86e7d", "sighting--7035a5a3-98a1-449d-bef5-ea9215aa2d56", "sighting--4b0aab72-d14b-4c9d-965a-974856b36533", "sighting--82c04840-0d09-4772-bd39-67806b5e5e41", "sighting--095c3886-5a2f-4175-854e-6b3ffe8305c6", "sighting--7dcb8482-519c-4c38-87a8-8a4fb9c76dcb", "sighting--875eb789-8f31-4e5c-9aa6-94d9e9966846", "sighting--742cf09f-78b9-4fc4-b5dd-57895d866a95", "sighting--881bd23f-b04a-4e45-944f-e589e01fe5e3", "sighting--8afa16ba-cb0d-4f2f-b38e-6e25eaa4fb68", "sighting--498ff087-f0e5-443e-97b2-53413ddb7b77", "sighting--49895643-f004-46b0-9957-f0b31df7f7b4", "sighting--f42401c2-af1d-4467-8014-8a4f43435393", "sighting--cc2435d2-7dc2-416c-879c-49879bc5656a", "sighting--a2013dad-c7c4-46c7-9e40-bad0552e8dc7", "sighting--1701427a-2c48-45f8-b835-17340665eba6", "sighting--f1fd2dd5-67e3-49f1-b426-0392c7bb9f10", "sighting--347b8755-9510-4053-befc-994b3fe552a6", "sighting--cd00dde4-1acd-4b2b-a50c-b98cca37e870", "sighting--8dad0366-5f42-47a9-bb89-5951ae8f8959", "sighting--81889ae0-072b-4beb-aa94-f207c5500356", "sighting--7a9b7e71-0f4e-47e6-834a-0257e690425a", "sighting--3a427525-cf5b-4243-999f-62a7c3c79fae", "sighting--3a27ac00-667d-493f-9df7-48ea5f1360ff", "sighting--dd84c5e9-f6b5-4849-9ae8-07dd9b07e96e", "sighting--b0c385e2-3c51-432d-8c92-b99fbaf38d1a", "sighting--22b75b9d-769e-4419-afbc-d7090226a5d2", "sighting--40237523-3a47-46fe-b53b-6539897592f1", "sighting--01c6b5df-1125-4aeb-9884-7114e019bafe", "sighting--43e5eacf-f196-4a05-bc04-cc34c2ffec22", "sighting--313a2c7d-5b41-463a-a194-9bf14ba9325c", "sighting--94ebffba-95b4-473e-904a-6ae125d9df75", "sighting--10cafa4d-7b99-4be5-b29a-2549da915a8a", "sighting--63c2d0af-224b-43b3-884b-7a0081a36d1a", "sighting--e95a2f79-e552-444c-b1ea-67cd42e17ec5", "sighting--0ef380e1-c16b-4bf7-be07-2bc9adb8e5c9", "sighting--4c081a38-6a54-480e-8b23-3590be2ba682", "sighting--52f18e75-fb66-4280-870e-8bb5d3ee9ab4", "sighting--cb9801ae-98d9-49f3-8379-65449472444f", "sighting--7ba10070-f6ef-4290-9634-8f373c948c49", "sighting--51892e97-d863-4332-a47e-19424816cfcc", "sighting--fce0b12e-050e-4d9f-9fe1-603590b9c1a3", "sighting--9b767ea2-b6a1-4530-a8f2-2a952c7bfc3b", "sighting--520ab6bc-c436-4d4a-ada6-304ea1bc29c3", "sighting--cfffefcc-89eb-4304-8eaa-32801a8af2ed", "sighting--f2266dee-6f9a-4a44-b311-81a0315f136e", "sighting--43f7b4af-e3e5-4fe4-92af-522bb5806107", "sighting--742a147a-8142-4ce2-a69f-43c683bfed7e", "sighting--bcf7be78-3132-4db2-adc0-3c7552b183ff", "sighting--fadcf1a2-b98f-4c9d-bdef-81e525bbf52b", "sighting--37081743-7065-4066-8290-0b5692e2929c", "sighting--29c9539c-23fa-4756-a4d0-88aecdc28f93", "sighting--89a5be6c-89cf-4e78-8a68-a3a5819e4002", "sighting--4ad38199-056a-4113-8dd0-7c3f65bd3001", "sighting--6c9d8dbd-1230-494b-a80a-4460cf10171c", "sighting--f213f4ab-ef6e-4c5d-a714-f6473f6654cb", "sighting--fac61a46-bf3a-4932-8e4c-9ec8528eb76f", "sighting--c73a8af4-24b6-4bf8-a4d8-f3427fc7d834", "sighting--79a35c74-8f8a-4c69-b4b4-b01e8184f2e3", "sighting--1063d262-6a7f-4f78-9757-56db7beee926", "sighting--3144aa91-0784-47f9-a444-28634ad568ae", "sighting--2257f74a-4289-4bc5-8c8d-9649ac144567", "sighting--adf7a883-5a24-46a9-b8cf-41adbbcd080d", "sighting--cde24120-4c69-4f62-a476-e736834d99ad", "sighting--9a76e930-2112-466f-b0af-b962c3ff3b6c", "sighting--0c50e965-5a24-4336-80ad-abb9c9030efc", "sighting--2471a336-0936-44f6-83f3-4a9b80a7accb", "sighting--7a8543a4-7dd2-4857-ab9f-13db1b4d5e5a", "sighting--ce5da09b-3caf-455a-ad34-2b03a0df4221", "sighting--8091cc8e-618a-45d0-9e2e-1c8a4f283e28", "sighting--627fd687-d975-4752-b25e-e6291b0302c0", "sighting--afcf55fb-ed4a-48e5-8d95-1ba35d750626", "sighting--61295c55-8c65-46fe-8c75-1d2ea2bf1f63", "sighting--d6616c46-c522-4bf6-84a9-19d7dea357cc", "sighting--a9384c74-0de5-4799-bb21-54ae63b48109", "sighting--d81059e2-c26d-4a12-b6f2-e6bdf4c68ba3", "sighting--f39b1303-a9db-4af0-8eee-d4473723d3ce", "sighting--ac3632bb-7b23-4cfb-8a23-b21d4fe675cb", "sighting--d87bd1bb-9d18-4c9f-bb1c-b7fa397d0876", "sighting--7cf116e1-9a2d-4850-8699-14599a5f292b", "sighting--badbf2e1-85b2-4d75-a8ea-eb886765bca6", "sighting--a4cb5d24-df14-4b57-839c-af455cac766f", "sighting--3157afc2-f3f5-4526-8f0a-f54993add62d", "sighting--de9565e0-7942-4e1a-b41b-5eded7a603b1", "sighting--c059f9d2-8cc6-4fe1-9e8e-5839575ddaea", "sighting--c101d7f1-be62-467b-b467-979be0e94dfb", "sighting--2b3a8da7-3221-44e5-96e7-0ca4964eed06", "sighting--384fd4ba-e30f-4749-8201-aac775d238ca", "sighting--dc262963-705b-47b3-b39b-d16c59385daf", "sighting--394a29d0-8463-429e-a333-5224d388d046", "sighting--43dfdf58-7b88-4b0c-b8b7-b9890f05c8e0", "sighting--afe5224f-740e-4063-9b2c-c01f74a4f52e", "sighting--f257c473-bc57-45a7-af98-ba56130e6ce0", "sighting--93cd8434-4a4b-4519-9cfd-ff016bb14574", "sighting--9e418c11-8d65-4a61-8a17-d01bf92c8e48", "sighting--d7bc566d-cfe6-4104-91ae-11e16f7e64dc", "sighting--f751e7ef-acbf-4b10-9ac6-b6e9f2d7935b", "sighting--6c7f720d-1020-48c7-827e-a451adaad304", "sighting--8990424d-cd0d-4d47-91c8-b84d7cc4fc1e", "sighting--835760b4-ffbd-4357-ac3d-4091c33799f8", "sighting--f166ca05-136d-418b-bdb9-09d919bf0cd3", "sighting--48899f4d-fbae-483c-9dfa-298d8be2d208", "sighting--e998140a-0060-45d8-bc53-70454ebe6511", "sighting--f2e4c3f5-ea28-449b-899b-fd4b6a00e194", "sighting--7d3a394f-85f0-4227-9eca-a15079f672e8", "sighting--20e6ac6d-3f8f-4a70-9613-82be30773584", "sighting--e293f609-4df8-4c04-91e3-f649bc8575b6", "sighting--786f4be3-2627-41b1-b03a-95a21c7b7a56", "sighting--5fb07f6b-99b3-423f-91ac-79bc39e18075", "sighting--d1c80190-bed2-4c98-8626-52e3fc41cdbc", "sighting--1bc44f48-5530-442b-a795-9e0c4d5aa4df", "sighting--634a4da1-f6be-4268-ab0d-826fcf9e3c01", "sighting--c82fe847-13c1-47fe-b452-9091cacb3af0", "sighting--6b479dbb-02b8-4d99-98ad-06f79722148c", "sighting--ebcabead-2f3d-4d36-a4bb-be465377e438", "sighting--2be61e64-dd2a-4ee4-8bd6-5d98e7179cd0", "sighting--64878eb1-b493-47f2-b12f-dc9007eaad88", "sighting--2e5a5aff-3c3a-4de7-811a-6fb4f3862d9d", "sighting--acf20838-a123-493b-a3e9-dd6dce47862b", "sighting--404d4a11-07e2-447d-80ed-4d526d06c911", "sighting--e5f354ff-f5da-4bcc-b600-2c75ec3852ba", "sighting--8a9023f0-2b59-4019-97d7-9d57b13fc0f7", "sighting--308aae10-cc42-4a4b-9c9c-86ee6a6a99ee", "sighting--df38692b-1a93-474d-990f-54a0688f93f4", "sighting--5beb4cbc-de6b-4f05-bc6e-e7d3df16f695", "sighting--f688b705-424f-49b3-b52f-ef34b7e3a3ce", "sighting--88947b15-6a6c-45c4-8cb6-5e4c73dae865", "sighting--50fac6db-0abd-4489-a42c-394fe6d15b01", "sighting--ee4facae-8fae-4b10-81c7-ec2f83f26781", "sighting--5fa5086e-65bd-4b8f-9452-b750e57db51e", "sighting--b5e9c789-f2c2-43a9-b181-9cd035d4adfb", "sighting--49926fcf-a9a5-4eb7-b3c3-14e0d61cb77d", "sighting--18cb95a4-295e-4680-9bf8-c1226c3e236d", "sighting--6c0a9926-fbe1-427f-b22c-655e4dd368a3", "sighting--887e2f66-0ab8-42ae-b1a9-ec1b87905cda", "sighting--6efb4996-a506-4c04-9895-70b2756abf48", "sighting--7b560359-07ba-4855-be29-99c4cbcc9fbc", "sighting--452c7098-8de4-4e07-b340-4e58b36a904b", "sighting--d7a086e9-38fc-4798-9fa2-57679be772cb", "sighting--469a0b1f-a64c-4939-b131-9a1e7268058d", "sighting--4bb4bbf1-a7e8-4eb8-9e9b-a66a3b8ebdaf", "sighting--205ee68d-aa83-4e21-8afd-ed0433408cc1", "sighting--34a27dbb-ff04-434a-a609-e43611518037", "sighting--d6a4462b-3c11-4971-9f12-c3ba31597b9d", "sighting--6bd9f88a-03f7-4751-b7a1-5ffb8a37b565", "sighting--c9acbc45-54d2-4c66-8eeb-87699f47a768", "sighting--bb2b3c12-eb8a-4f9b-9607-bd839383d1b4", "sighting--1fd95aa5-aa1d-4d1e-aed5-16e461f1a42b", "sighting--2b68a3f9-5b35-4460-bb9e-b24580fb35ea", "sighting--e23e77e7-1e02-4cfa-bf14-c6336dbc41d0", "sighting--2735ac87-6dc6-420a-8da6-87f8beadea91", "sighting--d99d7733-8552-410e-ad9b-d95204f362b3", "sighting--ba56a2d4-805b-4dcc-95dc-ea47b187cfe6", "sighting--99ede437-c783-4b64-b4a3-1fe5b0cde002", "sighting--5f792dda-f813-4d43-ad79-96b7678fcd49", "sighting--a655ac10-401b-4792-b846-8d923560bf94", "sighting--73312df0-a43b-4913-bba9-f0fe842d317d", "sighting--25c081e6-b1eb-41d8-85ae-f33c626b4579", "sighting--313b28b2-cfe6-4612-9f5f-e5db9e41bbfb", "sighting--a5679eef-3fd7-4f40-a066-eb1d0800ac78", "sighting--0705e0b5-2423-4e0c-b5b2-d17ef36399db", "sighting--732702dd-9b5f-4459-aa37-484bd1f1d673", "sighting--c75dd8d4-e642-4a24-8a39-e06dedee30cc", "sighting--d8570f9a-1d2e-49e4-b83d-9474d103778a", "sighting--9b0eae7a-ea1a-4acc-a0d7-72475d71812c", "sighting--b441956e-ff64-41ee-a24f-c0d396a03a37", "sighting--4eec9aaa-f8ec-4f18-8a49-7cdb0e16aee2", "sighting--19073395-e5eb-451b-990c-d8dc34812d8d", "sighting--006704c6-8d12-4a95-b35a-77c11a9c2c29", "sighting--fd1624d8-1575-4bff-be08-9a1440315ccb", "sighting--c24a20cd-f2a5-4128-86f5-c8c466099952", "sighting--62996e7d-27fe-4975-9bcd-eff1c5b9106d", "sighting--3bb8b964-bd47-4596-abb8-7227f22495b5", "sighting--7e4ab948-8e30-43b3-991a-43adffc2a684", "sighting--32bbacad-1c36-4fd2-ad86-14656815adb7", "sighting--2fc8e9ae-bb23-4599-99b8-9391641f1a11", "sighting--ced4c6b8-0162-4cae-9ac4-3e8a88d0fbca", "sighting--f8681036-72dc-49be-93d4-4f21c689ffc6", "sighting--7b00bbb1-1cc1-4b7f-ba34-e410b0421007", "sighting--a381a1cc-fa8b-44af-a959-5b1f2d103274", "sighting--909ef6cd-034c-4194-ab96-b56341e3c998", "sighting--46609542-aa9a-4fbf-99a2-79674958e366", "sighting--79561035-e5b3-4452-9370-106038111dc4", "sighting--21535c1d-680f-4c0e-86df-63c6741bc69c", "sighting--f1aef5aa-1606-4708-ad16-7dd7ffb467b7", "sighting--533e756b-73ab-497e-ae3c-1ceeaa350223", "sighting--7d1bccd1-3a59-45ed-8776-a6fdc15ccd4d", "sighting--1288b2fb-789e-4999-af98-94035cfbc4af", "sighting--52706b08-7844-4472-95b6-2d267f9424dc", "sighting--9bb25781-3d56-4358-b810-fd5ab786be41", "sighting--775113b8-5144-46a8-8aca-e10cfaaee53d", "sighting--8a451cc7-2692-4bae-bcaa-e2c01a549cc7", "sighting--983fd7fb-255c-46db-bd74-ba26e1a5dbc9", "sighting--82151025-dbcf-4f23-825d-0f4fb8283881", "sighting--959808b1-f87e-41de-8049-be7175847831", "sighting--ff8ff242-62a4-4d8b-8d31-d41876d628a2", "sighting--fca736f3-c2f3-4295-95a4-c320a4c5812e", "sighting--c2edbc9e-bd6a-4c4a-97a4-6659b813b3ba", "sighting--5459f8c7-4638-44cf-a3ac-c6c14448e278", "sighting--8b41200c-b33e-472e-89ae-62327b4860c8", "sighting--3299e780-6427-4c19-a7ec-a7cf326c2b1d", "sighting--18b4dd30-4dbd-48da-83f8-40ca72c615dc", "sighting--89d16b86-2164-402c-9016-09e7b1a06981", "sighting--a93d6ad4-73a0-4509-994b-bc9c565d91fc", "sighting--981c04de-8319-49d3-80ea-949071653890", "sighting--1f9887b0-59ee-478c-a57a-4155eedc0c2f", "sighting--17fe4de8-a533-4ad7-a55f-f88c56400c62", "sighting--03272ed7-5e0f-4a65-a4c1-ffcf75706835", "sighting--6f35e4d8-e188-4f4f-bc09-100938006a43", "sighting--c8bbc425-d0a9-4e6b-ae0f-6f7d30e70928", "sighting--3e361049-4a8a-4fce-871b-c77b31e42db9", "sighting--f2d67595-cdbc-4e40-86e1-12a73ea944bd", "sighting--ea53610e-9e8a-4150-87ba-8e37907cd380", "sighting--9846b886-fe22-4258-8432-14ed1809b7c2", "sighting--b75f3834-d489-4522-9ec1-554572c74e75", "sighting--d2cc6c88-70b9-4c95-8efb-52759f10a1b6", "sighting--1c9e1867-5eeb-48b8-9142-fba85d46e1cc", "sighting--4aeb90ed-f414-4b3c-92df-68e499e21772", "sighting--1517694e-aeb6-4acb-8203-4a6673ef69e3", "sighting--e7305674-2d23-4fcf-8160-06effe56e6fb", "sighting--fad65c37-c291-4ef3-a117-c6f19ee715ec", "sighting--ff2f8b36-052d-4d98-90d2-565f21867bc3", "sighting--028cb939-8fea-47de-a7a3-2fdfa188f992", "sighting--0ec58ef5-ebc5-4663-9593-48fc330e35d2", "sighting--647d631c-7838-4c2f-93b2-1881bbdfc99e", "sighting--b164dad9-026f-4819-ad56-b213b7f9c067", "sighting--46fe27bf-e94e-42da-9d19-cc5b7c98e93d", "sighting--0928cb62-0204-4cb5-8399-c62afbf8a6ec", "sighting--fd800979-2ce8-4101-8aad-6e5caefa7566", "sighting--edfa1e76-b2e5-46a5-b514-4814af9784af", "sighting--9c154e2e-ef8f-4ead-a14e-8036ac8a04c1", "sighting--773582a9-91b9-4a38-a65f-103b033dcd2a", "sighting--8f1cc241-c74e-43df-b437-78c03969266d", "sighting--8f863cbf-ce8d-4200-b879-f1bfe8d1f86b", "sighting--860ef6a7-0c35-47ea-a9e4-2de43b04e6bc", "sighting--74db10cb-9602-4283-b42f-cdf799683c01", "sighting--7bee37b6-a026-41b6-aec3-d2ffa03b55e5", "sighting--76f7a2f1-e435-4c3b-b4f5-4aaf1f61cf84", "sighting--fdd037dc-9230-45ad-a0ec-0853fb4f9b88", "sighting--9597a789-5376-4995-9308-9785963210a0", "sighting--28c9235a-d15c-4f29-aaf0-bae543760111", "sighting--71e3a979-877e-49c6-ae42-8a54e4945581", "sighting--f2d2df79-7a9b-45bc-882a-7f11f6be9f23", "sighting--7182d71a-6264-4375-8c6f-a2908ce31eab", "sighting--8c9c45bb-781f-4a65-8498-36238749759c", "sighting--c3e0e675-4328-4e72-9612-4ff6fadcb242", "sighting--b521632f-1bc8-4873-84af-c48163b161f4", "sighting--dc339e75-d785-4a85-858b-76ff5a9cb208", "sighting--2da83f4c-fb6b-4a83-966d-4cd6cf488f82", "sighting--1e420ab1-d34f-4a89-bb07-44de3e2ac3f0", "sighting--bd010282-564f-4cb7-af3b-922b843f2b44", "sighting--aba3f449-22bf-4cc9-b642-50790ccdebf8", "sighting--8e9a62c6-e8d1-4096-a90e-9d3c854b1d33", "sighting--2dbda078-0dca-4db0-abf0-c58782a79118", "sighting--6241cc80-793b-4116-89d3-544984b86710", "sighting--32d5cf05-e36d-40c2-8831-3ab37bd2bae2", "sighting--d817c7bd-3370-41a9-be77-bb8631e04395", "sighting--9ff1446b-b3a8-4512-b871-4ddf61014199", "sighting--0c15453f-479a-498f-b159-062e1e880fa3", "sighting--a26b56ea-0ec8-4c27-8645-4f590a61503b", "sighting--2e1b856e-1ef4-4218-84f9-1c953ca154dd", "sighting--82508b4a-3a0b-4d62-b411-4c6ae8d22df6", "sighting--5e0b5c1a-0447-4046-9247-e43e93785c36", "sighting--870ee70e-c76f-44c5-a770-81ce385b6dea", "sighting--3b4d4a54-46d2-4283-a0c1-83dd91262a10", "sighting--9c6ecab6-652d-4618-8565-448462912bd5", "sighting--6086554c-119b-44de-ae42-9d1c80953374", "sighting--a14e4608-11db-4f36-998a-aacc22474181", "sighting--74a72c2b-524d-4980-84bf-9912bf55f3f8", "sighting--0056e5d6-beba-49eb-b767-709480007111", "sighting--d299e1fc-2ee0-4a32-9f7b-6f93b4b3b208", "sighting--76b31794-c926-41e6-b82f-4be53a19cc2e", "sighting--316c3941-60c2-4f35-92ed-e048bb311b4a", "sighting--974cbb51-d2e0-49eb-9602-02645b1f9a21", "sighting--25cf4f7d-b6f1-47e1-a3bb-2005101b41df", "sighting--5f5d6501-9bcc-4a20-83b3-5a8175db2dfc", "sighting--d288379c-4716-4646-a5d4-45547095be00", "sighting--88b59acd-e347-419c-8f73-e8b2dbd2167a", "sighting--443d4c0e-d0bb-44ca-a580-fff608995785", "sighting--17299c54-ec09-45ae-9dde-714bbb555dc3", "sighting--8dab0839-1b79-4884-835f-9321d955b032", "sighting--b387453d-4847-4ea8-8561-4e446cfbdc12", "sighting--fd754bc7-d55c-49fe-8a3b-d2347de6fc4c", "sighting--7d5526b9-8101-4d4e-a65c-8370c14eeace", "sighting--4add9f29-9a4a-4609-931c-1468d051aeb3", "sighting--d867132e-d30b-42b0-9b8b-bf7d92eab409", "sighting--ae55ddb0-64fc-48fa-9964-0ffe150b920c", "sighting--74921627-663e-4657-8e08-c303ec4d0795", "sighting--c7ada70a-cd8c-4b3c-b7e4-553bc6c7627a", "sighting--fab6be0e-8909-44c1-ac7d-1ad30680dc70", "sighting--56718ba7-48f2-4bf0-8de5-c25db475e9c9", "sighting--bced155b-924d-41de-a657-c6dbebd94f4c", "sighting--0fc58643-ecea-4979-b72b-b04e8443f0a6", "sighting--a51b0f59-87ac-45a5-b96a-bcb230ed7a61", "sighting--a44d701c-b674-49fe-8bbd-fb3bb63133e6", "sighting--b98bc7d9-f0f6-41f5-ab10-28693bae843c", "sighting--f999d884-1d15-4a3f-aa28-9d832af50f1d", "sighting--9d44aba7-99fc-4cbb-a3a5-46bf0dad8a0a", "sighting--e43a77b4-b012-4221-8723-4a3094aa6e9d", "sighting--b769367c-8091-40d3-85e8-9cf32e842738", "sighting--6587457b-4004-4074-aa2b-021bc70e47ac", "sighting--22b1158a-12dc-4f05-910f-e9f9bea7e9b0", "sighting--4bd1ef9e-9cac-4153-848c-6b640ef6d018", "sighting--46f80269-0d5e-46ec-9fca-209606b704e6", "sighting--2f94eef4-c070-4bc5-a515-505b520aea03", "sighting--edb59891-3690-4c7e-a410-c2865546886d", "sighting--609dedee-5f86-4f4c-95f8-bbafff0e7f9b", "sighting--dc6709b4-9c1f-4e62-955b-57372e9d6627", "sighting--d04bc343-c14c-4327-9638-1bbba94434ed", "sighting--8004c974-04c5-4e5c-a788-657d0cf1ce36", "sighting--6378780c-298f-4255-b250-530f1837dd26", "sighting--727d0dd6-a24d-408f-acf6-cafc6d66fc78", "sighting--691bfdea-14f5-4ba3-92cc-d1e0b03b61c1", "sighting--8a67a798-acbc-4521-99a6-497c4fece95c", "sighting--03fed7bf-c866-4866-b8a4-87c87c56419e", "sighting--b6552e52-f514-4070-a9da-f54f1e7b2acb", "sighting--c48277bd-739e-43a2-9ad2-1c71cd877239", "sighting--38aaff10-bd38-4dd7-8cde-0ab64339c558", "sighting--d6161d97-cb15-4426-a5ff-42906214f796", "sighting--b5c37247-18b3-49df-9c7e-d1f4d3e13958", "sighting--144f589d-4f3c-476b-845c-28838d9ccc3d", "sighting--0ebdf8a0-f134-44b2-b4d2-f48a62f9cd24", "sighting--9cb96327-e0f3-43f6-8d4d-8b1220e49561", "sighting--49510e04-7525-4049-bde8-c8aa23fad07d", "sighting--ecc5b7e7-5865-4160-bd7e-ff600df22b85", "sighting--1d1d7f83-8925-48d8-b095-e3d5f2a2588c", "sighting--d74fde74-74f2-4677-a194-17da4bf9e352", "sighting--3f536c06-be38-43d0-934b-928a35274582", "sighting--d6f0b6ef-e4ca-462a-b95c-b546192aafcc", "sighting--c8ef5509-4aef-4815-9280-0ad57994e4b4", "sighting--5a755910-a210-4ff9-86bd-3f64f04e293d", "sighting--2782dab8-ada1-43e3-87e1-08cc0da91a47", "sighting--0712881d-b157-4c8c-9cee-539aa48f7bd0", "sighting--c47b1c86-6c4a-42c0-ad5f-885908cddd2a", "sighting--f367fed9-388f-45e4-9283-0c8528ea2dd5", "sighting--0b1baccb-46eb-4a1e-aad1-a17587158e44", "sighting--2b9856c3-2eac-4471-8748-85d8047651dd", "sighting--47e9c90c-6e4c-461e-afc4-a8e803d0ee9f", "sighting--966a3f47-4107-4bcc-b0e8-4ee0b17cd53a", "sighting--91793e21-4bce-4568-9898-afe6b251d790", "sighting--d6e90206-b859-4115-af67-ae29aa1accfd", "sighting--2906ba1b-ffe9-4378-b334-76af079f439d", "sighting--d812d82f-aeb6-4bca-910f-33a04a5be9b1", "sighting--22cb127e-5d0d-48d5-8b5b-9735788aba2c", "sighting--acbefa29-ad53-4da4-b5b7-3f00553fc5a7", "sighting--f471aceb-3e6f-4a67-b2b3-279577054968", "sighting--18cb9275-bf00-4580-b236-f1c5c6bf9f02", "sighting--e8e9b4b8-247c-4e03-803f-00b432857020", "sighting--85729859-ef05-4801-a7d7-4e18dc35377f", "sighting--6d33eb87-efe1-45ba-b514-702a85373f6e", "sighting--c291fe60-6904-46fe-9c2e-71ec09b6ac89", "sighting--fffa8944-965a-4d08-9e35-ce7d55647075", "sighting--67869e23-3b35-4d89-8ac0-cca133528571", "sighting--87f17028-2141-43d8-9173-61984f322852", "sighting--589c436c-5c52-4a04-959e-e9208ef05bae", "sighting--7cb48c7e-3c9c-414b-90b7-a3052614a72f", "sighting--1719fa4f-2909-48ad-97dd-7870950d6169", "sighting--d6860966-d768-4594-a5ef-50ded9b9866f", "sighting--40db01ca-f974-4554-8891-3d047653866f", "sighting--af8d55bc-5260-41b2-a63f-65a2cddb7148", "sighting--14480613-3908-4868-b87f-75e48438bcc4", "sighting--168e3b91-ae83-4a11-9bed-1c2f7febb76e", "sighting--42a67593-faf3-4fa3-9b63-354219fbd464", "sighting--9d82c7b1-8703-41da-b328-67f7c087e1f8", "sighting--a3964535-f90a-4e5d-9130-7039f7ca0ae4", "sighting--1f21c442-c309-4de8-bdb7-ae2875b260fa", "sighting--ce7a563b-d946-47a3-8517-6eec7b94b6da", "sighting--26bded60-7413-4c60-8192-4a3b57b5d6bb", "sighting--1ae62a51-d652-4586-8fb8-4926eec8130d", "sighting--e44d1be4-88ba-4fa9-b21f-36fed8940acd", "sighting--dc5a8e83-f8f8-4532-be42-048e253e45f4", "sighting--463530f0-43b5-42a4-9518-f2dae40926af", "sighting--f54dd092-9c59-4928-bfc7-1f43aed070dd", "sighting--c1561286-7cd5-455a-a714-36c2d6df0d7a", "sighting--9b17a434-f599-439e-b163-ef6703f4975c", "sighting--6a44800f-b7ac-466a-a76d-dae27c8db5bd", "sighting--81f42adc-7206-4f7a-b49b-2f9f259e4b03", "sighting--495cb173-9896-47cd-ab06-d1b9294d7281", "sighting--a0e1d89a-9b5a-4423-83a1-37daff99da8e", "sighting--e8adbf37-55dc-4664-b553-06825a94ec7c", "sighting--48d631fd-b7b3-448f-ab00-0749b2e497e2", "sighting--41b207e4-0927-4bac-8f57-43f7af3cf6e1", "sighting--7297b30b-1949-412e-8b8d-7096b913aba8", "sighting--06ea83c7-3cf8-410f-88f5-e10206c4f88c", "sighting--22b6e218-008d-47df-8679-803a285cecb8", "sighting--51f59025-aa70-49b9-8fe9-a393394971ca", "sighting--676d5d49-c978-482a-b9a4-dac13112e293", "sighting--de945abf-7c5b-4bbd-8145-4b8e311d4d89", "sighting--9cf559e5-4d7d-4ee0-812c-0b1f149586bb", "sighting--7ed0df51-c00a-4487-9f08-8d8287101a3c", "sighting--fedf202a-3fd5-48c0-8cd6-c8f8f5713eb7", "sighting--1b64018a-d7a7-4fb7-be2b-4a0c6ddb3b0a", "sighting--192b0c68-66ca-46f6-9994-9268a3670902", "sighting--2ddae9e1-c272-46e5-b2b4-ffc6378ea7f6", "sighting--722e6529-5bb7-48a0-a4f7-99a1a2108d56", "sighting--1ebc4695-c184-4e0f-a4bb-2854a95a6b74", "sighting--4d45ccee-3eb0-4a91-b35e-3af1e579cc55", "sighting--96cdc9d7-38bf-47ac-bf9a-7679cb7a0e95", "sighting--e9e0695d-b437-4c6d-8458-9dced2e4e1a8", "sighting--41d9b3c3-783a-4a7e-956b-c3fb464d5140", "sighting--7a57cb32-084f-429d-b6cf-5b764a6d1036", "sighting--c4d8adf2-d092-4e45-9586-f144f24a8b80", "sighting--e7557f07-0b41-4c78-83fe-6cb2824423a9", "sighting--33bf5f87-96da-4d5b-945f-fc09d7c48323", "sighting--d1b66719-74c2-4986-9ed6-c2a0445ca4e6", "sighting--730e7018-eaf7-4215-8f6f-874ba6b4e5bc", "sighting--2ca9f5ca-1185-419d-be8b-a78a5e57ab11", "sighting--cfac44de-0e7e-4d9c-b892-098d34eaf6fe", "sighting--5ceb996c-8a11-4ed3-8416-af0ff6e06c9e", "sighting--216e54b6-5a23-46d1-9d95-f3c815bbbda7", "sighting--2ce893e0-1864-4481-a318-d892f56c3887", "sighting--81242e8b-cd2b-42d8-b73d-147a07fb73a3", "sighting--7906fba2-f9ee-42b0-b079-326bbcc73866", "sighting--be744801-ec42-446b-8511-f64ac543c5e2", "sighting--0622b98e-f2b2-4196-b5be-55b02a8e5dc9", "sighting--f88ed0fd-6313-4eed-a6d2-980362b8cb31", "sighting--d95a5137-d70d-4c72-9865-0678f3a1d3e5", "sighting--622a3ab1-f05f-43a5-bdfd-ca6e70f9b051", "sighting--769ec1e8-2311-49a2-940b-57b7e8ae24bf", "sighting--9e7b0a24-3ec6-400d-b018-134ce45e5be7", "sighting--33104c2a-f3bf-4976-b832-2c875adf5dc8", "sighting--0f593957-892c-4312-85e8-c61661a2cae6", "sighting--cc964682-07b0-4948-b6e4-2f7e203ac896", "sighting--8dbcd29d-043f-4e69-8e62-972114d677d2", "sighting--bb411d33-9fcc-40d9-98de-47d2bfe6cb36", "sighting--5f68d7a9-bb85-49d5-9696-5ffe2279050a", "sighting--f3e9bf55-eded-40dc-98e9-e8782960ad94", "sighting--3fb27374-be03-4bd8-b03b-19048ccc36af", "sighting--749fa717-a781-4f43-8de0-8101a3a9bcd8", "sighting--b8e2a30e-a030-4eb3-ab2d-892c00c92a9d", "sighting--e91b4177-b97f-4a63-a919-bb3943026df0", "sighting--5d4e16c9-d140-45a0-880a-4f63e96db58a", "sighting--1079b18b-57ef-4452-a9e7-0702765f1c2a", "sighting--2d2b2f1f-5d02-4cfc-a5c3-836df686ad1b", "sighting--2da677a1-b753-4d8a-a589-4aee86681ab9", "sighting--166788b3-f919-41e1-8855-309da9338627", "sighting--0ffdf702-b99a-4951-af9e-dfaa8ed2a11f", "sighting--70f42151-1280-44c9-a002-d6eb682bc71c", "sighting--0eab9114-ae2f-4e1d-8891-bdcaddb50f0b", "sighting--814f5713-e1e1-4ad1-b0d0-82bb9ed7bf32", "sighting--9d99fabc-66d7-40c7-9cda-7aed4b6064bb", "sighting--61a8b4d0-a272-4040-9e80-be547c7c0efb", "sighting--79412b0b-dcff-4599-aeb7-3e282d09d93e", "sighting--8255a2a7-09fc-4d91-822d-4c7c00ac43f7", "sighting--4626a944-acc2-43fb-a049-2343b24cd0ff", "sighting--3d51918a-a12a-431f-b4e8-a98bd1b42904", "sighting--4c3c0696-fddf-4cc0-b4cf-de620eae0b72", "sighting--22a14c0e-728d-4215-aa9d-de23ade48885", "sighting--d0aecb9f-befc-4645-a43a-c6a76c7a4a04", "sighting--bcfe3ace-3b38-4e59-a2b5-e481e8667be9", "sighting--8e74c435-5dce-482b-afd1-7460f1e14a18", "sighting--fc279464-2d1a-436a-8e37-6ede3342f508", "sighting--cec62d8a-31bd-47c6-b3f4-40e81f1f3ed5", "sighting--68a8238a-357f-4cb1-b6e9-835f956aca51", "sighting--bec2ea63-4e81-461a-9cfb-3ac99566e142", "sighting--f16c3d3b-b435-4812-8f3c-ea2fae497ec6", "sighting--5af2adf0-783f-49f6-9836-499ae6c1826c", "sighting--6cba0761-a67b-4b40-8b15-2134ce30324f", "sighting--adb03bf8-5fc1-4b8c-8cfe-6751626184a7", "sighting--0d5bf95f-07e1-4b9f-add5-8378d973ca19", "sighting--26db382e-0c43-4f7b-b876-2e7a0334a30e", "sighting--002b91c2-a11a-47a6-9d4f-21916b18359b", "sighting--0e20c726-d5b3-41b1-8272-1f5d5b6012b6", "sighting--409bb8d9-64d8-4363-897b-c89cd040609c", "sighting--30dbc6ea-81e7-4977-b960-5d35572b89a5", "sighting--27d3d5b6-9871-4567-a5b4-1fc035c3f601", "sighting--54577c96-a22c-44e1-8c0e-c3dfb01c16ed", "sighting--08a98351-71b1-4f2b-b001-622dae7d790a", "sighting--debcf267-5be0-4d70-8002-0f521f52d28e", "sighting--53d8f95c-bba2-4aca-bcae-88a28089f195", "sighting--e4658585-28b5-49fa-92a6-d56c9c9671bc", "sighting--37aafd73-a6de-4231-a025-c4584405a8e4", "sighting--67e8b952-4abe-45f8-bf4a-75043d12566b", "sighting--a9e6b45a-953f-4abc-8705-39edaa4fb17b", "sighting--25897d5e-910e-4350-8d5e-1f2c3848a0c6", "sighting--9e115800-5092-4e6c-afbe-ccb0a5e6273f", "sighting--0437d4b5-93a7-4de9-8595-926cb0408950", "sighting--3ced2ebf-89f0-40d8-8b5e-00e1a30229a9", "sighting--f80b83db-2e4e-4444-a80a-a3fa0d9ddeb7", "sighting--b844fae5-11d1-4028-8bc4-fa302a02a9b5", "sighting--d60849c9-8e9a-439e-ae55-8b7cd26bd6b0", "sighting--1a92b314-affd-47e9-a354-39d371026476", "sighting--ad4eb7cd-78c0-477f-b804-4edc82a3ba85", "sighting--aab32ce8-545f-466b-9c70-115d65b32228", "sighting--b5d155e7-f6fa-42ae-b9e2-da7264c7fa47", "sighting--52be0e9f-abdc-48f5-af09-3a7b825dd845", "sighting--b6cc950a-c7b5-4aa2-bcb8-454d35130ee4", "sighting--98312cad-fc92-4e37-bf5f-c727ec8f37d4", "sighting--1c83c70a-9db6-4267-90ba-591688101798", "sighting--df1f2872-4d5b-493c-9037-e4a475f65a06", "sighting--d03ac3b7-c2c5-4cd8-bcf3-f83a706c856a", "sighting--2476c6e6-bf99-4de7-b6a8-9767e8e1dcf8", "sighting--6a56a9eb-ade0-4881-9347-04bdf4073812", "sighting--152099ac-4f89-40f2-b5bd-5b994169014f", "sighting--81470cbe-1d98-441a-a206-0e85d01191e6", "sighting--bc0f0f53-2e1c-44d8-b28c-89346c355583", "sighting--d2a1e193-3b86-49cf-b406-ee5e1b0229f3", "sighting--6cdfd96f-b006-4267-81d1-a5f0bbcfdf7b", "sighting--2c962eb7-9a8d-49eb-96b1-67d1c0a2bde2", "sighting--7d3e0f8d-1ca1-4db5-a6a3-40a3ba8a0321", "sighting--5a3a4da2-2773-4228-bcee-c3207306eec3", "sighting--074257d9-4a6f-4390-8c92-b35d50bb4e8f", "sighting--4383b6f8-7068-4f11-93ab-7258a73faeb3", "sighting--d640665d-e2b0-4860-8855-9fd2480ba616", "sighting--3edd807e-30a5-43ee-bae5-052b495c7b0a", "sighting--06f03d19-a406-4967-a6b4-f16d14e1ab35", "sighting--a3b5cc6d-48cd-4529-b7db-cbd4df480e03", "sighting--3d45d864-d22f-416d-bb49-f45f62d801e8", "sighting--0a0cc5d3-20f7-450d-b549-4d767ac52207", "sighting--7f333b47-d8a1-4d9f-8f81-fd9d88ad130a", "sighting--0b8c4fce-f770-4846-bfcd-61c96dfea902", "sighting--112245b6-3561-4104-bd8f-04135d5e4137", "sighting--03c0e1a9-2e74-4375-9dd5-78c9e40e5809", "sighting--692d168e-c498-4720-9dad-d4632a200e35", "sighting--b9c0f514-e5fd-49aa-99a4-cb6a6ca924aa", "sighting--b38b69de-0678-4243-b224-e19a0f3b4236", "sighting--33d1fc90-8252-46f0-aa92-3722910e6a3d", "sighting--a1b98c30-4140-4ce2-8a3b-6f0dcb2e0651", "sighting--0ef299e8-de9e-4736-9777-c4b3e3ed107f", "sighting--33f0b539-69d7-4339-944e-4ef59419c2e8", "sighting--2044036b-05d2-4976-9407-b07c9130e181", "sighting--4e2ad3a7-b11f-4205-81f0-6e40a770e426", "sighting--a59b930d-dd8a-467d-8533-795fdf57817f", "sighting--8acf0ccb-6adf-4917-88a1-f4e6559c776d", "sighting--ccc380b9-9df4-45c8-a6bd-3e0db9ff5305", "sighting--08cd8bcf-e5b2-4afe-a955-1479daa8b96e", "sighting--116a1f3b-3bd9-40ef-b237-8e40b2d747c8", "sighting--25f53277-b736-498f-8d51-767ae674c7fa", "sighting--fba906df-0f50-4775-b93b-e171aa5fd312", "sighting--1fb54c38-fa51-4138-ae23-a2de1f4eec3c", "sighting--17458d18-9f00-488a-936a-cd14e7220ba6", "sighting--0b4c13ea-eb4f-4a22-90f3-2a420aeb81e1", "sighting--fcefaead-0620-495a-be66-16bad0974030", "sighting--0ba07948-bed7-4493-8fa7-3d2b03ed008d", "sighting--9589d521-6455-41d4-944e-0d278d068f48", "sighting--091528a7-d7d8-4602-b115-25721344fe5a", "sighting--ab8e1f90-34a3-44fa-a01d-bcae3dbbb304", "sighting--51463a3a-660d-4ddb-bac6-684e30463c7a", "sighting--342db9ed-a621-462c-b5b3-36d1951813ea", "sighting--800cbdbc-9faa-48d4-84e3-0a2415f66c83", "sighting--cd56929a-65f1-473d-8c85-e2259e73936b", "sighting--c80c56e5-3a4b-4b3e-9bfe-ecee2e179d9e", "sighting--4aa3eb57-5185-470f-88a0-e1a3896f4607", "sighting--020d70f8-cb48-4bc0-9ac5-882d4a4094cd", "sighting--4b0f9794-2ba0-4f36-9cdc-7b0be6120ba7", "sighting--edaba551-aac5-4d76-b9a3-8045c40698da", "sighting--203d690e-b84a-4021-91ab-84790b030f3b", "sighting--60b28720-bab3-459c-8e4d-7f62b41919eb", "sighting--5f621e62-13bc-4474-ad7e-33375eb7b28c", "sighting--abb1f708-ff40-444c-9581-e285d5487365", "sighting--f3e22eb4-870e-449f-a6f0-bfc5f7862bbf", "sighting--06e77170-2b64-439c-9528-40af24cd4cbd", "sighting--cdbb27ef-1ba5-4372-a055-26206d6f2c73", "sighting--1ba8d6f1-6982-49e1-bd0e-aa6fb5d96f75", "sighting--f40e2e50-3d56-423f-b004-9649e4f82a1a", "sighting--84075ad3-0c88-4646-b4b9-8ac3026f5354", "sighting--3f1f71af-1902-45bc-b669-29f330a33641", "sighting--6a6f00a4-c135-4af5-8ae5-80056926f1df", "sighting--541f2130-d88d-4b6e-920a-d27ce8334297", "sighting--4d514652-2fd2-4a2e-b886-f2c82dbbe670", "sighting--63a2d055-e78a-491c-b4fe-b65c9c92c441", "sighting--10444156-b16e-4486-8ce9-f2c459926429", "sighting--f04d2340-418a-4b72-8e38-737d95bbe9ff", "sighting--f699935f-2309-4b86-9b39-a3b081efa950", "sighting--90c93c69-1d94-442b-8069-9ca599b40025", "sighting--a13cef33-d2bc-49b6-9122-c1c0684aef44", "sighting--111aa9db-46c2-43f5-8a10-f48e438e6164", "sighting--54a504bb-8eea-4074-aa79-1211d2b64892", "sighting--f00c2bd1-76d5-4626-bc35-c363860209e2", "sighting--8044c818-16a4-42eb-9407-e8675aacc6bf", "sighting--3bc0923b-180e-4c15-a754-af320be77189", "sighting--0cf16373-36f2-4708-992e-046781957b00", "sighting--9d756dc5-a46a-4cbf-8167-1447351bb422", "sighting--57b784d8-663f-4ec3-b7f0-9f530c55a01d", "sighting--74d81623-2edf-4e02-9ae7-c2edc6b946ab", "sighting--0d6e790c-3f16-4ab2-861d-95eb6fee3de6", "sighting--08a3c3db-4942-41d7-82c0-2c3ba247cbda", "sighting--9a0d0759-46bc-4194-b62b-02be11fba0d7", "sighting--c48db980-369b-4ef0-9dd3-d53bdbfdea5b", "sighting--7791b799-d1c6-4007-88d1-ce1cba212764", "sighting--d2ec4c13-ca8c-4170-8e09-1c84a3d6c8f4", "sighting--842faaa1-1a14-46a7-948b-72453cb56f6e", "sighting--9eeef238-602f-498a-b4b9-57623645f85f", "sighting--5592d5fb-6b0d-4dd4-b6e0-b2aaf287bc91", "sighting--77d28e0f-1444-47c9-b6cb-3a3c6c554d67", "sighting--fb40c5c3-0af5-4db4-8a6e-093c27f8b3f5", "sighting--7928a4f4-485e-4e4c-ae0f-9465cf5ededf", "sighting--d5b92c3e-4129-470e-adc7-c49e0a3f2ed9", "sighting--4463f71e-7178-4dff-ada4-91b4a3e0fe7c", "sighting--94cf6366-6d64-495b-bd8d-50a4ce974d16", "sighting--54dbfc1e-6966-4f1b-b296-cb0514f722be", "sighting--1c50aa0a-c882-4b73-a4b1-d8240181f581", "sighting--301a1b66-49a4-4eef-8ac0-2e5c75a9e7f2", "sighting--90db4298-a15a-4bfa-be61-2b644e739e3d", "sighting--9a509048-53f4-4d57-9ab1-ad0a9657a06e", "sighting--ff277c2c-706f-4fe4-bac2-d12b0a091576", "sighting--4645038f-bb9e-4e43-9d42-14054bb963a3", "sighting--19f4b873-4bf9-401d-96e7-fa4abfdeea01", "sighting--7587d4ec-8c68-4f01-a14f-b5669e3a1c31", "sighting--bf816190-293c-4678-bf4c-fea6be7ddc11", "sighting--814f6079-5722-43fb-bb01-04351f0ab459", "sighting--193cb74f-e155-4dc8-878e-9a07aa2b243d", "sighting--dae5f1e5-0ba5-44c2-9023-085ea05fef9e", "sighting--9b32688d-5295-40fd-9271-89581e0a239b", "sighting--0cd98dde-aa70-492f-86e2-c0eccccbfd08", "sighting--d2d84220-7685-4b78-afca-bd58bec747c6", "sighting--3cdadba3-6452-47aa-b0e9-905fdc18e3e8", "sighting--86d2ae2e-649c-405a-81b2-86937a45e777", "sighting--fd24a836-518f-47d0-8b30-52bd98394874", "sighting--32f38073-52a6-4fbb-8f49-888d0888c7d5", "sighting--00611ce1-ef32-4cba-ac0f-091230bcce38", "sighting--8f5888a4-93d1-4915-abc4-df69b1aa7eec", "sighting--b871681e-d2c1-4d78-ac38-27f00ea54a78", "sighting--0b05bf93-e2aa-46cb-947d-c43a3ddde2eb", "sighting--11470dec-0f80-4622-bb4e-dbac2cd4c165", "sighting--195afe86-763c-41bb-8418-f72643163811", "sighting--4e21b2aa-a1da-4e55-891a-509ed271155a", "sighting--15d38d78-0d2a-49de-ab78-518dc0ca2891", "sighting--7aef7b95-8f4c-40cc-bc46-1e254054c7e6", "sighting--e954bf9c-0d23-4e1e-b989-31dfcd25a70f", "sighting--e3fc0ac1-a1c8-4009-9e6a-3767d4ad3326", "sighting--66df7775-17ca-4c2a-aecd-54627161a256", "sighting--ee020336-290f-484a-93b9-3f50a6dfb624", "sighting--adf02c1e-d54f-4bc6-85c5-5b9e07cc00dc", "sighting--46364f7e-3d51-4395-b95c-d9743ab36e9e", "sighting--16cb1dc8-95fc-4a23-8aa4-ab793d3a21ec", "sighting--f9bc6ef0-39d3-4783-a577-ebc068cea0bb", "sighting--7d0fd832-01dd-4f54-bd12-3add0fb854b3", "sighting--fad462ca-d79c-481f-9608-8325204a27f1", "sighting--c020d581-2249-4583-b7e3-0b80d9db8448", "sighting--695c261f-bda6-4139-ad62-8ca0dc685bec", "sighting--ea129793-8c24-437a-811b-d684113b6148", "sighting--325ab6f5-fc06-4eb8-bc4d-303293e3c28a", "sighting--0e11b4ff-56d2-4613-b870-de430b53b17a", "sighting--3550633b-ac06-4cc8-ad96-aa17e75e915d", "sighting--3f5eff1f-6c54-4ccc-b603-2acf5a27a4b7", "sighting--e78ee63e-b25a-4bcd-820d-1b86ca2c51ed", "sighting--09efeb15-a780-41f9-84ee-d8041a585c05", "sighting--c8b5a0d7-e8aa-4a86-b486-99ab75302ddb", "sighting--992ecd52-2405-4bd6-ac8d-06be003ca4fd", "sighting--42c1cafc-11e9-4fd4-b119-1418908b9064", "sighting--c057b482-d684-44db-a5a6-17bb0a5c9241", "sighting--b38129da-75bb-4d5f-843d-966ac3e14d2e", "sighting--9cfbb0e0-45fa-480e-9975-343fe5a53de1", "sighting--642a57e9-cc38-4672-90e3-9ba535fdb0cc", "sighting--335931e0-8e56-4190-a04f-a57a5c7f0fc2", "sighting--8a05ff56-4dcf-4ebb-824b-f37e97b68613", "sighting--739f58d6-843d-487f-82cf-8f1abc63c766", "sighting--4fdf7360-96ee-4d67-9ea1-f8defcd27b7f", "sighting--1f8a74b8-eb93-44f0-b2e3-eb03a1df0604", "sighting--b4171b06-90f5-485e-9a2f-69cb9e5dff21", "sighting--9170f396-bd43-4c2b-83e9-28aef56fb26f", "sighting--3614c1ec-8d2a-4846-9833-fde0db262503", "sighting--fa3d4a36-d8a6-4996-b03e-0a45a4776a98", "sighting--225b53ca-28ae-4873-826d-112c3c7ad0a9", "sighting--a647d202-3a7f-4d05-b4e2-0e1fb5b15405", "sighting--d0fdbdec-8903-4529-b9de-6fb521e855f5", "sighting--14a94d38-0b68-4d01-9de2-84f15a5017ff", "sighting--e1b85477-2d53-4f05-890c-d442479edd9f", "sighting--fe5db779-a520-47c3-bca0-7422195263bc", "sighting--812da068-9e12-437c-a872-36d19b8c775c", "sighting--6c33cfe6-5f78-4950-b701-cc4e2a15eb9c", "sighting--f1607154-d6d5-47a3-ba6f-01169456bbe1", "sighting--ef344ae3-b325-4c2b-a401-e4c8ce137daa", "sighting--8ced84bc-ec47-4945-8272-af4688c0c015", "sighting--830b4fe1-2ac3-4f1d-9bfb-84eb79bbf30a", "sighting--5ff2e3bb-d68f-484c-83cf-1bd33804858a", "sighting--66d06796-5007-4a23-852d-6dcba87d18b1", "sighting--bb46d733-abb2-4780-950b-835b1bb0d101", "sighting--06f514e0-4467-4687-ad02-9dbfad234030", "sighting--87696e6c-c847-4829-ab83-79283e9312ed", "sighting--787f9436-82b9-4e99-8289-1011bd3021b7", "sighting--61bcd295-7bec-43e0-aba4-4969e73aea3c", "sighting--21d8e985-3ff1-444b-b4f6-93d86f3e3c3a", "sighting--45f314db-6b2c-4638-8cf0-6e3b4d7f38ed", "sighting--2a70c2af-1b96-41ae-b797-30287a0b79f3", "sighting--c29c90d6-3698-4d7a-b814-d0382085bde5", "sighting--40b84477-4964-4a5e-a6e2-bc8c74b1e512", "sighting--195946c5-c5b0-4c06-8da0-7aaf1b120608", "sighting--7ea9090b-d54c-4c77-a8ec-27062e33729a", "sighting--a6d977f1-6b8e-4c31-a19f-761b122bf752", "sighting--05645d4d-d881-4a19-bb78-029335ecdf37", "sighting--2af7ca7f-80a9-443a-a16c-bfe9843180ee", "sighting--022b4379-ce12-4c83-bf34-c3559e2cc88f", "sighting--0213b0a9-44ce-4762-9e95-371d76e873ec", "sighting--e8f86edf-548e-4f1a-917a-c89d1dc8b260", "sighting--1e1f8f58-2207-4e29-b1cc-67fa8c3fa643", "sighting--ded8a784-7ebe-466f-ae47-1474685a0ee5", "sighting--f0743b79-748e-4634-89a5-dc29f780696e", "sighting--268761f5-d287-431c-a7af-de198c0ab689", "sighting--7d18495b-ef28-4ce0-b1f1-f6b0b30e3b34", "sighting--06943b73-36c9-4a69-86c9-13bd8959ab74", "sighting--750576f3-66b0-441a-b6e4-ab47703fb226", "sighting--f6345522-0fa8-4fec-b419-98b070461ae0", "sighting--b12dc33c-2e6a-4e3f-8dc2-3af18dd8601f", "sighting--29c1800b-dd2b-450f-bd3d-e237fd04077a", "sighting--db29ec71-77fd-450c-9e60-6a5e00c52276", "sighting--60a9e8d7-b6f1-4b01-ae74-1fbdb0a9ae71", "sighting--63e1818e-2781-4f91-b6ed-c83cd731988d", "sighting--a16e6533-a3b8-481f-b374-3299a4980729", "sighting--c9dd11a1-f5d7-438d-8fb6-09ff5ab2bb51", "sighting--5aa2f407-02ea-4082-a080-1c3d11ee14b2", "sighting--942f6e09-8e33-477c-ba92-1e7eae9389d7", "sighting--62506052-57c8-469a-a6a3-6ba63226d3b9", "sighting--27ea39ea-520e-4396-91b0-b49f4968da99", "sighting--64e8f49a-2f5e-4125-9a8b-c79c018fa739", "sighting--2932b5b2-ac85-40c8-b9af-6dfc5f31bfad", "sighting--c795a50d-44ff-4b88-967c-21260f50327e", "sighting--5a7b3f70-fd4b-4ed0-b606-a559c4f53104", "sighting--2cb87ae9-98ba-4036-a2e8-b3c217e868b8", "sighting--b46d8f43-cee2-468a-8afc-6575963cb429", "sighting--fef6a7f9-b7e7-4412-976f-b374decbe3a3", "sighting--9362db76-814a-4c91-afce-5e713027ee33", "sighting--cacd5d4c-0cee-4b80-ab83-0261a7f73472", "sighting--d78f7572-8f6f-4003-ab2f-c8fb62147c15", "sighting--da272c5b-327e-4875-b871-089f11da0030", "sighting--9b0fdc1e-38a1-45e3-b854-78425e18b9d6", "sighting--c77bb889-a4ea-4845-8e22-918e9a37f2f6", "sighting--a9fbf59d-706f-4b29-bfaa-8811069e7145", "sighting--59d310be-4b91-4521-84ca-42e99f12cdb7", "sighting--76c17440-e25b-4192-9420-389e336e4e97", "sighting--93f59e5a-30a6-46da-abcc-a5bc61fc5755", "sighting--da4156a2-396b-46ec-aa33-571f766ae786", "sighting--502e89b8-2cd2-4add-a782-089e13b8d055", "sighting--86092d04-8c8e-44b9-9a20-b66983f16eba", "sighting--d7fbcb0e-2169-4709-980d-d505b3445e7e", "sighting--688e8a11-694a-439f-8437-582080a62a0d", "sighting--37ba77d7-82df-4f61-8290-6fb313c0ab80", "sighting--fffa721f-8f78-4152-ab5b-b3dc2c0b74a0", "sighting--23a870c5-6308-4cb0-a960-0a91e0d16e15", "sighting--2b6d6cdc-cc7c-4e67-890a-858a473223c5", "sighting--19ebc2e2-d5e4-43a4-8c8d-88751eae8320", "sighting--ebff3a53-cefd-432a-a789-35dec77eee6f", "sighting--de1e0fb1-087f-469c-92e3-5fb5c200df95", "sighting--2701eda5-fc52-479b-8c29-3bf326c22dcf", "sighting--ec24b0d8-5c90-403d-9ebd-ad5f7a4ab9e9", "sighting--d7ec2e01-14c7-48f8-b393-194dd966d46c", "sighting--72b583e7-a619-4a49-9d0a-db6fbafcaf48", "sighting--4783e4c1-1d93-4637-93d3-1ea6d45bff7a", "sighting--38354ff9-858f-490d-ae96-5a4b7c499cff", "sighting--7c4326e3-275a-49b6-b22d-b1fc759d0caa", "sighting--5f9f0fbd-4206-47c4-bde3-6debb5c54d22", "sighting--44fbeecd-f653-40ca-8000-c7f1b424d3c9", "sighting--43b9418b-5bbe-4b4c-b015-f16a3cb147f4", "sighting--8ba694fc-15ba-4bda-940d-214fb76d3e14", "sighting--6e23d7e5-466e-4767-b751-48a1df4d8251", "sighting--227128bf-28b1-480e-80e7-16a9a905c630", "sighting--eff4d9f2-1773-4722-8c83-1cb9db185e62", "sighting--3abe5498-b481-4a51-84d8-96a6e9b7e53b", "sighting--1b2f4f2d-fd35-4a20-aeef-0fc429d4a7e2", "sighting--e95efc93-0b04-49df-a2c0-37a2eecf588d", "sighting--74f195ec-3031-4063-a67b-b231889199f1", "sighting--b764944c-0737-438e-8ccd-2994e638783e", "sighting--61a02add-b0bf-4898-86e8-f8b896497c5c", "sighting--6f78875a-3c97-4356-88c6-8748662c5150", "sighting--b926a88d-f81e-4ce4-99d1-ff6a4b68bc23", "sighting--aa8eac93-6b36-49f0-9a37-4e945920d27d", "sighting--5e1dd682-11cf-4f3a-8eae-f32149c83942", "sighting--10c60ac4-f72e-4d4d-a751-66f208e8c3b2", "sighting--f5da33d7-5edc-40f8-8d76-001fc9158885", "sighting--bfc61184-e435-4b22-bcbe-7bc02cb1f566", "sighting--7b427c05-a1cc-4d35-8006-215cfc950955", "sighting--4fb16b58-a652-4acc-a166-a0e5720ca5a4", "sighting--0cf7cfef-e2c9-48cc-8bd7-0af1d24c7ec8", "sighting--4ceb4fe1-bf26-4bc1-a00d-984d1a1fc9e0", "sighting--48a5a9c8-d552-4317-8efc-83aeef76aed5", "sighting--bf440ad8-b819-4c01-a217-1631b3ef2712", "sighting--59c90d0e-a466-4c17-a4c7-5f2ef5b9785d", "sighting--4b1a938b-4d63-4950-9ecd-aeea6ac799b9", "sighting--7e9fe5d3-d075-4023-a265-bd34adc23d33", "sighting--8e4bcb3f-2f8b-4387-abed-f885f76b0acd", "sighting--7026cf7d-6376-414d-bf90-cef1f562fb6a", "sighting--e2eafb6f-58fd-479a-b28c-5c5596e85ad4", "sighting--9de4f580-4244-471a-983b-cc2c80a2f53b", "sighting--b81c85a6-11d3-42e3-89ee-6bedeb9c1200", "sighting--d3e4a8e7-4f9a-4cc3-982b-c2806ea25348", "sighting--abeea6da-98c4-4a1f-a9fa-c68cf5d0d2bf", "sighting--4b1ac8d1-72d1-456c-b022-795134b08529", "sighting--4228879e-69ba-405b-a693-ccb41851cc6e", "sighting--5401106c-dec7-47b0-b470-394ea0168af7", "sighting--2ef72b4d-03da-4b5a-bbfc-4295f08f6a91", "sighting--726d0f7a-3a95-4a4e-9647-e7719463a1f3", "sighting--ef68da72-fc26-4060-a371-30bf6251dafd", "sighting--a2b294dd-d342-45b8-97e3-f953ce4bc0d6", "sighting--5814d420-e5b9-4532-86b0-d8e6ac2823de", "sighting--5af19923-b870-404a-b6ba-82f78577e648", "sighting--c66283dc-529b-40a5-8942-88fb4c52f3c4", "sighting--411bab94-244b-4fa8-b11e-246368b4b206", "sighting--f073465b-eeb2-4805-99b3-49ab4cdae733", "sighting--c7277149-08bd-4dbe-97cf-dd4c15a3988d", "sighting--a244736c-a057-41e3-bdbf-9d821fa02fca", "sighting--4a356dc5-6936-4aca-94ca-1dd6c5ac17f3", "sighting--0e9db7ca-c3be-4894-a30c-9250d4a455ff", "sighting--17d5df61-f9a5-4732-9b9c-64fa19ec33a1", "sighting--9213ee44-c06b-4e5a-be87-d02bf1b2aeba", "sighting--9cdb7c4c-cf89-41c5-a1e3-4875b0653572", "sighting--d4c3fce7-22cd-4fe2-a2d6-79cf168e481a", "sighting--0d82a01d-4cc9-4e9e-9d19-2e80f06f2e35", "sighting--c1599515-173d-436a-9392-68806fc46623", "sighting--a3a4beb6-d79a-4b9e-9b55-4a3d434e9e62", "sighting--3a68c98e-2652-40dc-a283-568d09c34928", "sighting--7f24673e-c02d-46c4-b8e7-a18dbec183b7", "sighting--bb4c8931-163e-417a-919c-d927579d9636", "sighting--152b498b-d4d9-42aa-bb09-c4577dbfedc3", "sighting--64c7b9d0-ba01-4f51-a182-21cb6fd743f9", "sighting--683166e5-1f70-4a66-a37e-80ab30207b40", "sighting--abe4dd64-4997-413f-94ad-099709cec6cb", "sighting--c99612be-3c2b-4660-88e6-aba294ee316d", "sighting--57db1dd6-318d-48f9-9367-aeac04aa3835", "sighting--791ea73f-05f0-481e-b17c-86ee7fe09141", "sighting--f01473cf-dabe-4726-ab95-ad3904bd1fdf", "sighting--9ce7d9a0-2967-4086-8895-9e60ca25dffe", "sighting--01c2e26b-9745-4f83-b30b-aec2f47febc3", "sighting--f0a732ab-5350-4dce-9fc0-587829f3ff51", "sighting--e1f682f7-709a-4d9d-922a-d5e75fa8b7dc", "sighting--50bcafe6-b089-4e3c-9481-18650f7491d2", "sighting--a479cfb4-5677-4ca4-985b-5b1d4f5ce56e", "sighting--ea14c830-72a8-4113-9d83-4d1d4ddf5d89", "sighting--9a4b11f5-87d5-4a1b-80cc-b72281064525", "sighting--778cc8aa-321d-4853-9502-5faf9739a98e", "sighting--0c2bc817-5d00-4981-973e-cb51cb531d36", "sighting--453382c8-a1ee-4f87-960e-04d0367a466a", "sighting--01d77b6e-839a-4704-aaf0-b88c69b146dc", "sighting--9e972b78-caf3-4719-bc99-96232e8344bb", "sighting--21dca6c2-ab56-45fa-be3d-a4434fee7b1b", "sighting--94d098a4-0ac3-4e2b-aa93-4db05f8818a5", "sighting--9125b931-4cae-4cff-aa03-2c41c92df0d8", "sighting--2dcab487-6a4a-40a9-b423-699cc1bc4975", "sighting--efbabbcd-4433-45d1-a614-c8b014a7e967", "sighting--39327c03-8429-4d94-b007-f031be585f12", "sighting--9787ef17-c4f1-4f46-b065-17f9a99c2284", "sighting--a04e0e94-e842-436d-984c-8e73e53f4e98", "sighting--ace03b44-4def-4f6f-b5b7-22f0d757d1b8", "sighting--c22e0e76-d41b-4f57-849b-5fd1741ceef6", "sighting--514321ef-f838-433f-a7a5-1b1744949799", "sighting--59869b39-b05c-4f67-86b5-8e75036f4707", "sighting--b22d2095-79d9-48bc-b3ec-bb6aa579fed7", "sighting--dc0f8872-e5ce-4248-9c3e-aa7ed83195de", "sighting--1e4ab674-7363-4aad-aa11-7bae38cca2c8", "sighting--c0987870-b911-41af-a0a5-d46626be4e7b", "sighting--771f0f01-2932-4c85-acfc-8ea308b8d83c", "sighting--01e4a0c2-0894-45cd-8a17-468a0c7ed20a", "sighting--13379c6b-c41a-4d68-bc22-558d2d73e314", "sighting--d7245128-824a-4f4e-9fdf-5ccbdc557a3c", "sighting--00704f67-7a3e-43f4-b77a-de651c58c0f9", "sighting--feee811b-fb43-41c1-b38d-08a5187f6332", "sighting--8e260b48-2639-4a2e-800b-888bdf1eb27c", "sighting--30aa7f60-c43a-46f7-b41c-24c1883c911e", "sighting--4f802add-ff7e-4608-92df-6cbda20d9c20", "sighting--ce2082da-4cb0-4da3-a7e5-19d8ee58c391", "sighting--19564165-91e7-4253-8a43-a0315a9c6606", "sighting--8a9c04fd-aae9-40ab-8e29-efb7aa95ae90", "sighting--e38cbacc-de69-4024-838e-8b887b09a3c8", "sighting--4d7af224-dddd-4370-a320-06ac72ba70a4", "sighting--ae82fb16-fc11-4213-b945-1d6d9e04b09c", "sighting--0a4f1d48-6d68-44dc-8a6e-6bff230fbd04", "sighting--45d62e5f-e753-4441-a632-68d0018bc740", "sighting--535416d5-a516-430b-8b00-fb39d3c72119", "sighting--b7adacd3-7ed7-402d-8b49-8aa3e972dbca", "sighting--13619860-7ed9-40e3-af36-3fb9b2bcd8a7", "sighting--c3d0b72b-7280-4979-b21d-4f0d21a2f91d", "sighting--371c8f3c-720f-465c-b5aa-d09971c711cc", "sighting--76a9dbb6-caed-43e2-b6f5-725a13bbab4d", "sighting--108c3716-3f29-47d7-84d8-10bbceb541c9", "sighting--fe628b2b-5b2b-4b40-b221-ccb227aaaf3e", "sighting--3bbe53c2-5252-4bea-a8fa-529bbaa43b34", "sighting--b306eae4-a985-4abe-bc4f-8db10f481e65", "sighting--69d0148c-7a16-4f96-8d75-7ab4efd82f50", "sighting--47be408a-586f-4097-b4ff-080c9d7cdfce", "sighting--00901d94-755c-4203-baa1-f90f2f490e88", "sighting--68656be0-7c47-4bff-a444-0076685981f9", "sighting--bdabadd2-c6f1-4dc3-acb0-22094d7e93c1", "sighting--db1c207c-125d-40b8-a6f2-6300f8f678e8", "sighting--a28b6002-8167-4ec7-9bec-d7c7a9574651", "sighting--9221f515-548d-44eb-8e59-9bedddc36cb6", "sighting--244eda33-aef0-41c0-8704-fcc88ad9dca1", "sighting--a22dd514-a31c-40fe-b85a-e3a49577f5bb", "sighting--b50c8179-faa5-4309-a73a-db2b475b7c26", "sighting--fe1b4788-80cc-4c6c-977f-9304b3193715", "sighting--e3bf23dd-f070-400f-9e11-ffd224e8b9ca", "sighting--5c574dbf-6410-4ab7-b56b-56d2274c45ac", "sighting--07bf158d-d6bf-40e2-844c-b031d063355f", "sighting--e11d8764-bc01-4c4c-82a0-f67300875589", "sighting--a7550cbf-1647-4ba6-bba8-e06f745bec16", "sighting--455d0b6f-5106-422f-b958-50addf7c6181", "sighting--4d5815bc-b7a7-4c67-955a-dc1ecddd4fcc", "sighting--6302d4bc-d61f-44af-8da7-70d31ce5ce92", "sighting--8bcee549-a001-432e-a21c-9996fbf91c48", "sighting--67857b9d-42bd-4c6e-8307-2d65f64d2225", "sighting--e525cbd5-1d4b-40b6-a57f-3be931f039a0", "sighting--f931adda-9834-4038-88a7-d3c912e676f1", "sighting--e76452b7-73b2-4e7f-8ebb-7e05016d9faa", "sighting--6c7fff3a-2e3c-4d1e-8197-cfe474117ef6", "sighting--6fe08a6e-c5cc-418d-b1ca-f89425d4173d", "sighting--c365f808-a7c0-4314-a857-5cefe0c94541", "sighting--bd771a0d-b573-489e-a151-82b6a76b2871", "sighting--0c966e80-e9e1-4667-85ff-303b6a92a60a", "sighting--cb53a357-f3c2-4e64-bcb3-8da7968bf1ac", "sighting--67fe9dd4-b474-4061-a8b7-eabe25cf45c2", "sighting--0236700c-41bc-47b3-b466-34e4786debc3", "sighting--cd580973-1b19-4efa-9e21-fceaf6f28eb2", "sighting--5c3b45d6-127a-4e08-907a-46a65bcd0fec", "sighting--396ee5fe-81fe-4473-aa26-a3eed1c0aa79", "sighting--ce25be5c-2f4d-4fc3-ba3e-c33ebe24687a", "sighting--12c06878-cf2b-4aea-9b9e-29cb67b3faa1", "sighting--3cf9c82f-92eb-45a3-be34-5530fecbe9e7", "sighting--fb83b60a-81aa-427b-ae7f-8c7aff9ee102", "sighting--628d654b-f864-4a44-a6a5-39b294b3c0b3", "sighting--d76a716e-ffa4-4baa-b487-4040a7b0810d", "sighting--796965dd-c730-410d-a0eb-67eb15dfd2ed", "sighting--bda126e5-1645-4d64-8527-3baa4e4c4033", "sighting--3196ee54-914b-4521-b8b5-57c33e69055d", "sighting--71c65f30-8aa0-43fa-aecd-7efed3754609", "sighting--b8f72991-4374-4e41-92d8-5a597be2bc0c", "sighting--8b44c842-b09f-4c20-a02d-41ebc3275a9e", "sighting--42531f27-e63c-41ac-934c-db21328eb44c", "sighting--fc8b5c43-b6a2-4e5c-a16b-63eae9fe91ff", "sighting--691c52a9-4781-4e59-bb35-23bc34fbaa11", "sighting--390e7db3-2619-4385-be56-0cdd7661ab25", "sighting--a9da79e3-64d4-4d6a-8dd5-f0359c8ce9cf", "sighting--0dd8e50e-39ab-4803-ad4b-bf657ca67b1b", "sighting--c81c9ee6-f2f9-4e2a-ad04-aea77391df4d", "sighting--231b14b1-50b9-44a3-a808-1a73e3ac3cdf", "sighting--8b0b7b66-502e-4890-ac7c-4a1825a9b645", "sighting--681c2967-5d3a-44a4-a4f1-f61717bc8055", "sighting--154eaef0-ac27-4cab-8491-dd86a66fe151", "sighting--2da01aed-2be4-490c-b625-d77c0ce653a6", "sighting--e5fcf82a-9ea0-427f-b900-308859c52f46", "sighting--d9a9690d-2d03-406e-bea7-511772b3d7a5", "sighting--9ef18d20-3fa8-4b47-b05a-802bf66ac42d", "sighting--4db35e35-dd42-41d2-9c82-49462ddbccf9", "sighting--d262ab2e-5d55-4108-ac64-99af1889b216", "sighting--e5ecc225-6909-416b-a83b-bddfe936ca1d", "sighting--fa3d1ecf-af1c-4075-a166-ce4daeb9c57f", "sighting--b33c24b9-c632-423a-b5e9-698247c7b704", "sighting--7f589c6c-7d19-48ee-9c7f-dbaa5824dff3", "sighting--c24be029-8e31-465d-822c-c9a140c4fc50", "sighting--febb525b-0de2-4b1f-af36-b6f2737e8905", "sighting--59a4d6c9-8d64-4b20-9711-f02148217365", "sighting--2283f234-fa3d-4f39-b4ca-6d19ba08d138", "sighting--308c7f9e-34e6-42c4-be73-2215a78249e6", "sighting--c24a2839-84e2-4573-a05c-f0f7edfe9e89", "sighting--fb1ac119-b4ad-4047-81d0-96540809b3bd", "sighting--711c9d9f-b706-497e-97a2-a2c60b6ca541", "sighting--6c5513d7-ff40-4b71-9811-fa1b91c011fe", "sighting--48632b17-3b9b-477f-818b-351b0d758f74", "sighting--6244b7cf-911a-4e34-9a8b-9430d1366e96", "sighting--743d8a35-f7eb-4ff7-a6de-dfe96367bd9f", "sighting--2f6d5a87-e475-4396-ab97-0a114603adbf", "sighting--1264b42e-e92e-4587-b02b-ea6dad5c547c", "sighting--0ac8494e-7e10-40ea-b932-53fe2500b1c1", "sighting--5b8aadb4-e732-491d-9afd-d83dbd6bcb73", "sighting--f45cf830-dabb-4363-979d-91f1a63da5fd", "sighting--1c7b2572-f6f4-46a4-8b95-bbf03ae21a01", "sighting--b8ec0342-a103-4057-8277-c9134b52934b", "sighting--ed55f0b3-5c71-45e1-8960-64190223e75d", "sighting--0ec6f9c0-f6cb-42a1-9470-850c594d573c", "sighting--27877d0c-79fa-45a3-90f7-72548422da6b", "sighting--64200662-2968-4900-9b1e-31ebb5bd19ce", "sighting--45905ed6-f309-4063-b968-d5010849b360", "sighting--d25d3a22-9e1d-4690-9486-b2fdf657b849", "sighting--c5fdb650-2e12-4559-b4eb-88d72ac4165b", "sighting--00d08d8d-f6fb-4037-b9a0-93b2f6c7ec14", "sighting--915b79a1-fda6-4fcb-8b53-9ad263faa545", "sighting--d63f9b29-2b8c-476e-9829-936fa9b5c148", "sighting--53ee3fce-1e2b-480c-91cf-c36756dc74de", "sighting--e74494fa-4e2d-45da-bc74-a18f448ec4b1", "sighting--3d3f3f81-2a2f-47ff-ae75-4f4d9f43fc72", "sighting--ae01dbec-5423-486b-933a-4bb698dfe07f", "sighting--3e09ca39-a00c-4e83-8e79-2b4a891da687", "sighting--660af307-a4a5-4a39-8ef5-8138e21fbc5a", "sighting--3dd8c898-ad7a-49e7-ba1f-f35f1d783dd6", "sighting--221583c7-2e25-4025-9cee-559a6efe424f", "sighting--75a9ec1b-7547-4548-959a-eb48ea55d068", "sighting--2094aedc-0f63-4c40-b085-198fe54c2c65", "sighting--504942d3-b044-42a1-970b-c77406abb557", "sighting--ad38e289-c99a-454f-8b4d-8e631468f65c", "sighting--d7347cc9-2799-4dd6-9705-6b18be61773c", "sighting--3ec7a01d-e0a4-43f9-8e1d-fdafa5e52606", "sighting--65ba15b2-18aa-4354-9146-3eb9b5156164", "sighting--376bec88-b15f-4c4b-9154-febdf883fe41", "sighting--bd2a3946-47e9-4308-8f27-c961bc2ac6eb", "sighting--b8fe921c-b20c-49e6-b5c6-ac1fda9f2570", "sighting--94d7c354-74e0-4802-82a9-3c7e81ed0d9d", "sighting--c455fa00-8c11-458b-a90f-4434101a8a41", "sighting--633a36cb-ff6a-4826-be5d-b47214903db6", "sighting--895a85fc-4845-4a21-9f8d-bff433d37b5d", "sighting--7f51207f-1526-4b9e-b1b4-6efac8a9eccb", "sighting--faa164df-5748-4fd5-9e1a-946ac8bc1992", "sighting--81abc0c7-d555-4900-9f38-b0a2eaabecfa", "sighting--be11e385-4559-4c8a-a3b5-906f5d728c25", "sighting--71ecffdc-e51c-49ad-bab3-28b60a8ac698", "sighting--210ce318-8cd0-4b6c-99f9-c98425d27958", "sighting--5d8cbc9d-5eff-4097-add5-85bf858ec8f4", "sighting--cb04f66a-dd6d-4467-99d4-95ff04c6a868", "sighting--c2de3ac6-6122-4568-96c4-7e8290ab9682", "sighting--e64a14c9-12c3-46f7-9eb7-c60b827778eb", "sighting--4bfd838d-2706-48ec-b02b-96ec60f132f0", "sighting--5aa2a2c5-beeb-4589-9796-6b262c47156e", "sighting--1580af6f-f225-4436-8367-da1a4c72fe11", "sighting--c402799a-c21e-4375-b27e-39303d198f50", "sighting--4be500ce-6e4a-4353-abad-9a7d550d3800", "sighting--9f7deb72-a885-4095-a2ba-b219d2742433", "sighting--5b65fa16-435c-4ae6-99aa-f6c7dfc17ad1", "sighting--ae00db18-eb06-4be0-88c7-161b365fe5e7", "sighting--4329da9e-6ff3-465c-8500-f25979d472dc", "sighting--f7ddaff4-26ea-4cc9-a00d-ccf822fe8114", "sighting--304397be-237c-4804-8efa-5ee0dbcb52a2", "sighting--a3987e0d-aa05-4f66-9752-1cc59fe02d21", "sighting--b7b5ee15-2b70-4a26-bbca-ca28efa291e7", "sighting--a8cd81a6-2288-4193-a431-ab7c0e353996", "sighting--36519aa3-c637-4220-a5a4-402ce32138df", "sighting--5680a7e1-145a-4207-b98d-93701545a75f", "sighting--376e0a18-8319-4e17-9f07-aa2ac47ccfda", "sighting--b2858dad-072c-428e-ac6f-d37d42452a3d", "sighting--4ab589ad-4938-48b1-ae85-f4a7eeca5164", "sighting--49b2a8fd-2719-4301-aa93-16c80f890be1", "sighting--4e638c8e-2122-440c-8558-936103087bb7", "sighting--4809b9e6-5741-4582-b4d2-b0648ead2256", "sighting--ba159a9e-7d0a-4d82-9295-78fb140ec32b", "sighting--9901cd6a-76ac-4c53-83e8-ebd0b23d5ed0", "sighting--d59aff32-3d08-4be0-b1dc-e28b5c5c1f05", "sighting--3d8745cb-c61e-4fc9-b1a9-69fb257cca48", "sighting--2feb5687-2b76-4cc8-831c-4f0c9e985247", "sighting--ee180b0b-862d-40ca-85f2-bfd358e07541", "sighting--e08259ea-631f-471f-a35d-e628b3652994", "sighting--c08e20df-c804-46e3-a04c-fdd841f1f477", "sighting--3fa818eb-8f65-4497-bd07-24057ef471f9", "sighting--9f36fb19-09cc-474d-afbb-134f1753dbde", "sighting--c78bd878-8acd-4e08-a7ac-09d6cf5cfb05", "sighting--91f651c2-5667-424f-b8c4-2d52aa9a6d61", "sighting--ab9d14ea-5f89-4ca6-a351-0158f393b04e", "sighting--c044256b-d971-4c5c-bd67-f9916dc28902", "sighting--f627bce3-5fd2-4c94-be00-6d30d5d1388f", "sighting--a67a8581-9f2b-4519-ad63-f45b68051bcf", "sighting--dc351103-3752-492c-8618-838daa229ef9", "sighting--18dfd75a-7965-49dc-a394-5d5a76bb3647", "sighting--b59d13a2-34f0-4c41-90be-f6c339ed3b4b", "sighting--6117cbb7-2226-4fee-9a92-b34105ebef93", "sighting--5e58bf05-919e-4ebe-abb2-6b5551834170", "sighting--9bbb752d-a062-4bde-aa32-104fd28c9353", "sighting--684245e2-d5c7-4cb3-babb-2173e2ac5a63", "sighting--b9f00f2e-ecb8-474f-b389-b3e9946484b7", "sighting--4e9e21c6-bda5-4081-bebf-570ecba69f09", "sighting--1a31fffe-6961-4817-980b-11f8dbc687d9", "sighting--82b5eb15-afd4-40b6-ad9e-29d603677ae6", "sighting--57a87629-a300-4ebd-b564-f62ac68a80f3", "sighting--a7ffc1b5-b0bd-4ea0-bce4-61c48cb6484d", "sighting--8bed10a6-4ce6-4f17-9f71-df80ce212e04", "sighting--e4ac6350-87e3-45dc-ab80-95c35d25cab8", "sighting--184f2331-d4e4-48b7-98ad-ec7894063b95", "sighting--73a8d5c6-c673-4542-91c9-2543dc8b04a1", "sighting--05764260-778c-48ce-a50d-133d3a17a6ff", "sighting--487e62f9-d60d-4bec-acd5-9c47c7941a75", "sighting--54515984-5cdc-476b-a11e-67fb0928f4e2", "sighting--962b68f9-b667-43fd-8135-5d5446dd7fa4", "sighting--d7f14f20-f53c-494b-8fc2-215c5eb74a91", "sighting--90ab8a14-1630-453f-9288-8dcbc588dd47", "sighting--81c14c50-7b1d-4341-88b3-485cca264559", "sighting--d9af5a94-51e3-43c3-a639-8d6cfce6b126", "sighting--da4025db-c8a8-49bb-aac4-8cd7ecedffd4", "sighting--2aeddefd-b165-4c02-8474-01399be5ad8f", "sighting--004ba417-586a-4cb8-ad21-8eb8dd1eb34d", "sighting--9375c960-ccc6-4709-8a92-f4a0075b5378", "sighting--55a99ccb-fdbe-4198-95c6-88f96f9caab9", "sighting--1c97b4cb-63f5-47a5-8f8b-b2cf1a1e7a37", "sighting--39dcb6b0-9585-4f6f-bfd7-5a12586523c0", "sighting--a1a76825-27d1-41c7-846b-295a678db42d", "sighting--84f65e31-b41f-410f-bc07-da261b78ddd2", "sighting--fdcc7eae-496f-479c-ae0c-232da85a29ac", "sighting--ca393790-627b-44b9-be3c-4db164d6118b", "sighting--fdc6c772-f8ff-41e3-97fe-1e6d07d1a956", "sighting--57097fe4-d946-4c4b-9f21-82d09cc36b8e", "sighting--081220e3-12ee-44c6-b9c7-dc284cb287eb", "sighting--2fc15dbe-9907-4cf9-9462-c6bf64b7cd5b", "sighting--e03c8cd3-678b-4229-b1b9-2564bfe69517", "sighting--0d351112-a7a3-4014-bc2f-cae960a47f1e", "sighting--afd1db6a-1718-4717-b9bb-b53903bf06ce", "sighting--f91ea64b-4965-4385-994d-99b480220421", "sighting--1f5f2e2e-ae00-445c-af40-4aceda40d894", "sighting--112f654a-3928-4908-a3ef-53552b177ad0", "sighting--a523c6eb-aab6-4a12-a105-64cbbefda638", "sighting--d2850fe1-b5d4-4952-a673-1fd7575ee617", "sighting--48260617-525f-4b9b-aca5-b2eb9aa952e3", "sighting--2c13bfe3-194c-4797-a561-aab12b91a81e", "sighting--3e248194-0471-426a-a72e-82877b7f3b54", "sighting--83695447-d695-429f-92f8-9c6016894235", "sighting--6c1f69aa-89e7-40bf-8dec-0138caf5e4c2", "sighting--18c40d10-2adb-476b-a86a-fbc102366061", "sighting--31d34053-d15d-40df-8bfa-1277ad649638", "sighting--247a8dd3-b240-428f-aabe-5cfcef450678", "sighting--3c28a512-f7db-4d6f-8779-4b978069e375", "sighting--8305b763-d836-4817-b730-7b148333a7ef", "sighting--00d01372-c190-40e9-9e86-464ee7d8bcc3", "sighting--7443e7da-6630-4599-80e7-e8115e3f149b", "sighting--ef7d38ea-a691-40a9-b7c0-0037a5d10de1", "sighting--ca684acf-2f39-4fff-996b-3d96bc6d6920", "sighting--6cb7c04d-6a7f-4d45-8f2c-34aab5750bcf", "sighting--52fc04a7-1b92-4fee-a026-6ca1c26b9569", "sighting--efe2a902-3978-47c5-b522-37ead576a356", "sighting--aafee6d6-a728-45e2-94b5-05ec139b2823", "sighting--7bdeaef2-a6dc-4caf-9073-994620be7001", "sighting--e9fd8c4a-5286-46d5-97d3-40151acb077f", "sighting--47cd964e-36d0-44e4-a778-44003006590b", "sighting--4f62cee6-1eca-4911-894d-91fc20b58a1c", "sighting--390a4a05-9f79-484d-a7fc-6e094594091c", "sighting--76d15b3c-58a3-4ede-9913-08dbde3ebd46", "sighting--56d784f7-e5dd-4653-b212-28792e82712f", "sighting--b08f874e-f4ce-4203-ae9d-220a5eed7543", "sighting--660e6f91-c501-4af3-a6aa-d212416c2939", "sighting--6ef89e99-3836-4b4c-9e1c-a5262ae6432b", "sighting--a48b1332-f182-4aa6-b2d0-75beee447824", "sighting--cf5c49f9-4f46-4862-9985-eea8cd4d4053", "sighting--6c4f98cd-9914-43f9-816e-2a2ea64bb5ec", "sighting--7620bd16-d281-4dc9-aad0-16e5311054aa", "sighting--1c3dc9dc-432b-4607-b430-ade29caf33d4", "sighting--e78dea18-ca85-4d9f-bc88-53dc8a1de848", "sighting--511f6077-6d08-4033-b577-832e94239edd", "sighting--fd065254-8f78-477e-88d4-722cce37e358", "sighting--8155c978-8efc-4c92-8de7-e47b52a945ca", "sighting--7adc3841-8a1d-41d5-9b5c-80e7f490d3fe", "sighting--fe1d46ca-4ea4-4e91-80fa-2a862c105c22", "sighting--1877f105-86f4-4570-b1d5-114d7ed3d57d", "sighting--899aa78b-2e4f-4bdd-9aba-ab4643f06059", "sighting--c5722108-3080-42c8-9911-a986ca8fbbec", "sighting--08d3536c-4d22-4bda-9155-0cb368d2b758", "sighting--1c4bb5c1-f987-4311-b762-8c3540a0f743", "sighting--095c9a1c-b2d9-4aaf-ae80-84ec5bde5a98", "sighting--c4c1b432-531e-4f46-83ac-0ca63ea3fef5", "sighting--c65d001d-6068-42be-8af2-f0cb5dcbb85a", "sighting--640f2cc7-eecb-4296-94c7-6109ea082b28", "sighting--650d37c4-2ead-498b-87a2-0a1e54df481a", "sighting--18764c26-b81e-43e4-b9e0-beb035749bb2", "sighting--44023282-5d32-403a-9957-463a34ad3c4e", "sighting--174bd161-d7a3-4736-b66b-4007fc936204", "sighting--481c22fc-acfb-47e0-8e7e-4530fc7c6de4", "sighting--3c1d6392-6aa3-4741-9f47-15366cdfae71", "sighting--e7ecede9-b7ae-49f6-8d8c-dc494cc5601b", "sighting--6b32d0d5-fff1-41fd-bbea-d3a3a8afa610", "sighting--360ce5c3-783e-451b-9e43-560e95f0cf49", "sighting--d45282c1-d5e0-40c5-a4f4-acdb36239280", "sighting--39529c6d-db4a-47e5-a60d-3db7e5de6eee", "sighting--6c7bc579-ad92-4002-b422-f2288ac226ec", "sighting--d708e6df-370c-4ba3-a483-18a775d3b1f0", "sighting--d84cb36e-7eab-4701-aa2a-170a07bbe3ac", "sighting--b2438524-88d4-4e51-8fec-f9b3221ff203", "sighting--90dd70df-8290-4a7b-8457-ed49df580039", "sighting--07e3bcad-3710-4c36-be9f-74ee7095f17d", "sighting--e0b0e001-8727-4d00-bb25-bcc6ec94e524", "sighting--657bb8da-63e4-458a-bd32-54deec834d20", "sighting--bb0f7381-46a3-4516-906a-15a5bd6830e2", "sighting--e6dd2c7f-4b5c-4e7a-8b55-ba4b90f0a5b1", "sighting--33f8378f-3f69-473c-89d1-2964e21f5df9", "sighting--d94fb7d0-2e43-4a16-b9a4-ed40af8f6320", "sighting--e29dd4df-9f85-47e4-8d3a-a5ce861cd08f", "sighting--d904c16f-fda3-4db8-93b8-a894a0518aa3", "sighting--68a0db35-f923-4acc-9bc0-a099ae46be4e", "sighting--63ac4429-7fad-4607-ac09-9ab00b639881", "sighting--f2e69ce7-efb8-4b27-994c-efce2cea381d", "sighting--f33b88d7-28c8-4170-874f-65176a9ba6e0", "sighting--c8b5ebf0-0647-4b43-8eea-cca4fdb9fe10", "sighting--b252844d-9aa8-4027-8f30-9ec64ec10761", "sighting--ef5199e7-0938-4065-ae2d-0d66e4fe52ee", "sighting--0062021d-b442-4b81-82b3-3187d9aa671b", "sighting--5094bdc5-007f-47ae-9c60-7654a0db1aa8", "sighting--c0e87d1f-23aa-40dc-9301-b9870b4712fb", "sighting--a1ef183c-3242-44ae-a642-cb491637a38e", "sighting--76feb812-fadf-4805-8d0f-4cc4666815ee", "sighting--7636d5a0-d46d-46e7-ba98-a934b8fed8da", "sighting--21cfb66e-0f72-496f-aa97-582bc093f1b1", "sighting--07e3d2e5-ead6-42a9-9474-7854accf9ee8", "sighting--eb683911-51c5-4406-8b19-f5bad8bcf024", "sighting--2a30e6d3-1455-448f-8238-7971c367d4f8", "sighting--70e4775d-bab5-45b0-8109-3f0b3830c80b", "sighting--65aa0ee8-04f1-46d0-a9f0-783dca20a252", "sighting--aeb63893-cb79-48bd-9772-38b1a70d5e6f", "sighting--7951f123-d583-4363-9385-40eaac36d748", "sighting--f7241e90-1def-46f1-98ee-64f80e3577f7", "sighting--0e29717d-6dcf-420d-bb75-2a7ea6a90159", "sighting--7198ef23-ea60-4a9a-805e-8592b39302bd", "sighting--a9084035-76e4-458e-81ed-cfedaf02b5ee", "sighting--5667eea5-7d1a-4ceb-bbb3-6a69ce219c96", "sighting--e806f0e8-f387-4563-bbb2-7427aa169e3c", "sighting--303e9dd5-b300-47b0-afe9-00dda636bad6", "sighting--0e1fb3d5-e08e-471b-8ed1-77fe3a93b3cc", "sighting--baf878c6-ab29-43d4-a236-fb4d29945c28", "sighting--463696ac-25f8-4636-8c87-b7bebe2b5fab", "sighting--98826739-04a7-48d1-8ba4-99ed053ad769", "sighting--bfea53a5-b289-48cf-ab30-9c1dd2af2fbc", "sighting--af0a61f2-2987-4a2d-8103-6b3da68b1c2c", "sighting--4af3638b-adb7-4c0f-b630-00c5cfbd6097", "sighting--506a842d-1b20-48d0-8baa-ff781a70e568", "sighting--99065aa7-edc8-4bc4-b863-78730db07365", "sighting--89b0ff49-c4d6-4f89-aaff-d50f6b67147c", "sighting--89a15eb1-5c2b-4a38-81c6-5384eba05b97", "sighting--28814abb-585a-42c0-9181-ba69b0718b4d", "sighting--053f3269-e3f3-4642-a0ca-0e8fe3fc1371", "sighting--79cdfad0-2d1d-43a7-bc86-28f8f0351261", "sighting--5df29666-2272-4487-913b-348a4b2ce375", "sighting--9ada6594-8f06-4cc7-be4e-3fb74ba94d59", "sighting--3485e0c9-2d38-45cc-a192-dcf882ee4ae3", "sighting--34da30af-324a-4d30-9d9e-7d460c7d5a86", "sighting--a1959dbf-9ff0-4b07-98e4-9ef98c7f53e5", "sighting--da8375ca-7f11-478b-9176-af2ac3ad748a", "sighting--bdc874d3-1039-4f6e-bc70-638de9ace5c2", "sighting--cf95fd27-911c-40ec-9a3b-67bd6f37c3b3", "sighting--599797e5-c9b1-4418-b8a8-914a4996cb3b", "sighting--64f81bdf-a744-49ca-a460-0296748adfa4", "sighting--0ab78e8d-6d60-4d63-837a-1ba394d9a636", "sighting--9872f4b8-0a0b-4eba-acc5-0dff862160f8", "sighting--d0402162-3a91-4610-afb4-433308afa213", "sighting--2a7befc8-53f3-454a-b658-e59f6e2db241", "sighting--6fa8eff1-4fe4-4e57-b243-65d4a29696df", "sighting--6b973507-d199-4b20-bcb6-52180c75d622", "sighting--0c91e12a-c89e-4c24-90f6-2076877f4157", "sighting--44ccbda6-623d-4dc1-bcbc-cc606b1cb643", "sighting--544d645c-841d-4bad-8e26-5b080e551c28", "sighting--c602e2d7-1351-481b-ab6e-7130ceaffa7d", "sighting--5c0284c7-4b93-484d-b73c-d2afa68e46fe", "sighting--998582d7-058d-4fd5-ba41-da5fa3e35743", "sighting--79fc08a8-9d9c-424b-8dc1-812fb746fd15", "sighting--d4649bc0-3164-4ed5-bd5f-b51813d34987", "sighting--6559f0c8-80a6-41ff-9f16-d5ca1d761bb6", "sighting--2312b02e-4145-4292-bbd1-75501a07c731", "sighting--84e748ae-4c56-45e4-ae72-acbd65d6bd9f", "sighting--e5a830e0-127c-4020-97ac-9489659bc532", "sighting--3813216e-bff5-4d04-8891-158b5dd67571", "sighting--b401f26b-86a2-4b25-a3e7-6b037c5daa31", "sighting--c97fd0ba-f206-458a-9ac0-61e4227ec18e", "sighting--8d8da146-1c9f-4c37-b158-00782713b087", "sighting--c0d2867f-944d-4093-8fcc-73a3899b2802", "sighting--b2808351-2c21-4e0d-a8c7-9253e71eb853", "sighting--2b1bb724-21d6-4f1c-9b95-0a5849aa28a2", "sighting--ed32d500-229f-47af-a824-cfdef69f0beb", "sighting--bcf3b188-4e81-4526-bc2b-1b4924aa1bb8", "sighting--6d1b078e-6e6b-4447-9cc7-7870c8c6271f", "sighting--f02c04fd-7227-42e7-9e6b-f844fab0a400", "sighting--9b566c19-a5d9-41ce-85e7-8193c7b08df3", "sighting--ef720de3-140e-47dc-a599-a57c67332a2d", "sighting--76f117e1-dc36-462b-9e2e-28e4ae09c3ff", "sighting--802d5780-7100-4d10-b353-daf0c12921ce", "sighting--30d04d5f-3fbd-47cc-b4ef-f1b6b2ecb449", "sighting--375b60d3-7053-4f2f-a69e-a07e7e49d8e3", "sighting--f8fcf77e-232f-486f-b405-3699a7f4d242", "sighting--cfa7c51f-35ff-4e09-8b18-70cd04e72351", "sighting--30ba9982-768a-461c-ad19-6f5ab3e52282", "sighting--584dc543-34f3-470a-858b-3956c8a7436a", "sighting--a51e1a7e-9251-4f2a-9e93-e093a240524d", "sighting--8feeee2a-a86e-4dc9-bdeb-c05fd8f58ebd", "sighting--9858c459-d0b0-4cd0-b128-0c4241fee71e", "sighting--04a35b18-4c8e-451f-99cd-a3e28e4e4fc1", "sighting--2a4f4805-68f7-41de-918d-1ac1f675e76e", "sighting--72bfdb26-bc89-4653-8211-96331266c947", "sighting--ee178c3b-3cb3-41bc-9002-b463868276a6", "sighting--da6ed724-a51d-46b8-a7d1-ff98faa3b1d0", "sighting--65dbdd86-a26b-4496-abef-95661a1c23a2", "sighting--2f5ed4bc-464b-4326-8ba7-95b55d270fc2", "sighting--a1f0567b-6cd0-42f1-9f8a-f82ba7492126", "sighting--c68f6dd6-5849-44b0-b019-70b1e44926a4", "sighting--331db96c-6f39-4484-94d8-8760684a98be", "sighting--142204c8-9068-418d-b704-e368f075272d", "sighting--a188ded0-aebf-4456-b482-df237729d0f4", "sighting--7887e2a2-68b1-4e10-b4cd-daac4cd25625", "sighting--9db88fce-aa2e-4ffd-ace9-0f85ca5a8658", "sighting--d660d282-b3d8-4cf1-bd5b-837b72d5e868", "sighting--fd3a7762-cc68-4a09-a0d9-81bf61c5457a", "sighting--a52f58b5-0126-4aec-a389-c824c89585a9", "sighting--9ff35d2b-cb13-4456-9315-ef0f681bcbf6", "sighting--9062508b-af8e-4dac-8ccd-8dad89be9308", "sighting--15e02fca-d6fd-4a8e-b53a-1e3f8e0d3a60", "sighting--f1fa6efd-8a51-4237-aaa1-53edc3084c70", "sighting--aa8a8413-4dc2-4f29-b03b-c1fac2a61be9", "sighting--71876208-edb0-4c6c-a422-4504eeaaf21b", "sighting--d1b8adc9-be6c-4610-8c18-ccae032355eb", "sighting--14310ba3-e4e6-4519-ada1-a232066bd64d", "sighting--28f779cb-69f1-47b4-bf7d-575bbf9bec4b", "sighting--40cdcc08-e935-4e4e-b3f3-0bcbcc70f678", "sighting--c9dfff85-2753-4568-9846-33012e0d083c", "sighting--6b2f6214-f7bc-48be-a4ab-16c0ade6b63b", "sighting--5ed69bd7-0c20-458c-80e2-7fd7759ffdb3", "sighting--f09e3de1-7019-40f5-a428-5e0fac7201ec", "sighting--46c26b0f-1e15-4187-9d74-fc55446f37aa", "sighting--01a8ff01-ad55-4505-a083-163f906f6a24", "sighting--dc1cc293-5c1f-43eb-b97e-06ed6ba0cb45", "sighting--b0ac0db5-b4a1-48f2-bb27-896bedc084cb", "sighting--aedad93c-214b-4093-b8e1-34e35ed0d6ae", "sighting--d0952499-99f6-4cd6-a921-0416e5e74bb8", "sighting--878a7d1a-d5b2-4ba9-bd92-68b5f56926e6", "sighting--c83e818a-6497-4bd3-bfbe-2b2588c43849", "sighting--2c19d477-a22f-4e0b-9405-95f336382669", "sighting--56554c0f-0141-4336-b956-636315c3a01c", "sighting--4d9284e5-8749-43d9-ad93-d6f318a9d7ac", "sighting--8bb0bf36-0b53-4ad1-b867-13bc9b4f0e09", "sighting--099891cb-9dfa-497f-af1b-aba94b292a38", "sighting--7936ae14-0a03-4508-90cf-f8a3f7afda3c", "sighting--7b2448b6-931e-4b9b-b2fc-435e782b56ec", "sighting--8d1fc516-701a-4f18-aeeb-c2fe42466328", "sighting--89f62b95-b0e6-486b-9853-2ff87325d2da", "sighting--0e7e2c1e-7583-4e73-9ab9-f2b0ca1ccc9f", "sighting--32a65c6f-a670-4b67-b13a-fea1023db11f", "sighting--d50e032e-5675-4470-932a-edfa33de7edb", "sighting--6870abb0-f3bd-4a7e-bdfb-f66bbd355d37", "sighting--24036570-ddf8-49e7-856b-7e3db7a223b8", "sighting--125f814c-91e7-42d0-a4de-15c3e93e948c", "sighting--4cf49ce4-4c6b-4a6a-8628-71bced0dc480", "sighting--3a17874a-0d51-410c-b6f5-480278f88825", "sighting--19722d2d-b1f8-4741-b845-e8b6126dabd7", "sighting--f586becb-eac9-4667-840c-444caf4df954", "sighting--2586b978-9ecb-479d-8edc-2717d5eff052", "sighting--cbcda73e-8051-48f2-8ecb-202e0b5fd9a5", "sighting--83a6528a-92d1-4961-8f98-43fbdcd24f39", "sighting--9089b42e-a890-4e45-a029-f9e644a7555d", "sighting--66cd438f-4f46-4dfb-96c0-a4d59bf87b29", "sighting--9728503d-a6bc-4a56-9463-970e830259a5", "sighting--1557f231-0c81-4f5a-a5f1-0a32190b56d4", "sighting--4aa217da-45ca-4d06-86e2-6971d140c303", "sighting--ea7c3087-27b4-48ed-b46a-56af3cb77d5a", "sighting--95d1dd6d-f6dd-4997-b80f-c141aff1d9d3", "sighting--ee9d504c-8853-411b-aa60-c70c688d1eed", "sighting--944f392b-c050-4c4a-a553-b2a93c07de2c", "sighting--4a9df79c-7a63-4307-91fa-2217e5c40d00", "sighting--5d9b3c01-cb6f-4269-b0ad-d66f9f44d73c", "sighting--43c235aa-85e1-4c35-a202-4f5e6a836232", "sighting--19038a0f-457e-4a36-9345-079436516691", "sighting--ec555e68-d0a6-4476-89e8-07c861c06cac", "sighting--cf951bdc-985b-418d-9fc2-a7f8d49b9a52", "sighting--5b2e6651-585f-4624-b416-91eba40e7b5b", "sighting--4d37bff3-4f0e-450b-81d6-4f5192158a18", "sighting--287c28c1-a0f9-4d78-8e05-0f0394e38806", "sighting--f9ea2390-b2d3-40af-8e69-e0c928dac764", "sighting--17f5e76a-e7c7-49f2-9e23-216d6f9ef7cb", "sighting--5d681cef-ed1f-4f23-a111-f99c5bbcdf06", "sighting--95198802-202b-4450-a5c0-c138f0c14e63", "sighting--ca0ac994-c54d-49c4-a0e3-fc88bf8493dd", "sighting--959db54b-f356-4d30-927f-1f02ba158182", "sighting--22516a11-e52a-4684-b0c7-ac0b8b5acb43", "sighting--fadc24b6-af23-4657-bd4c-aeb993d66872", "sighting--954344af-cb6f-432f-80bf-78e8a58e470c", "sighting--80aa4753-0f3a-4bee-af1d-e054c8fff0a5", "sighting--15353ae7-1adc-4c05-94d1-e0283ca31252", "sighting--a0fe8bef-95b0-4a96-9786-973762875898", "sighting--0f4ab930-ed0a-45c2-ab8a-3e81bf9e510d", "sighting--02e96bf5-b94f-4757-aadd-686fff4c5c5a", "sighting--330b051a-47ce-44af-ac9d-7dc19dcfc760", "sighting--92430484-c316-4002-8113-d2c97e346734", "sighting--d129e1eb-c2c5-419b-bb26-3567c1d2c1dd", "sighting--d6d154ee-c20d-4977-892c-a483b20337bb", "sighting--586b9e0d-5209-4ff7-a87f-79bb3562f96e", "sighting--b48b82a4-94cf-40ed-9acb-1144f37eacbf", "sighting--65daf7a6-997e-4a29-badb-3510cf688327", "sighting--e63dc79b-9189-42e1-bac1-7ba117e5c0db", "sighting--1f239b1d-5dd3-43e9-ac3b-f191266994e0", "sighting--e081e1da-8ee7-44c0-aaac-83bea40c489c", "sighting--fe0210e5-e2b7-4a83-8de8-33a898733dc2", "sighting--2d65e54c-f51c-49bf-9253-c84c2a9baa50", "sighting--041bb7c8-232c-43c1-83aa-f44244308e69", "sighting--bb3d8dc8-b904-4a8c-97fb-52932cee6d8a", "sighting--33c9007d-c8b1-4b95-9ffe-b2e55a6f84c5", "sighting--2125f9ec-4ebb-4397-886e-e8755c91dc7a", "sighting--9c6296f8-9a4b-4d42-bb4e-698b742aa200", "sighting--037263a4-7dc4-414b-a7c4-9df0a14f8569", "sighting--e6cfcd5f-40d9-495e-be86-c66eb9f361d5", "sighting--73671c8e-d644-4ce3-891d-88f6f98bf1cb", "sighting--210e1ff2-6c6b-4e5a-b108-7f0002aa2c3b", "sighting--435380ce-cb90-42d7-99f9-f5eebbc2bddd", "sighting--2a44b1a4-decc-4284-8262-0abb952693e0", "sighting--d118b6fb-8ea0-4a8d-9e65-bc244dcd3470", "sighting--c7134e0d-5feb-4c61-a957-065d041705dd", "sighting--629b0fbd-ce24-42e9-9729-6047185a898e", "sighting--5f74f5b0-df6a-49b7-a593-e4d205efca24", "sighting--24ec0857-def1-4187-a473-cb4337a7bf4e", "sighting--cfdebf6b-a634-4b34-87ea-72b72d87ca8a", "sighting--021d6d0c-cd17-4a32-b99d-10794c37ab3d", "sighting--7631fcdc-1a04-495b-8206-89bd37f3ea69", "sighting--4c29099a-0507-4af5-ad5e-6f1f54070a1b", "sighting--672e8fa0-4a1d-43c7-9ffe-5b97c83040c8", "sighting--2d9230f8-8c7a-436e-9cd7-00309beb8160", "sighting--3b460b0f-6c66-4242-a9a0-d05a144014c9", "sighting--d64c01d7-bf80-47e9-8d38-e68a0d325670", "sighting--095a2ee7-67ed-465f-a403-4c0e3d071668", "sighting--2383fe12-c5a9-414f-a6f3-59801724ca63", "sighting--9fb8a0f1-bff0-498b-ab63-45f9bf590207", "sighting--84ab683d-df50-4909-a57d-e1e1634c58ee", "sighting--57d01a9c-20ae-4dac-be1f-b29ce4dee5c7", "sighting--ff85007f-353f-4ba9-8a07-28d3ba2264b4", "sighting--851aecd0-96f5-4d84-bfb9-23d1e34f90ec", "sighting--894bdb41-92f4-4538-a031-b99a1272c232", "sighting--c12b5c18-a02f-4fa3-b86c-0f55f2857b06", "sighting--df0ffbe9-ae0c-403a-82a3-4bcb216275b7", "sighting--68031559-fc59-4daf-99f2-50b3da56593a", "sighting--0ac3ad03-7e38-484a-a6eb-4b3844d58b17", "sighting--25295629-7fcf-4011-b940-36c941aaa495", "sighting--0733c882-4511-4825-9838-6396e61208f1", "sighting--e9be9087-4a63-4b35-bc0c-f7bcdb9ef947", "sighting--6aae551a-bdcd-4ed8-aef5-c83681b78253", "sighting--9074f083-97ff-46bc-b7c3-20ca56a1c055", "sighting--e8f97aca-f339-4c2d-96a0-d0b206a62030", "sighting--a5328e97-81f4-4368-9bac-e55e72885ef5", "sighting--25450304-26e6-451b-9f5f-ed10530ff1b6", "sighting--c68255ee-67f0-4d5e-bfc9-6f6a7521c5b1", "sighting--da32265a-13ac-4cbc-bd4d-3fe78d23ed6a", "sighting--3856a0c4-70b2-4547-ad01-edb4129f5b6d", "sighting--a9d83c1d-8c2a-4a4f-9ac8-d994f2d10a61", "sighting--ab18d910-7dad-4e93-9042-4444f956ce5d", "sighting--cbf87209-b33f-41d3-a382-8f29a0430327", "sighting--1afeeaed-6d7c-4a55-a56c-a123937d6dd7", "sighting--56155f03-acf1-44cd-a3e6-89e8db55926c", "sighting--9d7979e7-6fe5-43c3-92ba-e3f38977b975", "sighting--cc4c1311-a912-4eea-b68f-b38ef4547d6e", "sighting--84181831-6b8f-41cc-b73a-19c57dc3d934", "sighting--8f058dda-2e2a-4188-8b0d-f2cf263d0d10", "sighting--db892360-b097-48f4-a6eb-0d0b2eede1e3", "sighting--ac9bba68-1235-446c-b313-d4cd328c7c00", "sighting--a1491c9d-b0e0-4e46-bbeb-5c32e86d46e3", "sighting--3ea50e2c-0527-49c3-ac99-df90feadcdf3", "sighting--4ab7056b-fc9b-4e2d-8809-5c7daec4b8e5", "sighting--8d275958-9c40-4d8d-9079-4cff2c551c6d", "sighting--2ee017ef-0372-490c-a874-a3f4bd903d50", "sighting--cee31d0e-f03c-48d5-807d-36530072622e", "sighting--458d6962-c95f-4f21-935d-8396b0db0464", "sighting--1496b315-a51c-4bea-85cb-2f89c9d398fd", "sighting--bc01e4a0-0262-4083-8021-572696f429cb", "sighting--b1f0fdcd-7b80-47df-944c-bc7cd1c834f4", "sighting--27a3ddbc-9d31-4e27-be81-725d289d1bf6", "sighting--885f4a48-05cf-45d3-9745-738b7a91c9a3", "sighting--9458e7d4-2171-4bfb-a53a-1bcf8c73e700", "sighting--d1a9f482-5d9c-477e-b80f-5cdb00f70bc0", "sighting--8f321b0d-52b2-4000-880b-9ca1ed20ea0f", "sighting--d85fa39a-e559-4faf-8f3a-f56c597939cd", "sighting--e397277a-de49-4c8e-abf6-92fe1c539bad", "sighting--35077567-e559-4b78-b4d3-ecd756d8e70a", "sighting--d8c4f4ec-8c81-47f4-be0a-45a1483a1d2a", "sighting--a1020d17-5398-4545-9d77-bd7ac5aedae6", "sighting--d362a9a7-1cbb-484a-8df7-22cdd4d07a79", "sighting--b05c34ef-4ee2-4b19-ba0d-03b0eeae0281", "sighting--c8d66f36-1f9b-4079-b6d8-ab89bbef0f29", "sighting--49f44070-c2c9-4ae4-ae81-1ed1690634e0", "sighting--25ce5d1c-9879-45b5-b5fb-4d63705388ed", "sighting--32c9c957-1360-4468-8e38-6585bfe24dea", "sighting--fecccb6b-4983-482f-9e47-d3e4c73c1d65", "sighting--bb066e99-35fd-4d42-9758-9faf8fdd716d", "sighting--c243ab0b-74ca-4b01-8da0-d9566a594eed", "sighting--0caf5e92-3f23-420c-b014-bc8d6ddb80d0", "sighting--5fe38b28-06e4-4872-b1d6-21dc4a374224", "sighting--12971f03-0e2c-4193-999c-e4b9b50592c4", "sighting--ff1ae81f-56e1-48f4-b5ea-621d8bb6d3a4", "sighting--8faa9157-3605-4764-af68-c1f827630d6f", "sighting--36193bba-c5a4-46f7-8855-6037e6c5c2b4", "sighting--5cd1f60f-9d6d-4661-aeaf-9c7f2e6e60eb", "sighting--0b47e5d3-96e0-4c80-a4e9-9e11de21e391", "sighting--e2fc19f3-924a-4afe-9045-7ba26d023037", "sighting--6933c39a-9b7a-46dc-8843-5a926828400a", "sighting--0e5ce8d6-7821-45c2-8bd4-e9d60cfe98bf", "sighting--a30d18dd-b645-4c76-99a5-384a5115d22a", "sighting--a5e5ed86-54dc-4a5a-b675-abadd177289e", "sighting--0c1f50fb-780a-4a26-b1e1-4bb247807b2d", "sighting--5a7e215e-7ac0-46d7-bd61-11fbb3aa4766", "sighting--18c67013-e836-44fe-abe7-19c2936ed43b", "sighting--f0ac5e8c-f11c-4fef-8544-086d3c061575", "sighting--e9a4e8ea-889f-42e5-80e4-7683d8d8ce8f", "sighting--2aed8538-4266-4aee-8194-84b26e57ca4c", "sighting--4ac7cdb7-883d-4792-8937-307906656848", "sighting--794fe1ca-840f-47ab-b8d5-00ad1cc33c3e", "sighting--012013d4-4fa7-46c9-8d07-936f93065329", "sighting--7b02a853-e5e1-4cf6-af78-978988bdc5a6", "sighting--15dec546-666c-409d-af83-270aacd316c0", "sighting--2acb1779-9d59-4ed8-a03f-bfd3161f2220", "sighting--22c96d8e-a1b3-48dd-a691-48e73be1a20d", "sighting--df0ca449-ad8d-4c61-a087-457b4fcdbf48", "sighting--b37712f2-e7d4-4fa3-831d-d66ea5fe3ed9", "sighting--de4c1aeb-c64b-4812-802c-98d46fd1160f", "sighting--8243692a-f23b-4cad-8b82-8fad37e536ef", "sighting--8afa76b0-96a5-4808-b7f3-589f5dba8e45", "sighting--6b67b685-b92d-46c6-a035-481d9360ee0c", "sighting--17abebe1-eca1-4eff-bd22-e93bfcb2a0dd", "sighting--024008a8-1813-41c0-b0df-b11597bb8ae9", "sighting--a34cde48-7724-48c0-b3dc-274ef6dbb058", "sighting--aa39662e-220d-408f-a355-41b1daf432cc", "sighting--e82b86ae-97f3-449b-8613-b138b7d7c7d1", "sighting--6687c7d3-57b5-4cef-9d10-e35bff68274a", "sighting--4d947a45-857f-4b26-9666-0894314ab35a", "sighting--3258d612-352c-452f-8c73-98b6bd3eb400", "sighting--685a9cfa-7c57-470c-bc81-8837a24138be", "sighting--ce7c1398-c2f5-4c50-af16-2a1c2eb668c0", "sighting--6d97b48c-68e5-40e2-ab64-d6d0e859a74d", "sighting--b4dc9ab6-afdd-4187-a20d-fadaae6cb2d2", "sighting--2afc3d4c-ecd8-4b27-a78a-68455cd49f40", "sighting--b9e98f4a-1f23-4616-827a-0f7445917f7a", "sighting--35319cc6-f9c8-487a-8ef8-53ae02d30a64", "sighting--e561d16e-0836-4e9e-8f1c-4a24f90d8060", "sighting--4a3619a7-8509-4338-874c-5cf7a3f98996", "sighting--4c308a77-f144-42b2-9a94-c675227e4708", "sighting--17f1e240-0e61-4e49-88f9-f6c28d339d09", "sighting--fa05cd9b-9c96-4458-ae6e-8c1a0862d327", "sighting--7449063a-83dd-4d6b-bc0e-6cfd4a09e68f", "sighting--eb3f729a-679f-4b09-a0d9-6e88e59f714e", "sighting--1c430618-07d2-4ee5-a259-6ab7168a0eeb", "sighting--494dc39d-da8c-4d5d-8939-ac7b1123c09b", "sighting--f17a66d6-a620-48ac-95a8-f8660e951865", "sighting--f245f06f-0763-4d85-aedb-208aff6cc22e", "sighting--0a54dfe9-bd9c-4c53-b689-be4632b80235", "sighting--324e2f4b-ff7c-467b-8199-572d52a36a44", "sighting--2aeb5f33-cd2e-4bde-8c15-a0f460d44ef9", "sighting--d7fbd65b-6f6a-4ed8-a79c-60bb91c9e81b", "sighting--43459246-cd05-4d3c-9538-f411adebb23f", "sighting--9bd0dd24-bcd3-4ac5-bbad-df02e7383d1c", "sighting--c468a942-08c6-4754-8f7e-b61e30c5ef1c", "sighting--643ec486-0e12-4b84-8e45-140e97717db6", "sighting--9d8e17b8-1c07-47be-abe9-31f9b85dc9fe", "sighting--d4e45e76-f8b3-4c57-8b2b-cd37d2c845f3", "sighting--ee098dde-d344-44ab-acdc-94a76da0847f", "sighting--02109662-19ce-44d6-bc12-53b9fa328aa8", "sighting--a3e2ad3c-fd6e-41f2-b242-586912284d92", "sighting--97102008-bb3d-4b50-aa7a-0251dcf7ea8c", "sighting--734ae2c5-e922-4757-8349-638e97d5305d", "sighting--bf08e746-ff3b-477a-87f4-06df89a720d3", "sighting--46e9e912-ab32-4e53-aa1b-24b416e3f812", "sighting--b44c901c-f69b-4dbc-87a3-2bd4e9558140", "sighting--e40bb450-8098-439b-b614-e555bf649b84", "sighting--6dbf3722-63ba-43dd-a31f-999791b3fa65", "sighting--2f19458d-9706-4b45-a5c6-056138d30c2e", "sighting--3c5eedd8-35f8-4a83-9b53-751ad37647bf", "sighting--575d2dea-dba4-472c-8a2c-58a81cb26a95", "sighting--c55f7bf6-4f62-4dca-a46b-aac4b3047ed8", "sighting--815314fb-7d5b-4181-ba9b-8f57b3a3f335", "sighting--9cfa6fa1-0898-4546-8cc7-145efec78789", "sighting--fa119303-aa63-4e80-ac4a-9b6283c840c5", "sighting--84f8957f-d1e6-43bb-8939-b28f32574e47", "sighting--fc3bc14d-2d35-42ab-9634-55df089c5501", "sighting--807c0e70-6bfa-41c3-850d-e9ec85d3ae14", "sighting--3a290c39-6103-4d05-ae1e-76165dfe4004", "sighting--2d4201f7-0282-47d8-8658-7d3ab957421e", "sighting--e769edc6-b048-4b0a-a505-66259258f923", "sighting--dc2f470a-09bb-4d7a-a7a8-3fdae9646f13", "sighting--fa77a00e-10d5-46f6-9f13-dabd377ec61e", "sighting--b7713b14-ab72-4402-984d-cf8ce174a9e3", "sighting--c97d97d0-5600-4b21-83ab-5557c2a5b1e4", "sighting--ecce5687-5716-4fe0-931e-ecd758d48c76", "sighting--201d60f7-23a2-497f-a7fd-8dc4312d8bcb", "sighting--ca679331-147d-4b73-acd1-e34b4f43630c", "sighting--3f7d18fb-6de9-456d-84dc-5d5b37e9c26f", "sighting--e234d173-dd6c-4b2e-858b-2fd2614ac46c", "sighting--2b3ff83b-7189-43b2-ba8c-18b8c557f620", "sighting--d72d8859-46d9-4f35-b662-07d0ecb4ccb4", "sighting--71990a22-0b26-42ee-84e8-382aac3a6beb", "sighting--2db3fe86-bd00-4f18-9d26-234edeef442b", "sighting--24c057c3-c24c-4525-95f3-a1b3387368f0", "sighting--5ca7d98b-485a-472a-8ffe-ed37caf3e5c8", "sighting--0262dcac-a74b-4d80-927d-55551b26ae07", "sighting--b33fe9e4-dfc6-4551-bf84-242c2e2d2b6b", "sighting--1f668ffc-f14e-497b-a5cb-bd80889eb5b3", "sighting--1eaca53b-6767-4ab4-bfce-6caea8c7faeb", "sighting--1a7e1cc8-c287-4ab4-9415-1be2886a3949", "sighting--071cc36d-139d-44be-8835-f187ff0ca669", "sighting--b0e10695-981b-48b2-8110-02f8814a8575", "sighting--17deb289-c830-48b7-aa70-3d79b52656e8", "sighting--cad8b5e7-5a1f-422b-9102-5bd8bd3351c6", "sighting--c35569bb-a4bd-4c1f-ab3f-98db0532442a", "sighting--9435e39d-620a-4b4a-a81a-f3a187f4a65f", "sighting--431a79c0-23ac-499b-86cb-c13556dc1606", "sighting--a2b8930a-5117-4643-8ef2-788d32c1bc45", "sighting--614676a6-4fe0-42c5-b26d-494f70971389", "sighting--348eb65d-af85-4ee8-ab38-b3fe8e3af74c", "sighting--0a32b5cf-02e7-4bcc-8673-eecda3ba173e", "sighting--54d8ef37-4d79-4d21-bb97-4e535bd8227c", "sighting--0a702468-f247-4cde-bf95-bc6fb1206dfa", "sighting--577a90bc-dbb4-4c1c-ab7b-abb0b27419fd", "sighting--ec6a814b-2f32-458b-b310-fc2c462c8807", "sighting--c7f9fb82-e4e4-4fc2-abe9-5fc847783555", "sighting--1b4ae1c7-a58e-451a-ac46-d30771ce367f", "sighting--a52eb04a-ba68-4e13-aa56-0d826429778c", "sighting--38e45a13-ab83-4820-8b63-9cd2197468ea", "sighting--8cc813a6-8dfa-461a-8e79-091ddefe91d7", "sighting--4099eec4-d43c-4288-af91-970237fe3846", "sighting--9b8278fd-4504-4fd9-9152-df5393122618", "sighting--bee5a866-42a3-4a4a-9abe-01ad27fe9c16", "sighting--8ceb2037-e24c-4b5e-bff8-08f21a3db4fa", "sighting--0052ac55-b485-43e6-b58e-b472e25328d7", "sighting--b91a4860-35a4-4d52-94fa-83a95c154a17", "sighting--f1ba886e-3ad9-4f1c-8ae3-d723fb7f46d7", "sighting--5e63fe4d-8ffb-45a1-bec1-34847311f336", "sighting--a69af9c3-d63d-454c-a359-ed60101cd8de", "sighting--962ed23a-15b3-492d-88f1-6a6ef3a6f7e0", "sighting--ed211183-ca70-4f77-8231-b93cb0aa0135", "sighting--55121118-7966-472b-bf1f-f36434a2a5dc", "sighting--85064b00-ffea-453b-b5fd-a89c41ef29df", "sighting--07bb5509-2599-410b-8c6a-63eac2c646a2", "sighting--1c54341d-0ea3-449e-864a-a9c0592c179a", "sighting--85583480-1784-474a-a4ea-b21462ff9493", "sighting--f493e1a4-9dd1-4473-8cce-20b3fec24ba2", "sighting--4572eb19-f83a-4c60-b24b-a9e7358cbadb", "sighting--bc7777e5-6352-4db2-ac15-cca7e5fc2fba", "sighting--c6b868e6-0cbf-42da-b0a5-c0a10eab6ba4", "sighting--669e2c8e-776b-4f07-9fff-d5e626db5bb7", "sighting--1756e39c-554a-4cf7-93ff-466d9e53ac81", "sighting--e76f8062-ff49-44f7-8522-5aab719fed14", "sighting--37529c18-553e-4e9d-ae90-a4af78bf64a7", "sighting--45de8e32-8be8-415d-8282-25d59497100b", "sighting--abab2717-b785-4b2e-aa03-131f7c2720b2", "sighting--947b0fcc-9f14-4a8b-a7d5-88e1298487ef", "sighting--d7cce827-711d-49f0-be95-e7a6e3e2ab57", "sighting--f8dd03f1-2568-460a-b45a-840d530d215b", "sighting--03b8fc2f-83a7-4ba8-8178-556cc87d1946", "sighting--3654da09-7c14-4e2a-9c32-cae053a2d54a", "sighting--63917860-a9c3-422f-a1bb-58d776089087", "sighting--b270ff19-932e-4da3-84a2-25b6219a15f6", "sighting--2700a6fe-96d7-4890-bed7-5b6fb397c0fc", "sighting--72f6d720-9b5c-42ab-a949-f5ed47a8b3b8", "sighting--e60f03e0-2732-4b2e-a9e7-662c18bf47ce", "sighting--4cdc329b-80fc-4f3e-81eb-a3694c169a81", "sighting--82d82584-ce1a-47b1-b432-29176ad00804", "sighting--2697be3b-0d88-4c1e-b8ea-786b64dcced0", "sighting--c5c3789a-f7ce-4d3e-aeb0-4182f9694484", "sighting--5eb3c927-a186-46f9-81e2-f6e799d33936", "sighting--9ebe3027-7dc7-47fc-874e-099a73cae070", "sighting--93bfec94-0deb-4cdb-9fb9-c7c91603af4f", "sighting--72b3ac4b-aac0-4cbf-942f-d2545248c72c", "sighting--9da9e767-45e3-426e-b161-1bbaf6c6142a", "sighting--3d459f56-cbf4-4760-8801-1f1902a386fa", "sighting--15718ea5-5ad6-47d6-b6a2-b5819cbb4a1b", "sighting--8e282e15-9c54-4d3b-9ee7-78b4c1f60a93", "sighting--e7fd50dd-c19c-4ca7-a8f6-03db0de8cf35", "sighting--c62fcdec-848d-438d-8926-ce1bd62775a0", "sighting--fede13d1-4f2e-4aa8-81f5-590685ee87c9", "sighting--f388bf12-659a-40fc-b0c5-355141bd7476", "sighting--ab462f35-4a05-404c-bdd7-80f75bedde23", "sighting--94bc85be-937d-461f-b9ab-aa50ca125628", "sighting--e8398d88-28e3-47bb-b1f4-c652dc346259", "sighting--1828f91a-f672-4fc3-a1eb-a054695b379d", "sighting--87f2f577-ea28-494c-b8e8-93c838d30964", "sighting--d9b7c9cc-4a23-447d-974d-a77c4c333ce5", "sighting--82e7e46d-4948-4620-aa95-d696d7d091a0", "sighting--1aedab08-0303-4e0b-b568-ad0b4a920256", "sighting--3865a1a2-3ade-42fd-83e9-ac00364f1977", "sighting--9d987d52-3b00-4921-af8f-4193607d90fe", "sighting--75629088-6cb7-409a-aab9-60d24931a601", "sighting--4a536026-123a-4a20-b696-37f949012519", "sighting--dac7d577-835e-451d-89be-d3bcaf57f3a6", "sighting--e443c1dd-9e6d-4cf3-ae19-3be1493e3f5b", "sighting--000c9bab-a535-4ac2-8fea-d35bd2a5198d", "sighting--2938e030-7690-4e1e-9054-de0e191f1d72", "sighting--0e6234f9-61c0-4505-aa67-d9c2b4cd9579", "sighting--11986160-2898-4775-9c0c-2f1c29e5c254", "sighting--da63b32f-0576-42af-8ed6-bb3615198440", "sighting--654dfa07-fecc-4fc2-8357-df5bbfe1cfe2", "sighting--ad7443b4-fcf1-4872-bc2c-8a0b955cfeeb", "sighting--4bf786db-0421-4001-91fc-6b3e5e9e72b0", "sighting--c768c0cf-5ce5-472b-8da6-54ada3f782b1", "sighting--5741e3fb-137e-4704-b838-57f63f92a3d4", "sighting--1df8510e-add2-4c9b-bbaa-706fa897fd4c", "sighting--a62111ad-55d8-4a71-86d0-2ca5e8570523", "sighting--58a85bcd-dd20-4a97-a645-9077d56f2c73", "sighting--a4419572-7cbc-423d-8bfb-27fd7d3e3263", "sighting--51d2b3cc-4efe-49d1-95b0-8bf85f3a59eb", "sighting--1528ac0c-11dc-4e0a-a097-d187d8d67241", "sighting--68de7a6c-c12c-4a5a-967a-9631fdc201d0", "sighting--2730042c-e542-4364-aa8d-4e1f6f5fb7f9", "sighting--e3f858b9-0d0f-40a3-adc0-ecd17603dac8", "sighting--ad76fa5c-c6bf-4239-b368-42f4ce569eb1", "sighting--fafb4f85-329b-44ae-8986-c01f5f69eca5", "sighting--f9d9ff90-d776-4e77-8580-24fdf146840d", "sighting--24f804bf-7e6a-4f21-82fe-9f09aa8f80ea", "sighting--29093471-3dd7-48cf-af12-71681215906b", "sighting--84f97b52-5ce0-4d2f-81d1-7ef246f036d5", "sighting--3e84361d-838d-4d85-91bd-9973af0697e0", "sighting--67b522bd-a0c7-4245-ab68-76c3b338e258", "sighting--66bca604-3502-479b-9f03-517f8b3a5eac", "sighting--b33cb949-d939-41ca-bc42-24e88fd28d9a", "sighting--286263e8-205c-4c40-9768-b04273de5820", "sighting--24136622-4771-40ad-bb14-711714261cfe", "sighting--a272dbb6-44b2-41b6-815e-6048d6100dbc", "sighting--4506f494-293f-4664-af86-607d25f6aeed", "sighting--dc92b699-9177-4182-a469-40f1449bf977", "sighting--ecfe8e80-4107-47f2-8f45-8e27fae02838", "sighting--05931240-1704-482b-b951-e80cd034d790", "sighting--8b401f3c-8093-492e-b705-bb69e18023fa", "sighting--656d9fc0-baaa-45d4-a83b-d811f45d7d7c", "sighting--68a08748-bacb-424d-af98-af53cdf23aea", "sighting--891db2e0-6f1f-4d80-b6b6-7f0635defd91", "sighting--70d3e304-b58b-405f-8b7d-c1326bb487f4", "sighting--b20c300c-4ad0-456a-a9c0-91f144593783", "sighting--35cd3745-4304-46c3-b9dc-6f2b1ba62c4b", "sighting--f3015f81-d269-4869-9cb8-9acdd8a65e04", "sighting--6a7cd72d-17c2-4f72-9c4a-658239dcb404", "sighting--18deff58-cdf0-48d3-aa5a-51aae38e4fa9", "sighting--a746813e-cfc4-432a-9f86-aecff3aafa38", "sighting--006d137f-48b7-4bf1-9c6d-b801533e5385", "sighting--78586995-54fc-4d6a-b440-5d8a816a3d4c", "sighting--69a0620f-eb14-4357-adab-9bab01253c57", "sighting--3c445d5d-b1dc-46e6-8986-c9c6ed04622c", "sighting--12cd775c-9883-4ddd-b674-a3577d3b90eb", "sighting--4da854d3-9dda-420e-b3fc-723c8edf2112", "sighting--8cd8bb8a-9fba-4592-9ecb-a8858637a00b", "sighting--1eca10e4-9e6d-4259-8801-fdc71ae78363", "sighting--06f73c8a-88e0-4cb4-9adc-a3888607e053", "sighting--86dc904d-7241-4ac5-af45-1870132e7c84", "sighting--7c581609-e5cb-41c8-8a03-e750e040c530", "sighting--a8275b5a-b4fa-47db-af60-7e8736f32b6f", "sighting--fa2525c4-7306-41ac-8611-709daaa6fa71", "sighting--b563523b-bb34-44b9-a88d-c3efacf13f21", "sighting--4f3ba1d8-6ac3-46b8-84b7-58f8fdef1f28", "sighting--feb176d4-bf12-4268-a801-02a080db588c", "sighting--cf1d60c1-1d8b-4350-a9c9-dbaaca125d45", "sighting--b2efc5f0-18ef-49a9-aad2-762b8755aad5", "sighting--5b71fd7b-94bb-46cb-ab22-3b9300636bde", "sighting--8cc28c80-9fdf-4909-8455-9af41d73db38", "sighting--194f1176-d8aa-4f9f-824b-db16057368a8", "sighting--de419d78-1ca4-4d7e-90b4-d2b82ef34af5", "sighting--d7f4b180-6579-4234-a9f0-1eb2fbd6b63b", "sighting--c41b8c4a-440f-49bd-9d38-c1b79ef5052c", "sighting--9bac945b-b60b-4849-bdc4-f8349b5a7508", "sighting--c3dc952d-2d95-4e0b-951d-2a25962eef47", "sighting--9a0b8c55-66d3-4aaa-80fb-44214b7eafcb", "sighting--4d779af0-044b-47c7-86f8-e891877c5333", "sighting--bf397af4-7308-4549-9af1-e9077e95b8b4", "sighting--5dcce5d9-642e-4c26-ab33-44f15660110c", "sighting--fcafa3cf-30c9-44d0-9068-4933238e3306", "sighting--da3f8ae7-4549-4622-8165-131c1569ae80", "sighting--b4535ea1-3b6a-4148-9623-780771418508", "sighting--2a63d599-74aa-436f-9530-b389bf540601", "sighting--3eb9c55a-e35a-44c1-bfab-6a68c41a8953", "sighting--c6988f3b-1dd7-4071-8c55-1b667f88c2ab", "sighting--4409a5a7-0b6e-4361-ac5b-ad15feef0120", "sighting--35ccb164-031c-48ce-bd43-840bf82df1ba", "sighting--d1da9a74-4066-43ec-bac4-9a5f31518219", "sighting--d5a8ef5b-c5af-4bab-8954-401611a69eb6", "sighting--c1792baf-a852-47c6-ba04-592514a08b76", "sighting--439401aa-9827-4d2b-989f-fe26ce840256", "sighting--4363be5b-f5cd-4532-bce5-a2069fab026e", "sighting--7e582bfc-ae1a-41e3-bd79-1239c57ec2fc", "sighting--439335c2-6e56-4c45-be8c-31073f522b8c", "sighting--410525d7-47cc-4e2a-9df7-4e2c6c6381d4", "sighting--78c0a688-c9db-45dc-b23b-364e7b724183", "sighting--bf8c5f42-d4fc-48aa-adcf-5bba7ee51b7e", "sighting--9dc0e6af-503d-459f-97f7-5582b8e40959", "sighting--ab3200ae-ccc5-4155-8702-a51682925fae", "sighting--b19c3a53-03bd-445c-9a87-e428266e463a", "sighting--423a321b-f0b1-4881-8e8a-941856cb0b75", "sighting--a588d4b5-4e65-4a40-b671-385b5018c636", "sighting--906cf16b-b935-43db-8b60-81bcba0c422d", "sighting--23e67508-f24f-48c5-805e-8dd3b7a2ac12", "sighting--7761b671-f4b7-4a1b-a701-481325c89aaa", "sighting--2c1e6f93-2183-4f24-bc14-53f418a3abaa", "sighting--36829a2a-b0b0-49ed-b619-0d60d18403d1", "sighting--eaa1f849-06e9-49dd-9f36-d34c1c21cb86", "sighting--08ca3573-4913-40c4-a41f-57ee61480612", "sighting--38918b56-4490-41fe-97d5-f892507bf3a4", "sighting--3c8527c5-317f-4a4c-9df4-af864ebd0826", "sighting--54106fb0-33ec-4896-a826-5514876863bc", "sighting--e713f289-29d5-4b37-855e-e6563a903bb2", "sighting--6e100ee0-db96-4d38-845f-71eda31db349", "sighting--efbc8ce9-d381-44b0-af14-0c5540102a35", "sighting--5761c5d9-27e9-4ffd-bc26-d3c3f3b8851d", "sighting--466fdbe7-4155-47ed-bb16-b650064b8ab8", "sighting--c18b1162-42f8-41e3-9be7-964e25bd48fb", "sighting--e237fc81-309f-4dbd-ad04-ddcc717cdad9", "sighting--d6a4d5cb-bf64-4800-8df6-e323661d7cc3", "sighting--e73b6dd4-87ac-48de-b246-b4de0ffd4544", "sighting--04b7ebc9-c928-42ee-ac66-7ee3ae50b0b3", "sighting--f2dd2649-f500-4949-8de0-7e2659b63bfb", "sighting--8efb31b1-f0d9-458c-9181-dcd102765e1e", "sighting--6754d0f4-6453-48dd-b543-bd58aa49d0ec", "sighting--bce00a3a-995c-4c04-a09b-0675d9f45998", "sighting--1ef45dd4-286d-4840-a92c-1a837dc7affa", "sighting--1921da4f-0194-408d-8342-c589bfb72ce2", "sighting--9b184bec-115d-4022-85cb-f8056c6022a7", "sighting--cf027622-b256-4b18-b252-707df9b8868d", "sighting--4e816de7-11fb-4ae9-964a-a94c2b1323dc", "sighting--e7ace217-b1ca-4802-8965-047d8f4a6a87", "sighting--99dae796-e5ab-4351-96df-4036afd27acd", "sighting--f7e51dbf-0367-4c7d-9ddc-33ed597c86df", "sighting--46a63d44-cc23-4833-b2a2-9e09ea251a2e", "sighting--cee32269-ff7f-46e7-baf7-950f7784f3ad", "sighting--1e2001e4-59bf-42dd-a5b5-bfcce4f1fb3b", "sighting--ec1c65f7-8e27-4252-8d75-a2983a510d39", "sighting--3304dea6-0f13-4cb8-b634-238eeb1ad7b7", "sighting--d47ae3f8-49aa-41a8-a8df-7a8abfb42131", "sighting--c4b531e8-7079-4849-95b6-e9432b00632f", "sighting--28ed7bab-07bf-4647-be9a-20b7595247aa", "sighting--9c636413-d66f-496c-ac6f-715e1dd64bdb", "sighting--24d8fe88-48ae-47e5-9293-705e305d5816", "sighting--4a28aec1-b9f6-4b7d-ae75-9730ed186b85", "sighting--7219d4f6-3d98-4451-9ef0-624e76505fdd", "sighting--e31590f2-cb4c-4bdc-a8d8-fe80694ce78d", "sighting--906f1d42-9f4c-439b-bbdb-ac785a1affff", "sighting--a0b89638-ef08-49c3-bb85-0fad2c78fb68", "sighting--87fe0c94-a184-49fb-9e6c-e7d88f039d29", "sighting--8ab1e2da-ac44-48a5-a03d-0af49e16140e", "sighting--ffbd9f87-b0b5-47ac-b5e5-b226b95e7df6", "sighting--12886d50-c9b8-4ec7-88a6-8be94d943f0b", "sighting--b8dbaf54-e841-4818-be4a-ae6acc4d9115", "sighting--36dd6d8a-707c-4184-a541-272760adcf7f", "sighting--3ca35819-5e0f-485a-b277-7fa39b4be3cc", "sighting--b33253c6-02d6-4ace-bc9a-907c6a6c6aef", "sighting--239683a1-bbd2-4583-8967-40b2d3e8d310", "sighting--52c87b33-3c4e-4f8f-9038-33dc88679af4", "sighting--53b0ebfa-f151-490a-9c01-d9a4264c5a11", "sighting--0a4c68c4-1713-4aa6-a1e7-1114c0322e08", "sighting--71e95c58-4121-40b0-8e34-c82803d9b825", "sighting--44883f1a-16e7-48e7-ab49-c5ca4b988932", "sighting--553830bf-2dd7-42d1-88e6-d37c82835e4f", "sighting--003ab979-8347-40d7-8616-557e6fc68059", "sighting--2d42654f-6c4c-4256-9365-1ad9e4a11528", "sighting--858219ef-d01a-4350-b39b-5e8fe60d5ea9", "sighting--bd2645d4-e64c-4069-9362-9463607cd527", "sighting--b5b70e5c-fa8f-4b81-b079-9be7e05d99e4", "sighting--a6f99804-823a-4ed1-a5a1-a314c0b900e0", "sighting--7b20584d-9cf3-4858-8f2f-eb95b18b75d8", "sighting--556f6a93-e542-4373-a6b2-e3ef5ddc6591", "sighting--5377f8c7-17b0-4b39-b8bd-66756a8bb70f", "sighting--9d9ad207-1343-4b4e-9455-41a53a853f19", "sighting--e4ea99c8-0997-4e1e-8ead-52b4dfa1ef75", "sighting--16c92afb-02d6-4be6-88a9-324e652a2c4d", "sighting--e05e8c0a-3024-4ee4-bf00-e5c8bbcd5e7c", "sighting--b419a756-2bb4-48b3-a5a2-d3ee649eaf92", "sighting--bc4db33d-0fb7-4123-af29-7f08f8d5e8b5", "sighting--f65be0c3-3cf9-4dea-832f-a72a0d1e56b4", "sighting--e18d1aa3-90cd-4da9-93c6-97783aa4a1cd", "sighting--a0f4be43-415f-4842-8300-4549211e60de", "sighting--17c4b72b-b8e2-49ea-be82-57fd443d4f87", "sighting--0740bfaa-fc00-421d-8308-2403b1709e19", "sighting--ec315370-38a6-4e59-9fd6-cef5c0ed8953", "sighting--7d1690fa-9fe1-4981-af52-9f5e7d00a509", "sighting--56a8c84a-7179-426b-8cce-bd21dec6d14d", "sighting--1ac506d5-7827-4ff9-99b9-2622cbb31ccf", "sighting--a183f57c-7203-4f17-b082-7f84e00da2c7", "sighting--cc85da56-c979-4eaf-8d43-f967463c83f0", "sighting--ecb602cf-46a8-4d50-8557-e16070385c6d", "sighting--fe6018cf-2522-4c63-8e24-577b78da24e7", "sighting--07dbd3ca-3885-430e-9769-8e3e62ba1124", "sighting--f265dc75-ab5d-4f49-8415-7e0f2def12fb", "sighting--e315e035-97b0-45e9-a105-272c28e632db", "sighting--acef73ef-3304-4f1a-8277-64db7ca93e16", "sighting--01a4a412-0b93-4993-a2df-ea11f0e604ac", "sighting--34a97d76-0d50-442e-91b6-0f47e6d3546d", "sighting--373a01dc-7e78-4b98-a30d-267b97c7ed37", "sighting--cc18e39a-7b60-4892-824f-f81b6987a4c5", "sighting--3c9a8cfe-df07-4065-ba31-acdc989d6557", "sighting--cb9dcebf-d2d5-4a63-bfa3-64be2dea0da7", "sighting--723d62ed-387d-4355-97e1-9a4c74b8244a", "sighting--6029d60b-991b-4453-86a0-b82f88090e6f", "sighting--cda18346-f237-4d5f-b7ee-51c1ac42ee6b", "sighting--b5cd720f-5648-411c-ae71-c9b5d290530a", "sighting--ad58a829-db32-463a-b847-c493a309e9c7", "sighting--3185cfb6-aac0-45e2-bbc5-67d67e081577", "sighting--c9b8f36f-9d05-4411-9dcf-6abea6a6f279", "sighting--36bbad8d-6ad8-4fe1-85db-4bd2a952ae8c", "sighting--aa56701a-87cb-4ee1-81a6-777e8877b634", "sighting--a4aa4008-2655-44f4-be44-e5006ec48e84", "sighting--a1164baf-ffd1-4da7-bcad-f9dfaa77cb84", "sighting--f7a9795e-fc5d-4f93-8e60-a6210708b49f", "sighting--964ef956-172c-46ac-b5b0-034506ff4732", "sighting--9e6fbe15-f511-46b5-8a28-d9417fcaf83b", "sighting--40288897-7c22-419c-aee1-1f0b55e246e4", "sighting--8b71c102-3b50-42f1-95c2-6b514c089a5d", "sighting--b286c6f6-b1d0-47f3-a78e-e041d75751c6", "sighting--b85e614a-f3ae-41e2-8097-cfd668baff34", "sighting--89555d21-ee72-4c89-aef4-c1e42973d99f", "sighting--0325d8b1-0299-4b74-b94f-ddc8be60eaaf", "sighting--f27e0d70-3b7d-4050-969c-bee7aa747b8d", "sighting--b26d19e1-8c70-4983-bd56-f96d2c824580", "sighting--89f95aaf-368e-4ae9-af2c-9646cab059fd", "sighting--b1c8a6b2-e8e0-4801-ae92-6844b702ffe1", "sighting--34ae3838-ff18-4878-8672-5e175127acce", "sighting--ba1e984a-c0ef-452e-8e2a-2ddffaa1cd68", "sighting--4a6c8764-3af4-4cf0-9545-218176c5a304", "sighting--2f897833-1a2b-471c-9411-526e33567ff5", "sighting--a8da32e2-f0b3-4d75-92ab-aebfe92e0d03", "sighting--d580d91c-1c84-4cd4-9473-3c94e1013359", "sighting--ea8181a7-2a01-44c9-a421-d224cf9d1e83", "sighting--ba59ff9c-426b-4308-a19c-db9b861fd794", "sighting--78ea4e70-66eb-4d75-8728-eb46ad1f5399", "sighting--7b13bdbc-35d3-4241-99a5-08282143a6c6", "sighting--d039bf76-1f0e-483a-8508-7fa90d6ba859", "sighting--caf95fc1-1f3e-4b91-80e4-508b4cca9012", "sighting--707b2310-322d-4058-8ba5-fa4a9643ed69", "sighting--1f9ad686-8f33-415c-9cc1-e2624e45234f", "sighting--2b57a56f-a263-4030-9704-f27f8fbdf8fd", "sighting--c40d2490-c966-4727-b2b0-bc1d3ed510b5", "sighting--671f348e-6c76-40f0-8893-606fef1256d6", "sighting--5fa750fb-7590-4ca1-a95f-ad37ffcb62ea", "sighting--f9cebdbb-e21e-42ec-9e53-0451281c30ba", "sighting--af9310d8-cc55-4cb8-85e3-9f66233aa901", "sighting--3a413cbe-d012-4d35-a94c-e021e6f94a91", "sighting--1a1e3136-d636-46d1-a4c1-343b36421627", "sighting--d0623573-3646-42bc-9859-6dd652677107", "sighting--02e47e50-c16b-4df4-9c38-10b61d690e00", "sighting--05908479-ebe8-4c86-a02e-da5c630e0fa7", "sighting--ffd99a4c-f840-4f27-9234-f2766d3a9603", "sighting--d507dbcd-5857-4995-987a-4181bc7bc03e", "sighting--6c3fe892-a8a3-402b-a6b2-9395e8283b16", "sighting--ff8e9b24-1e6c-4f54-a3db-cd1feb89d486", "sighting--31c21f2d-99c3-4a58-af66-cd87f8ba1a8e", "sighting--f79ffcb1-e800-4b90-b320-3555e95025d5", "sighting--f3c15029-20ed-4d47-b722-39c7c0600e78", "sighting--2bcd4942-bb68-4faf-9df2-30cd8934ac5b", "sighting--b8cb18e1-2d0b-4553-80e2-0cb517fa8177", "sighting--e01f2538-9fa1-425c-b648-893904b30dce", "sighting--e097b571-56cb-4849-893e-059574d948e2", "sighting--6de914a5-2052-4373-b4e1-bb47173b3e88", "sighting--cb610b36-5e4a-4276-af10-90c9f3b30d9b", "sighting--1949c7ae-98d8-4a63-9d3f-e887372f4903", "sighting--8866ff48-9746-4215-8e12-26d099af8573", "sighting--6a1d68d0-d1ce-4110-89e4-8fc34f3f7a87", "sighting--932b79cb-3b76-4dfb-b85b-8219777f9dfc", "sighting--6765bba0-1f2b-4d69-9400-0ebf5da8ffeb", "sighting--e5b99f60-f468-4043-bd45-eecf36318bab", "sighting--6760a933-efc2-4cc2-8f7e-703c616e5a72", "sighting--97a145f4-0010-4ee8-a6d8-c8ec90838f57", "sighting--5b9ad123-ea7f-4b09-9619-3c8e75b64539", "sighting--a757b469-3c05-43ef-9155-77f8cc4e9077", "sighting--094458a3-a3df-48b0-b77e-08bc5a940429", "sighting--d327f65c-3486-42c6-b98c-1e7693f45eac", "sighting--1147abd6-b371-4003-b670-f57a9e03d75b", "sighting--ba125007-6b4b-4adb-bf2f-6ce74200c88b", "sighting--18a1ada2-4f94-4df9-b44b-04882eb1e82c", "sighting--2e42ffe1-5549-43dd-9629-d387eb6408b8", "sighting--c5479b96-4ffc-4722-895c-8ed1cf0f74bf", "sighting--cb5bc6f9-0014-4ed4-a008-e64410bda3be", "sighting--a389f519-6ccf-4364-b294-fd56ac6ad438", "sighting--e52d6fd9-5c20-4609-b830-b48370ad94ec", "sighting--af542ee6-717a-4f0d-94f8-e611c9b108f0", "sighting--c25fb7ee-bb99-479d-99f3-e0f316833de7", "sighting--bf450baa-54bd-4ad6-b75a-b257fa20cecf", "sighting--305d1fca-3f8d-42cc-8d97-eb234ab69875", "sighting--db5ec2f8-c6e3-4de8-a324-a93f8111c886", "sighting--1895e6ed-fa70-46a1-ad55-99cf638b334d", "sighting--1fc880ee-d567-403f-8a94-82c24a4b0eba", "sighting--50998c3d-90e0-4eec-bc6b-c19b69d34d0a", "sighting--d5514afc-70ac-4fe3-ab22-0d70b9bd7076", "sighting--daae345b-8b6b-4388-98b0-ff6747efb5a6", "sighting--9067e1b0-e3b5-4087-b475-b254f0b30d4e", "sighting--dc4961d1-217f-4141-ad5e-b6ff33e7e2cc", "sighting--342a2ecf-d42a-4a19-894c-862fdd39fa79", "sighting--36688ed5-c891-4f6d-b0da-1efc89db5501", "sighting--ebbaf4cb-ac90-44f9-a40d-7e5a54f4dcd5", "sighting--b7ff0c8d-ae59-4a25-b118-867ad799e3ff", "sighting--1553dc80-b2eb-4429-916d-65d2d6117378", "sighting--b97aae49-be74-4648-aa3b-487f2990456c", "sighting--e94f0509-56ba-4ce2-9c12-94af59efc5f7", "sighting--33569cb0-e0f5-45e4-8d91-e5cfa32b66ce", "sighting--34484b81-2392-49ca-b6aa-a83c00719721", "sighting--610c79da-b6ed-410d-886a-a4d7d53693c6", "sighting--eeff8ff4-41e9-471b-9ee5-bac85320075d", "sighting--9ad1fd78-8f62-4274-9ca0-c9ea17cd5119", "sighting--bf9a8b52-2d3d-45f6-97eb-289c2c4234d3", "sighting--f4261e1e-b85a-41e0-84c2-58d2fc742a0e", "sighting--a4318e4d-c754-4351-b5de-b8b7db344376", "sighting--a1b37ff8-12ac-4d5f-93d4-f112387915f1", "sighting--043c1dcf-52ce-41be-9d80-b63b746226fa", "sighting--0f70b427-aba4-49e6-a304-e2576bf8e3b5", "sighting--dccbb6ed-adb3-40ed-b0cb-cc510906a718", "sighting--4a9b926d-d0ea-4d69-a7ce-8874c087fb81", "sighting--d2ab6a47-10b9-4d3c-9ca9-166bd341e82b", "sighting--2039c643-7e3f-486a-b058-a2bc4b412200", "sighting--634d2ae8-f4af-447b-a658-b534c28c9b51", "sighting--83e73cbd-6e25-4a6b-9974-735542242286", "sighting--a6206bc0-fee4-40c2-823a-e54cd4d21747", "sighting--7b7f538d-1be4-48ac-87ad-0db941e5c5e0", "sighting--848691e8-c77e-4682-9bee-a3bf0ed422e7", "sighting--8bfd806b-6645-44c0-9d70-9251a1caec05", "sighting--f379e592-74bb-4106-a2ef-53d5e3a59e1e", "sighting--6a05b0db-e48a-444b-a500-4d5ff3563753", "sighting--0c01b64f-9e4a-404f-b135-678e8e1cf11f", "sighting--8280ccfd-6bb3-4636-9a9e-140779dffd6a", "sighting--9aea03aa-8715-4ad9-ae11-edf60bc6374c", "sighting--797fed9a-9311-46e8-b773-b012208a90e2", "sighting--91033cf3-ef92-407d-854a-b079bc8f448a", "sighting--aff16484-c266-47b6-b803-b6e8c73ec78e", "sighting--c5a45cb0-ff21-49c8-a209-ae3f5a6958b7", "sighting--c8884040-88bf-44b6-850d-317f470063f6", "sighting--b0fb0ba1-a42e-408a-af84-e052a93f7f5b", "sighting--4324be38-e6c8-45cb-b0ed-902173b7c86a", "sighting--793b7690-99f3-47c6-975d-83f8880cc9f4", "sighting--05a3170b-e690-4ea4-a45a-619acfbb1f9e", "sighting--d5732ce3-83df-48b0-8845-a4d7d211658f", "sighting--118fde17-f951-409b-b711-eb4f05c66309", "sighting--d6947649-3415-4a71-a8cc-5eca5adf3970", "sighting--25e0bbb5-df95-489f-90f1-16a0c1d28d43", "sighting--1f780f87-6364-487d-9826-afd5cd151970", "sighting--442ef4a0-1f4a-4b09-a4de-27b3ae59d030", "sighting--ab90c1a8-5a86-4b5a-8bf4-98d72355bd74", "sighting--b90f10a4-bedd-46fe-acfd-9b6cf6aabfef", "sighting--c74a0ff6-2b8a-493a-9547-972e90d053ac", "sighting--1364f4e7-9e65-4c2b-99e8-acf9f966a4ea", "sighting--4fd9b900-a953-4f48-b070-c9929dc06401", "sighting--e8ff7896-b329-4ac1-a28a-c0bd41a897d7", "sighting--549e7d31-5079-41e7-8b67-77e1f4bb7379", "sighting--890fe5d7-9b6a-42a0-aa2e-93152a372295", "sighting--7fc67b26-a0fe-46c6-b0e0-36439e266170", "sighting--4bf4bc63-26b5-4206-a96d-18e08902b1be", "sighting--7a0b1190-ca02-4a68-8909-6e9bf7df0e9d", "sighting--c38de4f0-cbed-46c1-adfe-c5b15ec3e1c4", "sighting--c15addbb-f63d-4079-85dd-7a0ec93df1ba", "sighting--18acc1e2-bf79-46b6-95e2-9d9ad95688bd", "sighting--117ac9b8-7b71-41d0-af70-212971f55227", "sighting--2cf8dac4-ded7-4cb4-9e40-61d36c290b29", "sighting--2a458281-3353-41a4-8c58-1a62a76aee21", "sighting--59a309f9-334a-4dc7-9fbe-696d21c56f32", "sighting--f0825cd0-6cfb-4e66-92e2-87438b2b1b1a", "sighting--3c7f4eef-b126-4e83-89a6-9a921bb79033", "sighting--93ee32ea-30cc-4034-b301-e4f1b7ef8f4e", "sighting--e6644a47-d1bc-471f-8652-c06ca7bc8b40", "sighting--b103168f-4f50-41f5-9915-648824e2ff79", "sighting--18d4b468-53d1-484e-8410-4768f5d0bc6b", "sighting--57008655-83a1-4847-8875-e8b6fa7a77bd", "sighting--f4cc2617-3e34-4f9c-b24f-393a5a064d53", "sighting--2b1e22e1-fa9b-4557-85b3-69da8cf9f04a", "sighting--cfa43dd7-a7be-4a3d-8c20-ebba9c1040f3", "sighting--00e34801-e6b1-498d-81f3-af053c923fc1", "sighting--c8747754-27bb-467d-b0f2-3e9f3866f9b0", "sighting--c085e7ba-6982-4f76-9c14-b945c4033fcd", "sighting--4ed5d165-007a-4e29-9027-417c29e7d405", "sighting--907ba5a7-d28f-49bb-9e96-fe8e1c6d7340", "sighting--625d759a-b39b-467c-a420-e587484ff8f1", "sighting--11bde380-9ea9-427b-83fe-b8b1e6fa3957", "sighting--3fd9560f-6cd5-41d6-a536-e3153fddce2c", "sighting--93c16bc8-60e1-4528-b828-a62fb5379391", "sighting--8a4da856-8590-4e09-a230-91f964829f07", "sighting--9222c2ad-599a-45ef-8fd9-72cd125289b3", "sighting--c973a345-f258-43de-9c2d-7d4d2cc5e4b4", "sighting--ff07cea1-02bb-41a4-8272-6c069504294f", "sighting--6f58383f-1b3e-4264-b7b9-6b4a08f3fa32", "sighting--eafa2af2-10cd-4da1-9088-c4f90e27e856", "sighting--a6c633be-59be-4e7e-9b92-d4447e1de8eb", "sighting--13267b9e-b064-46c2-9838-c5ba7c8b093c", "sighting--408dec74-7b6f-45e0-932b-493466b63753", "sighting--a120cc31-a2fb-4afb-9bf9-0fcf1914d4e8", "sighting--3f938262-c66d-442a-9e45-e985698fe597", "sighting--39bbdca6-2ad9-4950-b836-d324aad8aaff", "sighting--25e98f86-f553-46b9-b458-b0fa8ae84fcc", "sighting--600fbd24-604a-4b98-ac44-db9cf441d1fc", "sighting--014fb3ed-44f3-4bc0-be28-049576f744ea", "sighting--f701f1d6-1013-49c7-88f8-3abfaa8645f4", "sighting--e2a23c48-b6e0-4690-af60-4474d9a4ea34", "sighting--1f98855b-8a45-42a5-b8c3-b0011d18495b", "sighting--a3bc2656-320f-4be4-9a88-1fb360827743", "sighting--4741f085-d562-43c0-ab21-60678b0ef56f", "sighting--87ea4f5e-6e8b-4c43-b109-5935edeb1c98", "sighting--95e334d5-821c-4014-8377-68bcc7943700", "sighting--2c37a15c-c56e-4d7e-9f68-4e1740befc8f", "sighting--5fbe6ff1-7ab1-4f94-b246-f09adfe9226c", "sighting--9762f2c6-bfa0-4350-89b4-5fcfce1f6340", "sighting--48419288-a282-48b5-bcd8-5661e8a62723", "sighting--f8879822-2feb-4326-8c9c-2dade6dc73e5", "sighting--afdf39c7-abf0-409e-8b77-5767401380f9", "sighting--f8dcc905-fac2-4594-afef-a29e71e9e7f2", "sighting--8813e889-d47d-4248-9f67-e4b73186bc89", "sighting--33b31ba8-c3f9-4afc-a8ca-85156220dec6", "sighting--2025e129-7a5f-40df-b862-5b2f3d2e0e2d", "sighting--fe29c14e-d486-4199-aa63-1ae4f3264c60", "sighting--d88afdf8-1e9a-4a68-85bb-15720951e8d6", "sighting--8bd3b398-4639-47e7-82f8-1d398ffaffaa", "sighting--cfbf2430-dcf6-4b13-ac8e-76c150d68f8a", "sighting--cebf9050-fdb5-4feb-ab17-566422bb49d8", "sighting--06e32282-7866-4285-86a9-a638b2da8ad4", "sighting--c8559c69-253d-4d49-8d54-37b5bb567368", "sighting--86ad5a5f-f969-4de6-bd5c-0526db176c8d", "sighting--3e116773-038f-4d1b-8020-939050af5192", "sighting--77f76ca6-9a1c-499b-aebb-01163f61a3a9", "sighting--eaf047ec-a839-4323-acc0-a32bbc148276", "sighting--6aaf0cdc-0561-46b4-9ac3-a5e869605650", "sighting--263fa7fe-3634-49a6-adf8-5fd8a6337e89", "sighting--173b4df0-3082-4b8d-b6cb-6bbab7e28b88", "sighting--4e439660-00ba-4a60-bd47-29b5e28a8a66", "sighting--72b17727-e4f3-4816-b77f-e42a96ca91c5", "sighting--0b915ed6-fe9a-4324-9617-1f016824270d", "sighting--b617ec67-6584-49a9-a3b5-5d6ceff49a9c", "sighting--427f6e67-d745-476c-87bf-f58940d47b6a", "sighting--4d8613e9-a8f4-412c-b5cf-89490ae60e17", "sighting--202ec514-f57f-435b-887c-87d244544641", "sighting--893b10fc-ebd4-481d-8721-e21d485f46a3", "sighting--1893fa7d-7d79-46bf-87a5-bebb18eb2e56", "sighting--869a7033-88d4-44bb-8ec0-d18c2efa8a4e", "sighting--52f599c1-2a5b-437b-9aff-e0df748fe35c", "sighting--b7f1ae99-88d4-4c76-a2c5-74f543534b30", "sighting--fb923855-7be0-4e1e-a58a-0f0a2493526a", "sighting--20c939b9-c386-4370-907f-33a04075bed2", "sighting--4442007f-c6bf-4f5d-866f-158b9e149292", "sighting--403fe293-d574-4b4a-b749-68a36a37877f", "sighting--7f1bfd67-4fac-43d4-81bf-093927645316", "sighting--81fe9622-69d0-4b5f-a2fd-a1bd4c72b5a0", "sighting--1db582c2-8788-4656-8dbd-1f011c485202", "sighting--6b25c334-1457-412f-8c4e-11dbbd81cea6", "sighting--fbbaf50b-5acb-43cf-a730-e7957123acbd", "sighting--7b147dc2-d3a1-4f31-b8e1-02c165d746d6", "sighting--15d7fbea-e1e5-4606-b3e2-245e8a5ca7e8", "sighting--bf4d81c6-879a-4a8d-8305-b5ab9a33bc55", "sighting--f6e14ade-3432-4db5-92a9-81ef364258b4", "sighting--8fa626a5-c278-4c75-a115-24556c588c57", "sighting--4b77b84b-da55-4336-a478-fa390ebbb5ca", "sighting--069bbaaa-2035-4fff-b9a0-e53ecf65aae1", "sighting--8403501c-5c72-4dcc-a21c-5bcce480768d", "sighting--0baab16d-b32c-4311-a043-f93a8624c0f8", "sighting--72b97de8-85d9-4559-a0c9-29a41e94eb6d", "sighting--89d6c167-87cf-456c-88cc-1ae8d202f93a", "sighting--801175f2-0081-4862-abf6-dd9009870387", "sighting--910aaeda-0f34-437f-a2e5-0310f582a7fb", "sighting--19754031-38a4-433e-988a-83c9d30543ed", "sighting--0cc0463b-9ea8-4bad-b61d-49ce92b10629", "sighting--6e0fe66f-e775-40d4-9610-7cba2c1bd908", "sighting--2c0ad8f0-fe57-4252-b8cb-30d820a71684", "sighting--8684d844-38dd-41ae-83bf-72103103378b", "sighting--b39a47b2-5d16-4311-a855-14b4a8a7a2df", "sighting--426413f3-e1ca-4222-aba1-316f93e1a84e", "sighting--0e11f119-b6f5-4cac-82ef-f6169e74eb72", "sighting--ca657f02-eb88-401d-b4f2-c889def2813a", "sighting--c5a74a8f-ce18-4c93-992b-e96c5f7216bc", "sighting--ecaeaebd-d21c-4e96-8104-67c7a9a50bb5", "sighting--04714e02-7ed4-4aaf-8edc-f38fbd6c16fe", "sighting--a1fd3c0a-fcbc-43f4-a443-1d6aec9f90dc", "sighting--dc3da8c2-d1ba-4d1c-a291-3538045ae9a3", "sighting--4ad5abcc-4156-4805-9799-6e86a2eb9d59", "sighting--d1d2210b-aa1f-4d54-9d34-44705d22dc5b", "sighting--4de74077-3fd0-459a-a624-ff1e7d82f25b", "sighting--065eb1d7-1ae7-4c67-9374-7254d2c76b69", "sighting--697ac1ba-6620-4fb9-ba22-74312d704c0c", "sighting--689df020-6d66-4754-adf2-de47a1459cf7", "sighting--d995dd58-8c9c-4386-ac10-dbd6ec66948f", "sighting--377d3e2e-3a38-4fb2-b003-57976c54373b", "sighting--11b7e7ed-7ab3-4714-a5a0-0e9f1169ef8d", "sighting--02ce68ca-ecca-4d12-b1ae-c6b4e5c7909b", "sighting--20cefc43-008f-42e6-a971-65da34d2683f", "sighting--8ec581ad-bbb3-451a-88a0-46959e7a2766", "sighting--f5a6c2a5-6528-4c13-882e-ed93372632d4", "sighting--6b3f7f69-ce6e-4753-b0c4-6e48bd5c7dff", "sighting--a436a505-024e-48b4-bfeb-c4f9fa6a496b", "sighting--d4599b50-bc4c-40f9-9d93-cba639ceb23a", "sighting--be7d8506-8044-4757-b10d-3829a9ec53af", "sighting--e99f8820-59ed-4035-9a39-b2fd376cfaac", "sighting--caf9566f-f67b-4b53-8c2e-eb24e219f967", "sighting--9f517bc4-3f14-4be2-9493-d48b78827f31", "sighting--3b3aa1b4-fbe6-4266-af62-c81c8b53fda6", "sighting--505278aa-9291-4d0f-936c-dd222f428e37", "sighting--67b6007b-047c-4314-a175-0da0a3400b48", "sighting--ee1d8ed8-1634-4959-b258-402428f28166", "sighting--c8e3a471-27db-4810-b282-14689c1b225a", "sighting--dcc5f2a8-e4fc-4a72-925f-7a34dd7aefdb", "sighting--f53f73cc-2d9c-452d-affa-b5880fffb3e9", "sighting--b44057ac-7d24-4bdc-987a-8906808a7788", "sighting--a2af91ae-c7d0-4320-bc52-532b60cfda46", "sighting--d326862f-a644-4782-8cf7-94a7583891bc", "sighting--772fa69b-0804-4335-9146-6a5a00b7a05f", "sighting--f1d2819e-0df0-47a6-9f5e-40387b0466b5", "sighting--9fa1d6bc-78f5-425a-bbea-f66708a96146", "sighting--1c301f88-eec5-436a-8238-1f92a5df0d45", "sighting--3f7b6ce5-9520-4404-8af4-65cc50031665", "sighting--4cdbe438-4539-4fc8-957d-e850d749caf2", "sighting--16a8ca25-bbfa-4a51-8d25-8aa2cae8ace6", "sighting--b0f4f107-674d-497f-85df-fe5eba3d8c7c", "sighting--1f6a5fc7-4ce0-4cee-9284-e48ea4f60616", "sighting--636f9c9c-0227-4c67-89db-7ab581dcfe31", "sighting--bdcb9c7a-acdc-4a7a-9097-a76fdcbc13b7", "sighting--66411f8c-3829-4d5a-add2-ad70b261a55d", "sighting--37e29a79-34eb-4ee5-9871-c8edd20c6370", "sighting--adb52217-4644-4463-aed9-a0400b999b57", "sighting--2f9e5958-7325-4591-af9e-d94cce0b638c", "sighting--796a192a-ae0f-4dbf-92ac-15dbf01da509", "sighting--64d05670-34ef-486e-a0c2-87d5102aa1ae", "sighting--177fb042-6aa6-4ebb-a835-cf102edc3e8c", "sighting--a0ea1adf-1c73-4620-b56c-ae77b86ea58d", "sighting--06c283ad-7d0a-4b75-90dc-7f04b49b6f16", "sighting--1482e99c-51b9-4759-af12-0da64b142598", "sighting--ead40b5a-67f8-4a01-a5d1-caf2b7c56aa2", "sighting--7d0d8805-9912-4e5d-a7f8-141d75840abb", "sighting--6860648a-accd-43e7-9a46-7220c011063f", "sighting--2fb71573-4be0-45b9-9ab7-880ab49bc504", "sighting--a2caf3e0-21cc-4b1d-aa13-cf3cb72ac5ec", "sighting--0bea54aa-37dc-4a48-ba3f-419fb91cd2d5", "sighting--7bce5718-e4de-457a-8e71-f9b02237be8e", "sighting--efa0ce3c-5812-4243-9fe3-9f11875d45b3", "sighting--67db3bae-2345-4268-b1c0-3522fcc374ca", "sighting--52f9c186-138c-42bc-884c-6c7d477d3b41", "sighting--37ec24be-501a-4db2-af15-d4ade62c9b4e", "sighting--eb6bbd71-8747-4f0b-8a00-47d8a8c140ed", "sighting--9c2fedb5-889c-4bbd-95c3-18f8107cb928", "sighting--5639a314-2e05-4534-b10f-6d3ce8bc02f0", "sighting--4be470d4-b4ff-4383-b172-d070033d7f75", "sighting--f7189cf0-ee78-49ff-9ecb-f35759b15edc", "sighting--7bab0224-5de5-49ea-adbd-00e5de4107ff", "sighting--d68df104-b168-40c8-a140-9121715cc91f", "sighting--7378f0aa-d379-4b79-b778-9b064bf22ce9", "sighting--b2ecb040-3975-47aa-97b1-f905b2ef1204", "sighting--144825e4-247e-40c8-95fe-dc5e889f582b", "sighting--862f71d2-b1a3-4d0d-af15-5d48028b7202", "sighting--b06fe131-a6ba-4438-a005-7f632c576888", "sighting--5144278c-df6f-4139-9e34-4cef4442650c", "sighting--f987a557-683c-4f8c-ba9e-0499df5d1811", "sighting--1edec0d9-1e8d-4383-b214-59c885369600", "sighting--557e02bd-d100-43d7-9a8a-3a4df2c50a3b", "sighting--cb3fa141-9509-40b3-9b1d-df4b55623274", "sighting--f2003b62-17b7-4991-84af-bd8a7b8fb592", "sighting--74de691a-2072-413d-8d03-42e0b6139151", "sighting--e6e9b6a1-0663-47aa-85eb-213cc3e6a1a1", "sighting--08f8c3aa-6114-41e4-81e9-7c51d88ee6bc", "sighting--50d491e4-ad1c-4125-be35-1c7c4ec8ee56", "sighting--80310352-8c7b-4f46-8292-582451c4cb07", "sighting--8019292e-04e6-4054-82eb-ec4c2ed844bf", "sighting--85162158-e77a-45e9-bcfc-c3c78cc5e4b8", "sighting--c6c8342f-e182-448c-991b-12e224cf2452", "sighting--7635d47d-69f4-46b7-95b3-3dcff722fb92", "sighting--5966f88d-b790-49c7-b761-af63d2cbf3fa", "sighting--728130d6-4692-4ce2-9425-b83709e480ee", "sighting--7da5256c-59b4-426c-9a57-01058fe7e07e", "sighting--ae28efe4-83bc-4136-959c-c76917c217c7", "sighting--3bc5b692-4d8c-424d-ad7f-c6b7a7ca86f8", "sighting--749ccde6-ed41-4726-8123-4ae5ad87b7d4", "sighting--4b884ffa-29d7-4520-9171-65676642791d", "sighting--ad36336d-1200-4d4c-b2de-ed8ca43ffd28", "sighting--ec60fa59-716b-473b-b1a3-7ec7bd537268", "sighting--1fd16131-802e-4372-8e5c-67de5448f957", "sighting--7dbc5d85-5e8a-4317-a555-f85b6052074d", "sighting--3671383b-40bb-41f3-ab8e-f688da4606ca", "sighting--de8c1859-1ebe-4e5e-bf04-2d50b5710829", "sighting--a883cf64-8eae-4301-a1d7-5c61628253d9", "sighting--16450ea8-70c9-4db7-96a2-9e687c4877f1", "sighting--c8f588a2-cab6-48d1-b7ce-9b1766c6a135", "sighting--ce0a2a1c-c244-4c02-a863-9b13a6e31b2c", "sighting--691363c6-18cd-4da0-9568-9b3f6d886010", "sighting--77dbe311-9df4-49c1-9e42-e7d8c1fb4d9f", "sighting--0821450d-bfef-439f-b8b8-6f2401dc62f0", "sighting--c80afda4-40f7-4586-b56a-578143e6cbfb", "sighting--a4406296-acd9-43fe-97fe-93d7f1fc606e", "sighting--fa635541-e243-4e7a-9e91-931d13680d72", "sighting--45625cbc-52ef-4809-bc6f-dd5f04f1e3e0", "sighting--97cbf658-c6be-49a4-8af2-aae900f78ca7", "sighting--ca496258-7e20-473b-9584-2e5a2206b49a", "sighting--1465c489-6376-4975-9485-d843d4614e0b", "sighting--a2bfa17a-c75a-4430-8245-05c21a1a1ee9", "sighting--f276c150-1061-4487-84f9-4adb2915eaa1", "sighting--ca824407-5b05-4f60-a167-c4323c72512a", "sighting--fa15ab1d-3ce7-4326-b790-24e80b8e9a6a", "sighting--023b62f6-0522-4041-888e-4e112a2a1a38", "sighting--627d2a47-d768-494f-993f-27c3074fbf42", "sighting--5ed64705-70e8-4d87-a09c-6cf6f9fa2ac4", "sighting--284338f0-be53-4988-8518-113a17b64ee5", "sighting--b2da65ae-1306-4522-a1d7-2bd9b927b367", "sighting--a3f7d13d-f9c6-4482-86b4-7471e96e21df", "sighting--2be19a34-4d53-4f5e-9254-9492dc39252c", "sighting--8eeec21e-a81c-4dd0-99d8-acb0af183de9", "sighting--da2ede30-828d-4c30-9b6d-6de13b35592d", "sighting--911c8c6d-1bf0-44e4-b916-97fd552b1d01", "sighting--0b5fe4cc-4452-4e87-8f2d-2b6c7f2cf623", "sighting--44a0f437-bb23-4dd0-96b0-c816bfeea9db", "sighting--317876e5-f305-44ff-85b2-29eb04c47c32", "sighting--b5dee5d3-ef60-4945-9dc8-724f013dcafa", "sighting--dfee2afc-e7d4-4b8e-be1a-9ef979e84316", "sighting--5e943cc0-dd6e-4a69-b4ea-d947e00c8500", "sighting--a452eeaf-7adb-4b04-93b2-2e8555439430", "sighting--31f2d0cf-6360-4cf2-9dc3-16e34d1a3129", "sighting--6fa418ed-f406-455a-aa4f-4fc4defaeb21", "sighting--a666f62a-34a1-4bf1-93d0-216d554ce9fa", "sighting--69148113-0504-4bd1-9207-9178cb59b1f0", "sighting--166dfe5a-fe8d-4b8a-8656-37fdd73431de", "sighting--2b546801-8b84-488c-804b-58860699f909", "sighting--0876b1cb-f299-4916-ae62-420683633b26", "sighting--907046b3-ed13-487b-a010-a2b1b9cc7c11", "sighting--dd9d808f-d61d-457e-aeb7-00486f228930", "sighting--45225b0a-ae64-4629-9f1c-e10031e6ddeb", "sighting--f54b5bff-fd73-4a4f-ac0c-ea3dda67eede", "sighting--a6617ccf-01e0-4644-808f-6584e1260391", "sighting--455c04a3-82cd-4b41-a77d-6bae98d8809c", "sighting--a06f10da-ff7e-438e-8cce-e507b5ad105f", "sighting--8d563fa2-c8ec-4e4c-84fb-a69692f19904", "sighting--10f76222-65ac-468c-b6e6-7d73f57fe55c", "sighting--75d0c6ac-89be-4c96-b30c-6d2397d8ce5b", "sighting--c2f63645-8772-4122-86df-a58a8ec5a0e7", "sighting--30f1787b-d819-4fb8-afdf-d480280e97e8", "sighting--cb6a05d1-6ac8-47a3-8e22-7dd5f1ac6857", "sighting--95b9931d-cb1c-426e-97be-cbe28a9963df", "sighting--2b759fb3-e44a-4acf-a866-140bcf4468ea", "sighting--fab27d49-ee1a-42d5-9841-152ae47c4df8", "sighting--8247b52d-143e-41c4-9a06-2dc83c5d1587", "sighting--62413aa6-6147-4216-8a1d-e46d6be04dea", "sighting--f43c35f8-58cf-46ce-8535-a1865c303935", "sighting--775b013a-d593-4cb3-b3e5-2f39413594e1", "sighting--c3bece15-d1b7-499d-8750-be3221385bd9", "sighting--489eb88a-91c8-4a38-8e5d-0a088cea90c0", "sighting--68da968c-8006-4e67-b240-1b0257fbe45b", "sighting--f1a7b649-e2cb-4a34-a086-ff229460c43e", "sighting--8d0ddd2b-6021-4e71-a563-e65eec6d197c", "sighting--3499fac3-3745-4f71-9279-664b07cb26fc", "sighting--b8f6d03c-6f65-451e-8189-8c3470379353", "sighting--f1b99d54-077f-4787-9f03-1b589dfd4473", "sighting--f6aaefd4-9bcc-420a-8c1f-81b20da16d42", "sighting--c3908433-ce33-42c0-bb49-fcc3ffc0c394", "sighting--b78f05be-7c49-4241-a6c4-a192103968db", "sighting--6a0aae15-44f9-44c7-9da5-0631fa1c19ee", "sighting--0291e116-e76b-418f-90ee-615a8e678c8d", "sighting--5fc6bf72-5b57-4150-8166-5647a4e2ec0a", "sighting--35d190e9-176f-4b5b-b144-e9659f9c0374", "sighting--e8c83e51-e500-42d1-80a3-917e974c0b16", "sighting--e2ce7e18-a585-46f4-8211-3343420f845e", "sighting--504f69fc-8592-40cb-a529-3ac8bedb9ae7", "sighting--599998a9-2242-4499-9441-8f065e5844dd", "sighting--9a3d7e83-1474-4c7f-b405-4600d46de7be", "sighting--526e9093-e21c-442e-8e0c-7df6e7a90c56", "sighting--90251225-b0c8-44c0-b021-e2e29e2b2d03", "sighting--c001509b-d127-4cb3-b3fa-966aa63bcf4b", "sighting--8775a083-f79a-4129-86cc-ea5d11cc48bf", "sighting--8f5312ca-e233-4cb8-a6df-26de88f1d9f8", "sighting--45aca882-a331-4813-8d1a-2da3f3a6d69d", "sighting--81e3a3f4-f097-498d-af8b-e4bb89b5de47", "sighting--81532379-0d3b-4989-b95a-d2568b09d203", "sighting--8e18221b-2dff-4ea3-b79c-3f2461ec2a8b", "sighting--6eea353b-b8d5-4f14-ada1-322b4cc8ac4c", "sighting--a9f178d0-38d7-4b88-a75e-ca2c1e9b6970", "sighting--a38ff22d-fa20-49a3-aee6-20c54d3bd86b", "sighting--52f3d1c7-2a9d-4f4a-a5f8-759573658696", "sighting--259a5f23-d70b-4d92-aa10-cbb3c67094af", "sighting--6c47a3a6-facb-4b11-a33e-ef1eb5fc8323", "sighting--c1c6b74c-a714-4d05-808f-9e9f2a93cbdc", "sighting--a403a5d4-f2ff-4e42-b4d2-5c1dea16a68b", "sighting--c4dc57d3-c5c7-40ab-b36c-f22e7329debe", "sighting--cde3fd1f-ef8a-472d-bea3-8a9034ec016d", "sighting--dd112ae2-6eca-42dc-9879-baa561135efa", "sighting--3d265b1a-a0c1-43e9-9714-79925535ac78", "sighting--53230b89-6095-4a5d-9d61-a6ed9fbc8a7a", "sighting--f26190fe-8d04-43eb-837c-e9d3da6c5b0e", "sighting--9e3a0ed4-c401-4233-b400-232fd762046c", "sighting--6c2e1a68-4b80-4d86-af59-b5ad5dc88a98", "sighting--c823b7cf-e874-42bd-8eae-5a79d367fe55", "sighting--f2d677d7-0134-4b45-ac60-409e73c9eeba", "sighting--095d1112-9dbf-41d6-b65b-1b3c2fcec049", "sighting--393dadbe-26fc-44a6-93bb-989ddf79dcae", "sighting--a091100b-b9f1-4abd-b7b4-2bdfc9058393", "sighting--3033eefa-048c-4ce2-8bdb-89c044c1a48f", "sighting--0d84fc6a-c7cd-4f90-9805-0ba62e511767", "sighting--43e4d682-dfd2-4265-9c83-456cfef53e10", "sighting--53803092-d0e1-417a-b0f3-4316e5dcac28", "sighting--069124e5-443c-491c-95ff-824cc919a59f", "sighting--5f83589b-4e5f-48f3-a387-60dfb8dadcb9", "sighting--7c415ff0-d26a-4cae-8767-b6bea0bbf080", "sighting--0ef79f6f-de32-469b-8831-e7bf249e38fe", "sighting--c5f42b24-cee5-4728-840b-5535c6486b13", "sighting--3d8f91a1-c1ce-46bc-8c53-5940b8674ea7", "sighting--1c5e64ae-3399-412d-8937-622c279de857", "sighting--9928b221-0845-4693-b68e-674e6582bf18", "sighting--b254c2c5-9aa1-476a-a5de-e96169793db2", "sighting--b32a1883-f115-43ed-b65d-5d5a3957d81d", "sighting--f9a77933-f002-42ee-a0c9-bb0d7834936f", "sighting--c54f62e9-b663-4a86-ba9a-a2e809d8f45c", "sighting--f3f8b55d-7005-4136-91bf-a8a1099c2e36", "sighting--68726fa6-1aa2-419a-a81e-37a2befcbe7d", "sighting--c2a6fb1b-893d-4ba1-b499-22570deb53db", "sighting--e5c7aa22-5951-46db-a433-6058cfd0466d", "sighting--6c38f7ab-9c8c-491a-835b-35625fccec1f", "sighting--f51ccb1d-55b1-417b-8187-3a3caecebb9c", "sighting--4a25a1ca-b3ec-4a69-9e6a-9de20be3f57d", "sighting--d65ba238-3b39-4e4b-8d4c-e7522ebce5bb", "sighting--3da252fe-d19c-4422-a4c3-77499dd719e0", "sighting--8fc8d519-73f0-401d-a4bd-e6ff68a45cb6", "sighting--61c22d14-c5ca-4f4e-b520-13139a3a0728", "sighting--4aeb984f-dff5-44f3-b070-3d59c8dc6bba", "sighting--e9dd33f7-a4bb-4f74-89d9-f0aeedf5423d", "sighting--ad986b23-1f02-4acb-9275-1f6812709277", "sighting--70b08512-3a5d-48f8-8619-1c8f963c144a", "sighting--aef62314-13f7-4f9e-9dec-cabef206b84e", "sighting--603d8412-f113-4280-9365-a5a48e7ee406", "sighting--b53d5d64-64eb-4ac0-94f5-fba6aac7ac50", "sighting--25af9286-19ef-438b-85e2-c09a39520f12", "sighting--ac33262b-c970-44bd-a599-43f4b1df2002", "sighting--3c700421-0bf2-42e3-9cfc-5b4711bb2549", "sighting--03404fb4-edad-42ac-8b09-96d183e06e71", "sighting--8eb352f0-195f-44d1-b3d2-6b23e68997da", "sighting--b0832949-e452-420a-813c-e57a6cff9e68", "sighting--928f2a37-ebd3-41e5-b1da-9df46b36be0a", "sighting--c7040f68-424a-4519-9c55-e0b43dedeca0", "sighting--2ecc6039-a3c0-476b-a503-8622e0e74a74", "sighting--d1bd8273-5941-4d12-b4a7-ca5188e56617", "sighting--af998132-61a5-49a6-8e77-5180b7a93e23", "sighting--b5c85423-5413-4f2a-a730-5bfbc2a9a7ef", "sighting--1f18a4ad-9aab-4fd6-99e1-3bdfe17f409b", "sighting--9ab18a9f-f25d-40e3-9ab2-0f0b02d13c59", "sighting--ee5e2932-ad29-4e0e-a19d-37af5e264ba5", "sighting--94417280-8be2-49d4-89aa-d7430a41b4db", "sighting--6d272a1b-0bb1-4d5d-a242-9c9d04a1d5cd", "sighting--fbc13c6b-2618-471b-8857-9669766ffc1e", "sighting--1cbe8f13-0500-456c-a383-896dd5470ea3", "sighting--950ba463-bdbc-447c-aae2-e1dd5d532a0a", "sighting--725ce3f1-98ec-440a-b07a-29b66ce0befd", "sighting--c36fd485-fe5d-4be5-a517-487d9af140c7", "sighting--69bca9ac-75e1-4934-923b-fbbbdf942acc", "sighting--01f55f9a-a4fc-45c9-9a9a-55f202de9103", "sighting--c411a0ca-f300-444c-9d1f-2617a85d02be", "sighting--7a60a35d-3fcb-40c4-b47e-53f1a28f66b0", "sighting--66a22913-2a90-410a-aa9d-8ba29e2fa28e", "sighting--122f3cf1-85e6-46ab-8f66-a90b1ab3aba3", "sighting--26d456b3-9076-4641-91c7-52c5487004a3", "sighting--ce10b881-c9f5-4de6-a764-9db3273a92d7", "sighting--fee39f40-1c7c-471d-bdb8-166994ef27d7", "sighting--bc8dc94a-9db9-49c7-af85-43ad280e92aa", "sighting--fed8122e-3906-4a1c-a9cd-c68dc32f970e", "sighting--62051233-ddf3-4797-84c5-460b7404d744", "sighting--d7e0e86d-fb31-42e4-b9d8-1b9e1a08c17b", "sighting--f5f8279b-c780-42c8-b129-f59049199b4e", "sighting--13c6b1c4-3ca1-46a6-934d-fab8c4b0a4ff", "sighting--3cb7c92d-3d36-424a-8a6b-b10c94d597ca", "sighting--f8af10c8-c8d5-4cd8-8133-2fd7a8a4ffb1", "sighting--77396119-d6e9-4cd8-b1a9-6a972144d58a", "sighting--18358d1f-507c-4915-907d-830039a92ce1", "sighting--0dbdb01a-dc90-4473-b8ef-0c6a356f30b4", "sighting--b6769562-2500-46c3-908b-80244b693a2c", "sighting--81e7c0e1-adf0-42f0-a815-04aa8e3611e1", "sighting--de7bf508-db34-4c38-ab73-5612b360725c", "sighting--79e6519c-3c89-486d-b566-dec804b88dee", "sighting--18fbfa3d-30ff-480f-a7cd-656340c0f0c2", "sighting--53cb6f63-4646-47d9-a7a1-c36092f853e2", "sighting--0cac5bf5-e1bf-4311-88e5-85eaac62b85d", "sighting--60b1053a-a01e-40e6-9c23-46c69dff7a36", "sighting--2a5207a6-a4d2-40ea-8809-0b0ea5c495ce", "sighting--a1f38c69-b8c4-4876-8569-eb53970ea0f5", "sighting--424855c9-1a01-4668-bf29-87898516c59a", "sighting--6099cb12-8285-4d10-8641-6bc1c1c9b978", "sighting--b87c7281-2950-4cbf-8b54-17202fc22e5f", "sighting--8c6da3cb-52de-48bc-afb1-9970c28da0ad", "sighting--ee21d936-24e6-4c9b-817a-74ccdfb598a6", "sighting--71bea68a-dcf0-42ea-aa7f-09283a612d15", "sighting--fb7a1df7-cb90-4aab-b13d-d13afb7169c8", "sighting--254bca3a-3b48-4715-91c1-94fef624759a", "sighting--133fdc9c-62a0-47c5-9666-e30a0540649b", "sighting--44584085-d417-4783-bcdf-cab0e7eadd67", "sighting--4307b37e-9e73-4f54-ac75-c8f5166eebdb", "sighting--086b5f4e-270f-47db-bc3b-cad7fd3be711", "sighting--0efc49bd-6339-4275-a5d7-0196156cfb73", "sighting--f57e2de5-9ad1-4b33-ac9f-7540a985de6b", "sighting--8976b4e2-f29a-40dd-a3bb-136413f5213e", "sighting--b918eee2-e5b2-47e4-812c-749515da323c", "sighting--937c57d7-567d-4166-9811-a6fe5dc7a1b2", "sighting--cf04940a-ba58-48de-b0e4-96fe922e1ab4", "sighting--cbdae673-86a6-4aaa-a83e-6d032c15c12b", "sighting--775145ea-8972-4015-9ad4-00bc2eee5e0c", "sighting--5f89a311-fb8a-4af4-b985-6d2ad3f3d627", "sighting--ab002ba1-c2cc-463a-9a0c-b8825b29db7e", "sighting--73c1d70c-fe90-4c28-8634-d02ec80963c6", "sighting--47cf7bc9-489e-4894-bdc2-d283b71bd3d1", "sighting--21c48e29-8bd2-42fb-a167-500bdd735c97", "sighting--b89ff7eb-e2e2-46ec-83c9-7e31cbe421ee", "sighting--eb572b8b-6097-43b5-b6b7-1df7ad1c0977", "sighting--4cc4e165-c182-45e1-8183-a1bc4d6288d9", "sighting--3daf869a-d4d0-4f7d-bc61-89efea5ba9f3", "sighting--3f7ff840-de9d-4dc0-9075-7f92927ee7cb", "sighting--3f3fa1c4-10ab-48c7-b2db-0199c3c69eaf", "sighting--759916e0-c230-445c-8608-0c1fb9c1df5d", "sighting--4f5ed1b4-0d04-4e74-b8ab-16164bc2fba9", "sighting--3d386387-3d4f-4fcb-bbde-f478b7e23f98", "sighting--d426b8cb-d4bb-4d7b-974c-4d02ed65382a", "sighting--46256a07-5298-4a95-8baf-3f826da0208e", "sighting--39b0b30d-1e3f-4ace-849c-3d38fb82e096", "sighting--901f0a69-13e3-4ca5-a58f-4fbcf6415fd5", "sighting--04ebc0ca-ef83-4886-a116-1da20ebf3a0c", "sighting--5d227c63-9830-4462-b4ee-4aa803565aa0", "sighting--738fb465-1154-4813-8d54-e33fdde9030e", "sighting--1dcb8e42-ae78-4b08-a0c9-40aa73e56473", "sighting--aef4af0f-c77c-456a-b92f-e767a8f7198f", "sighting--163b6bfc-c67a-4148-99b6-1f1f4abdbe8b", "sighting--1569ed9b-7ac1-4f6d-a387-1168cf83b3d5", "sighting--cdec3c5b-863f-451d-922e-6bdc862fc076", "sighting--10353de6-2cdb-447d-9e6e-afefff679bf9", "sighting--1106bb34-24e6-41d2-83a5-444c16971488", "sighting--7cbfd68b-ce27-4ec0-bdf3-15bb08cd4102", "sighting--6ba03a21-1ae3-4636-a053-2f13ff0ee17a", "sighting--9b4bf6c4-6ee9-4a68-9d55-7758e6c74f37", "sighting--c87867f9-c27b-48a1-949b-d2223db5922f", "sighting--bb95b35b-dc88-48df-b920-9592c2f25dd5", "sighting--761f4049-fc5b-4c45-b23d-716a55daa97b", "sighting--15106e77-58f5-4ff2-acda-02a6633c2c4e", "sighting--12a4cfcc-f651-4db0-829c-f848aa776893", "sighting--ef09370d-6666-4284-9031-0bd7de7993f5", "sighting--cc7efd6e-be83-44bb-9e83-e489272059da", "sighting--743a5d56-2a76-4551-90b8-9864aa9c8a0b", "sighting--7a8ec4a8-1869-468a-bd0d-6dd4c5591b28", "sighting--5e611d67-5345-4588-b9f0-758e0a67fff9", "sighting--9212e132-1349-42e7-aa39-a4c4a63fb8a2", "sighting--cb21cb10-c886-47ed-b338-9211837e6202", "sighting--c6538cc1-4220-455a-8731-6374348cf6eb", "sighting--e3b5f205-c4f4-45ce-b5c1-9d5354eecaec", "sighting--eb5acee6-b6fd-472d-95b5-0c3e6d45bcbe", "sighting--40688169-ec7c-479f-b1bb-0e539bcdb6bb", "sighting--f84bf937-212e-4408-9849-42ab83d272d7", "sighting--346fb27d-2374-45ff-aa89-c890c42434c0", "sighting--9cdea313-4da1-4f01-bde4-ac5a63d35c0e", "sighting--f78f3353-164d-4bb3-9aac-0f219c10b565", "sighting--3bc1284a-7e3e-4d54-b37f-751868ca43f1", "sighting--08182c32-2e98-45dd-8118-afcd92a9a8f3", "sighting--f0b11b86-59ef-4236-b41a-a1c0dd5eb4de", "sighting--31a68d61-59b9-448a-839a-79c974bb33ac", "sighting--2c786cac-88be-4b50-8344-c751f28c3aff", "sighting--279e0395-f4b7-4a38-9e40-a1467b428962", "sighting--fa1c7edb-b16d-48e5-94bf-fb071796d42e", "sighting--53853523-0755-4635-9b18-e6acd252861f", "sighting--c7962154-ef98-46f6-b812-fac4b4b1180b", "sighting--831ad772-ac73-4eff-bd97-943d3ae89c81", "sighting--8cfd9ab0-04e8-41fa-9d49-028f49188b77", "sighting--3150bd5c-d139-41a5-bbdc-2907abc4b2cb", "sighting--4c454893-05f2-49e0-a32b-87d7a0c07e97", "sighting--2aa84701-adbb-4468-bea3-a017ba37b2b9", "sighting--70f4688a-8086-4911-8876-94ba9f5f7d71", "sighting--fdb0f645-2b8f-4fb1-beee-0f3383376276", "sighting--8f04109d-8a35-4eb4-a58b-c7802724fb2e", "sighting--c295dde6-a870-47b3-abfb-faaff15b7563", "sighting--9e9815b3-232e-42bd-85f1-2429d38d89e1", "sighting--9189cad3-8b72-4446-b26d-4c67aefb4fff", "sighting--dedbdbf9-604a-46c1-90ad-65fa59037f4b", "sighting--5b04eb65-a84c-4ff2-a480-3be1f5d6e94d", "sighting--c59feb10-89bc-4e5f-8f08-2c5793e471df", "sighting--c0cf6807-ba84-49d0-9185-e3843fb735ae", "sighting--74b76796-9225-4d70-9aba-e6517b0a72d8", "sighting--258f1b2b-dfce-42f6-bc66-d182bdf4b104", "sighting--9c538837-c027-4c28-8b27-e865f1a53530", "sighting--5eb0a6e8-ca73-4dcb-802b-28d4a236eee6", "sighting--b19f158a-4251-40dc-91b8-30fa8b7415ab", "sighting--f3881022-b60d-44fe-9a4f-0de90b910b5c", "sighting--5ada01ff-83ea-44b7-b239-2a8b1895aa51", "sighting--5abe6059-978c-4c46-bfc2-1f3cf9d6d748", "sighting--9b3150a7-12c0-417e-afc8-6cb68bf5d9bc", "sighting--601b8b55-fe69-49c5-8cc6-ec7360d6bf2b", "sighting--b94d3ffd-317c-4735-9e30-b5491a9aed25", "sighting--ee6e7ad9-b76e-4336-8923-3538a0908d1a", "sighting--7c92c9a1-09ef-4b3e-81b5-3ca7b95356d5", "sighting--8b42a555-33b4-49ef-93a2-debbdd9421e5", "sighting--f2887e30-621f-432d-a98a-9f17034cd09e", "sighting--d68400f1-156a-4073-a645-dbc7f08b590e", "sighting--ccf3e6b0-86d5-41ed-b0a3-bb92fdd81b4a", "sighting--784e87fb-7f4f-48be-a7b1-7122f16b64ce", "sighting--033766da-2c7d-4bd5-a36e-c139e57fdf48", "sighting--91f7e59a-a3d3-4a46-83fa-2b8e510f07c3", "sighting--41b8d4fb-571f-4a6a-a1eb-36296a079d82", "sighting--11a7bdb4-d948-4174-84c7-484d927f4162", "sighting--67ed0915-cf5e-4942-80a3-70cbe8bad5e5", "sighting--906dd96a-5081-4a01-a73f-a062cc3489ab", "sighting--fbc5b883-6395-42c6-9906-a00e9835b313", "sighting--16880a28-e0f3-4308-87d6-b70cc02226e9", "sighting--f5f3d43f-51f4-4858-8ab4-0ccf9f1f7862", "sighting--2d50450b-3d09-49da-9359-c259f3c9c78c", "sighting--079ad8ef-1f2a-4af9-b63e-b672911e270f", "sighting--1fc2cfb2-ed86-4918-984b-025f1a5f8222", "sighting--c835eed8-1c63-4d28-9cd8-cf8f042580e9", "sighting--0138aae3-7536-4eb0-8288-c9b167c47c7f", "sighting--a0c71d84-6977-4438-b85b-a337d220834c", "sighting--14704853-89e1-42e1-ae3a-1eb7d62132b0", "sighting--25871248-a1e7-4645-85b3-1fda75434601", "sighting--98a5b3e2-cdff-40da-8500-4450a4a5cd97", "sighting--1c23fd19-651c-4af6-9c0b-469d655a8a46", "sighting--c21977a4-8857-4b61-a72a-bac877506fef", "sighting--ecc4d4c8-8a9f-4dcc-83d8-3754bc88ee70", "sighting--1b9fad5b-3a9b-4e86-83fe-911fa5bb4925", "sighting--6a9b81dc-0c07-4ce9-a999-09e78c74395a", "sighting--c232d83d-b26d-4073-bf6e-bddbd78f07d2", "sighting--b5616b5b-ccae-4316-8118-2ae806605d54", "sighting--4ecda421-578e-46a9-8f02-f08d8c660b95", "sighting--dabc23f6-8dbf-421d-b683-03f6cee7e344", "sighting--2dbf73d5-3587-490f-b566-619ef04aa108", "sighting--1b019980-0900-4de0-ad2d-c4cffaff1976", "sighting--85dcde60-be7d-4c2e-a5b9-59c8acc90c4a", "sighting--cb7454ea-1b05-4964-b0d9-24c6629ad4d0", "sighting--5e19ca60-c86a-43ef-8062-f4c6100d0772", "sighting--f7836885-6b16-4b4f-9bf2-7d68866c4ce7", "sighting--309b1919-12bd-4369-a6d4-4e6aff618bbb", "sighting--65e4ad6b-0c2b-46e7-b7b9-ccb058c98561", "sighting--fa20ba18-0eac-4258-b456-3488cc6c3910", "sighting--32ad893f-8d78-4969-a99f-9b986a56f264", "sighting--5e5c88c0-5286-4853-a4b3-1699eb928245", "sighting--3b5826ea-51fb-4791-944f-0ceb21a651e1", "sighting--0f46a238-07db-4450-828f-e8f197f35ea0", "sighting--9bfb0754-04f3-4b95-ac85-f64206729c70", "sighting--4a45fd66-bb81-4d2f-bb7c-cb3cce5a857e", "sighting--7c59979f-cccb-471f-b65a-e289f20f4b3a", "sighting--6581f1f3-1482-4ff4-bea3-e053bf8eaf01", "sighting--f8fae7d2-f339-4c71-b948-0cc9e0671d02", "sighting--8600e4b4-ac6e-4432-903d-75a0cef934fe", "sighting--390cea87-5b3c-4ce9-9421-caf20b0db6e5", "sighting--d7c1a318-2dfe-49a2-ad65-28ee333a26dd", "sighting--a8142ed6-6507-4d12-9763-92d5ff9504ee", "sighting--86f43a0a-b11a-40f6-9cb6-5072fe6c932e", "sighting--6650a3de-5233-4e18-b998-88d4fc58bd19", "sighting--0956c809-0528-4332-bb26-f54bf2810371", "sighting--3bf55653-2d91-402b-befe-8c0f6ca1ba79", "sighting--801724f6-4344-48b3-81d0-00b923ea59c1", "sighting--0a26442c-153b-46b1-b6f2-8bb503628d10", "sighting--6b958a40-033a-4e26-afac-a1b7a4da11c8", "sighting--772dbcb1-04b6-4bec-a469-fc0ede5b9417", "sighting--16b0a433-5928-453b-8594-d44b8530174b", "sighting--024cf24a-26cc-45b1-aef9-dd57c6aec6ce", "sighting--e89ca6c8-e115-4efb-880b-35449bfccbe4", "sighting--5a71572d-413e-4767-96a1-af60b0ef6747", "sighting--14206087-4918-4f68-8cfa-29d4b60dd135", "sighting--54f82587-fb6a-4d4f-b131-fb5e723ab17d", "sighting--01111e73-c070-4da3-a1d4-125ea5b0fd8c", "sighting--3e8183f6-71f4-4604-bf85-ce851171986e", "sighting--bf71170f-89fe-4133-8404-a66893ee54aa", "sighting--93ef0805-ea57-4aee-8a15-8504dd277320", "sighting--86dc823a-a4ae-4e35-afa1-4d8d49f4f3e1", "sighting--60d3490c-83e8-4a2e-8188-7ee87efacff4", "sighting--1f99b712-ebff-40db-b4a7-9714a1f56d22", "sighting--9155359e-b3a2-4e0b-b4ff-ea9af7ce2de8", "sighting--863261bb-3cda-4bec-9b7e-3f501dfacc6f", "sighting--27015bcd-b056-482d-85eb-f80e5f46c74a", "sighting--0d7b03aa-8399-4a21-9f7f-54878cdd14ac", "sighting--c941e726-064f-4ad3-83b6-24e183a3144b", "sighting--b461d207-85d8-4142-a797-6a31dcc9dd5a", "sighting--610ae88e-db56-4029-aaa8-84aed0fd1f18", "sighting--4b9e5088-7a93-4a7e-a2bc-d13230079392", "sighting--ba8183d5-a029-4edb-95b9-82fc2fd69e03", "sighting--b54cd3d5-7a25-4f85-b03c-f51bdc8acb03", "sighting--976dd358-8c50-445f-9df5-a1fd2ac98bc9", "sighting--453e2ddf-6dba-4cb8-833a-214452590ee6", "sighting--3e447d84-ec64-42b4-818f-d462a250e6db", "sighting--f25c9d22-6d01-4042-bd6a-8951dc925c4e", "sighting--57871396-dc73-4d5c-96dc-fc4351c7a52a", "sighting--a2e3d1b8-8d69-4103-9245-1940a682dac4", "sighting--b7f7dc51-d45e-40dc-8d77-65d90d3bea7d", "sighting--c427575c-2405-4d50-a076-e1cd4de7cd35", "sighting--4646d296-1a61-4db7-a7ef-7e5f15f9cec2", "sighting--b17ebd73-b05e-4992-979e-1992f62a6948", "sighting--41c4d834-52e3-48b8-885c-512ec64ba43f", "sighting--ec0262d1-2f7a-4a1c-9108-dfeae2f2cddf", "sighting--087f2d8e-4b1d-4d5b-b3f4-658d61d5a0f7", "sighting--d3cdca17-1a37-4606-91c6-1a601405c1ab", "sighting--8957527c-86bc-4529-afbf-a9989e111c36", "sighting--fc164a83-cc3c-4432-83dc-22e3f96fc6fe", "sighting--bcd84fdc-f879-4bae-846c-3faec5defa93", "sighting--6bb9bf2b-d555-4476-a74c-2029328adf71", "sighting--27333da7-ac8f-49ea-b657-e3ff6a129940", "sighting--19b57227-0110-492d-b163-c29693e39ed5", "sighting--df32051b-b904-4ad4-910d-5accd112a4d7", "sighting--7e886e95-40aa-47cd-9c37-df2092dcea83", "sighting--103383e3-5817-45de-9177-5912aebe05bd", "sighting--475298fb-0049-4429-8128-20ffdb03d2d3", "sighting--2959c0f1-d7e7-442c-9c3b-e7e4f497eab5", "sighting--112e3806-7e1b-4dde-9a99-77eb23b4a21e", "sighting--d9e8e456-73ba-440b-b856-a41c2841d38e", "sighting--00926014-e086-48a9-b430-fa9387437ac9", "sighting--2fe3ec84-0c35-4d78-94eb-0d6de5712381", "sighting--03be8066-3e22-4d8b-8c74-67b5bab67d53", "sighting--11b0cdab-c5a4-4214-9dd5-b127990f70a3", "sighting--a83adb53-7f2a-443b-a2d7-2df1ee8e86fa", "sighting--13af6aa7-bf25-406d-b786-6ebe0d39fd8b", "sighting--b1cefd64-54eb-4eb3-9513-4caf48ce0c0d", "sighting--fc685c75-e5b5-4841-acff-bb3a826a6a67", "sighting--24363dde-6066-41dd-b332-3e95264ef9ff", "sighting--570b61c2-390e-46a6-aeff-1544231476d4", "sighting--3515d42f-02c7-4eaa-b84e-c0d510d33f88", "sighting--795ba980-af3d-4c97-b5ba-5c23fda8080f", "sighting--cb1c73c6-2ec5-4776-8627-df1e639fee3c", "sighting--9fb58a32-82aa-4da8-aec2-e81f2d46ea9a", "sighting--08a54fcf-a218-4d2a-b9af-7f96628574ea", "sighting--04e22412-d5cd-442f-92ad-9a46426965dc", "sighting--8ac26c9b-75a8-401c-8494-0e3b544da1ba", "sighting--2b9b96aa-72ec-4b00-9973-5b87242f41eb", "sighting--a5884840-d758-41b2-835c-37b62dc794f8", "sighting--3610d393-cc77-4ac8-b95c-59f7b147f22a", "sighting--19ef0a06-b35a-4348-b32f-7932433ca7b7", "sighting--7167e835-29c5-458a-a996-9b99cdc28d3a", "sighting--947997fd-1bc2-4c66-9767-7890b1f2033b", "sighting--4188f740-ebd4-415c-8db3-05d33dce1a38", "sighting--7c613868-406c-44ad-9e85-25ed48541888", "sighting--80f91bf9-02e3-4746-a6bc-368f34a11cfb", "sighting--0ef9db32-5f78-4f65-a539-e7b25c197b7d", "sighting--52e154ba-a15d-422f-8509-94bd40149d08", "sighting--732479ed-b68c-4ee1-aa11-98e3cc35402e", "sighting--41fe9a69-9c0f-4462-82a2-7bbd1fcb28cf", "sighting--2c4fe888-cd94-4740-a04e-80a97681dcb2", "sighting--c6e90dfd-8211-405d-95a0-b6cb16e8d81d", "sighting--409ab259-87d5-4a1c-9019-f9b103674519", "sighting--4634a02f-0bf8-4375-8ad4-5db6bf7e743d", "sighting--0b6f9d26-d7fb-40e3-9eb7-1cba6353cf24", "sighting--5be7e225-5008-4a16-8fb4-4e93cf33074d", "sighting--d21fc61f-93e8-4d3d-9d2c-a790f44c652d", "sighting--a27df648-2735-42e3-88fa-eaa24e441bb0", "sighting--01d0d10d-ca31-4490-a0a7-1ee2e34b9677", "sighting--6a7b53fb-ce71-4863-8e12-e2e349044037", "sighting--ba78ec14-c80a-4275-b979-eb014a382fb3", "sighting--17f32cf1-1001-4333-8592-cfff2a0892cd", "sighting--0d06aa44-b03c-4821-9aca-10c5b28957b6", "sighting--97b7530d-5f57-4e01-85ca-e8887162bffb", "sighting--203e8f1f-4a76-4374-9c70-8c5484b71d4e", "sighting--332be29d-d492-4df4-8c8b-4f3d61c8eac4", "sighting--1b4d82ce-6d21-41f4-a4bc-27d404b57e5e", "sighting--ef1a06d5-0992-4000-bfa8-d8b0e2f3126d", "sighting--828d125a-116c-49aa-b2d5-c8fac195ff47", "sighting--aa0d7043-38b6-408a-8277-4496b56c438c", "sighting--da3214a5-e0f4-4d54-9a71-5760836bb2e9", "sighting--9203e61c-8c6a-4498-8f55-806d5cb9f4af", "sighting--38adf07a-fae5-4f54-8283-fb1759e66dd1", "sighting--6437b813-3033-448e-9d33-9eb1c41267e8", "sighting--902a9998-2799-4ba3-93f9-4604e6acbc08", "sighting--79ce15f1-12c1-4048-a3da-65fa20a75c4c", "sighting--c88e0ed1-4de6-4151-96f6-6152a482c854", "sighting--d06ac3d8-ae69-4195-aa55-056abe03d973", "sighting--e812a233-69f5-462d-bb89-723617f7a07e", "sighting--9196c379-be14-4b21-b5f2-06ab5f5939ce", "sighting--da112a88-b22e-440d-a69d-f19794c4aad9", "sighting--26fcfcf7-eddb-4ab1-9ffe-372e0335cdb9", "sighting--611d0226-3375-4782-aadb-7d6a03e489c0", "sighting--a644d845-d297-4083-a16e-45a1e20e8905", "sighting--5fbaa429-34fd-4a8a-bb9a-bb11209d8f87", "sighting--3de7e83d-b6ea-491f-94f8-197d9fb2ff7e", "sighting--266e2e21-ebc3-4def-9647-aa7bf0ebe9ae", "sighting--2105e906-abd2-46aa-a7b6-2cf1974552d5", "sighting--1b8cd717-7ba4-426a-946c-b67895843d76", "sighting--dbc834e5-c6bf-4737-acef-66f29ef8b672", "sighting--c61124fb-25a4-42ce-8616-75d8a2afee79", "sighting--253acbf1-4eec-4bef-ac1a-e8b013be9896", "sighting--735e6b51-3dfc-42f9-a5dd-14190459e1fc", "sighting--0601bcf6-8d66-4141-b9e0-838604e36bb9", "sighting--4d0cd0f3-cf6d-40b0-a144-923b5920a235", "sighting--e0a91b74-0584-4ee7-b5b4-4eededced1ee", "sighting--6c112923-df2d-41fd-8103-8fe5249c4f41", "sighting--d39f6458-45aa-4483-a853-441a1698cbea", "sighting--6775eda0-505a-4287-a885-ce246f3c227c", "sighting--ae66f3ef-29d1-4d9f-b900-4109c9e55759", "sighting--84020b65-10c6-4fe2-bdda-2427b0104f48", "sighting--9fe332ef-49c5-4354-be80-7c81593d61fa", "sighting--925bd657-1b40-4995-a0c9-e0d03fda3763", "sighting--ec65bc07-cb5f-4aa6-9b38-c7a1929b73f5", "sighting--453c0ae7-ead7-4f49-83e2-3922a05e0581", "sighting--dd579a66-f021-4b35-b916-99ff0b8162eb", "sighting--55c928f7-e1ee-4097-bab5-8028342b9a9c", "sighting--c69d042f-7b68-434e-a7d5-98d5d179f8be", "sighting--1e44a42b-1699-4256-b834-2ca639fba793", "sighting--0c5f83df-a233-45a5-8abc-18b860b70063", "sighting--4946dc26-966b-4039-863d-78badbf39308", "sighting--81b58645-53ab-41d5-b31f-685c27d89f8d", "sighting--bf2e8a3b-4f3a-4332-9117-e32dcf05d2da", "sighting--394c2997-fb36-4772-b5b1-68a23baa04ee", "sighting--0a32b394-6746-4939-b757-eddcf0486f82", "sighting--f403d6f2-5095-428a-92f1-0b0be6668382", "sighting--096385fa-29a8-40e0-b631-e470f3a33cf1", "sighting--dbda3189-72ac-4ce1-940e-020aafc6ea15", "sighting--f513e991-3ec5-4863-96fd-8b5bcb4072a9", "sighting--fa62355b-ecbc-48cc-9604-e2f42a87ca6e", "sighting--201d8bda-30af-4c08-81ac-610ca5001692", "sighting--cc647aff-b9a4-44d0-8c91-c62d58757a1a", "sighting--f969d409-5394-4448-a090-de79f9886c9b", "sighting--6cc41d26-db73-4160-bd3d-c471aa1fcf14", "sighting--66d404ed-434e-4d7d-851c-f9e7482ae3d3", "sighting--78d183d2-62a7-4caa-96c5-a699e6104e0d", "sighting--e803dea8-76b6-492a-820f-dfa5f26acd4d", "sighting--6699c9cc-a0bc-4101-a274-2ff04f8945b9", "sighting--bf016d89-d5f7-4e67-981b-04180c7c96de", "sighting--8253c255-30af-4521-bd9c-0375c2eb69a0", "sighting--ef20725d-733f-453c-a8ad-2f0541fe6400", "sighting--09f0ddb2-6b3c-40f9-966b-34bc141d5f72", "sighting--c308ad36-f1e8-41f8-a5b0-fd7b701d5ab2", "sighting--93b25ba0-aea3-4d4c-b397-9466092c2031", "sighting--1755f9da-17a6-4ffa-943f-2af4f6e92b36", "sighting--26c77041-6f6f-471a-bfba-0db036e1bae3", "sighting--38210417-a592-4e42-9234-a3951443a264", "sighting--29276fb7-4e35-464f-84c4-88b03a207334", "sighting--dae53f2b-b4cb-4758-aa85-623438bc98de", "sighting--e94ded8e-7aff-4e11-8284-859057ac5657", "sighting--c794f1e8-d2a0-41e3-a4bc-8021489b8cac", "sighting--dd9ba950-18f6-469a-9e68-200e477a4da2", "sighting--39dbb380-9c5b-4693-9770-859e7138b3cd", "sighting--e8009f9c-26f7-489d-825d-2a4d12787db8", "sighting--1f28aa28-05f7-4088-a9d3-d0cc22203a3e", "sighting--72421ed1-3283-42bb-b5e7-546c4aa31277", "sighting--9cecd9d0-ad90-492e-976d-b85cb6c5ac38", "sighting--5dfe387d-5d4b-40e7-a169-0b4457ebbf2f", "sighting--0d8a8d0c-f0f0-4e5d-8e2b-90bf851349cf", "sighting--efaaddee-b7a5-4240-a9f7-248ed9b72471", "sighting--99477f9b-cb32-4674-9715-cce617d17d70", "sighting--aa8648bd-c6d9-454f-8fbf-4666cdf97798", "sighting--d8344db6-9256-4a59-bc63-a0d9b561ac2b", "sighting--7068390a-aa9a-4433-96e0-1b8c0d8213ed", "sighting--0e04c2b4-94ec-4eda-bc95-384ae8cb7ca8", "sighting--da9d998d-cd15-4efa-87a5-dc37faad0105", "sighting--16e7114a-74eb-40ae-8827-d6b84819b7e5", "sighting--e3b8cc7b-fd71-4ac3-b6aa-ec50065ec760", "sighting--7cd4fc71-eef6-4a12-99d4-0adbcf702d35", "sighting--08a60b64-6415-4be8-9f18-2da086e7268a", "sighting--a58d17db-8d05-481e-9f84-4175e0963065", "sighting--460fe6ec-1e7b-4df4-9389-0da357226e4e", "sighting--ccd093c6-3354-4bd4-b4c6-ca8868302fff", "sighting--8535a9a2-2e96-4eef-8e01-454932f6934b", "sighting--a340adb8-cc62-4790-b2d2-ccbb43b7b285", "sighting--6883f76a-b34c-4c46-b4a3-47d17edae504", "sighting--da0c19e5-c1d6-45ef-aeee-df4157773c3f", "sighting--385b7aaf-dc2b-4657-aa86-406023a817c7", "sighting--a291dd7a-3268-4027-90a4-e3bdb0f30e79", "sighting--7b566ec0-c88a-4832-adb9-079be05b708c", "sighting--243efc20-cb87-4f6c-99ba-9a6745f11147", "sighting--3000707c-6b27-4079-bb09-04940f92214d", "sighting--e0cc063a-51ab-4f93-afaf-d4a0bad9800c", "sighting--05ca93fd-db69-458d-afc1-779946171b53", "sighting--bc7ce347-1c3c-412d-8653-87931301f72c", "sighting--fea10cc5-2877-4ed6-a5d5-ff8536b2f50e", "sighting--2669dffc-791b-4dba-8f58-a758cb2a1866", "sighting--ac3c789e-b1e2-427b-9465-36c5d90514cf", "sighting--0714e386-f3bf-48a6-a4d6-73909697b371", "sighting--fd92fb74-8723-4b26-b0dc-80c36f96b946", "sighting--0623b513-8b15-49f3-a3bd-d0fecb07f0a6", "sighting--1bc8e091-b5dd-4d14-92e6-6d210aa913f0", "sighting--963e4be1-52bc-4350-8f18-4d3dfb81b97c", "sighting--03ef34b2-3832-40e1-926c-566484d47a4d", "sighting--a923b245-c85a-46b2-9c35-39dbcca3800f", "sighting--d04e4d62-251f-4553-8111-ab0aeb814e52", "sighting--ca1202a4-88ae-4816-ace5-7c3a8bcecfa3", "sighting--ab3b79b7-c163-4444-8ffc-26b69adad08a", "sighting--75d35fcc-073e-434b-8b59-9278d4f8e94a", "sighting--6029e17c-27cd-4d4e-96d3-9363d74187c9", "sighting--9c7c3bda-4033-4997-a541-85d789d7163b", "sighting--7bdec48c-c92d-44f0-b48b-f1771141e810", "sighting--4637602e-a631-4a04-8866-9aa30044698e", "sighting--05e8ef69-1253-4f6a-81b1-ae73a9a16f38", "sighting--c2d687b0-4ce0-4b4b-a568-2c9425d08477", "sighting--ef7fe36d-d1b5-4d74-a4fe-bd2c64ff8141", "sighting--406b4c4a-428e-41ed-9323-110150bf2b93", "sighting--fd9cbd59-1b19-4e80-8ca4-04aaaa7d5e8e", "sighting--afc1fdbc-4336-4b37-93d2-7609f8f0481c", "sighting--27f5176b-e7d6-49dd-980e-b5151205c67b", "sighting--7d29b2a2-29f2-4d26-bbe6-a9c3afe3ff91", "sighting--b3589dc2-6b1a-4012-892b-f82f9d833937", "sighting--3c959dc1-2a63-4020-84cf-240b149bbaa7", "sighting--1dda92fc-468e-4747-99bb-aa069cdd8170", "sighting--604faab2-fe23-4546-baa9-8e6e1d942e0b", "sighting--5b89467e-913d-41a1-9093-2364b2ea9ddc", "sighting--66e9e1bc-9372-4a4a-849d-3d68856d182c", "sighting--be7e9edc-9595-4d4b-9969-e30b87985318", "sighting--aaef5b18-867e-4f04-9f73-462ac2cc6646", "sighting--d2f42fc0-5a1b-440b-b323-63bf9d2849e3", "sighting--c3759e29-cc9e-476e-a677-189c26d70750", "sighting--67eadfaa-cfc4-4e22-8217-0a2b1f1c8643", "sighting--d28e99ca-a086-4277-8889-de06fd462e89", "sighting--401f94e5-2d5f-427a-bee9-c7c2aa03d0f2", "sighting--a97b7aa6-c797-45a6-89d9-56687bc6679a", "sighting--a21635a8-40b6-4bd5-8b30-2008c5b69db3", "sighting--7da4ff4c-5999-4573-a8a2-63733a83e2f1", "sighting--09c1dadf-ba78-4699-a8de-dc7ee8aed0a5", "sighting--aa3c1dcc-c705-4dd0-9654-d1601f1c96df", "sighting--fa98f9e2-77fa-4f83-ad25-151975bb942b", "sighting--540e085d-a5ba-4226-bd04-ad441fdf60f8", "sighting--49096fa8-30e5-408a-a1d0-39bd39aaa909", "sighting--bf5f529b-1748-4da5-95b6-3c6292c60b48", "sighting--8e05b914-290a-4969-872a-395d2bc1a1b1", "sighting--1eec0d76-23c0-44d8-892e-0118876e882b", "sighting--7af40523-2d24-4edd-a6a8-7fdccf6f88c6", "sighting--dacaef53-5e90-49aa-989c-b6c49f6d148a", "sighting--98d4219a-fdda-4019-b0e5-d80c8c2424ab", "sighting--fa424d32-a3fe-4229-a6ce-0a40be095e48", "sighting--96ea29a5-cf4d-4a37-a94f-c89cd3792bdf", "sighting--f52f3d3c-2319-48e1-b4a9-59e765fd16ba", "sighting--3ace7114-c3f7-410a-9a2e-674e06c6edb6", "sighting--b62fa6ec-3bfe-44d9-83ef-790a791ce0b6", "sighting--82ea334c-3503-436e-b093-750c6fe0b5a9", "sighting--3fc55789-b6f9-44b7-8676-a6a66da71aa6", "sighting--9662f1a1-f418-4a2a-9d06-819a6c887e7c", "sighting--963b24e3-0782-4721-b4da-3f7d004f6792", "sighting--56a71b55-e088-4878-bf7a-c6aa92b51e77", "sighting--e41d4d7d-8e59-43e7-8d7f-3667ff3839cf", "sighting--ded89377-7f71-42da-9e50-9d44a254a050", "sighting--c222bdc3-b8cd-4e93-ae22-f77cf1a8ffdd", "sighting--ca415a85-925f-4d4b-9ff0-c7225c314aa1", "sighting--4ef0c366-8a98-4620-ba1a-ee23dbdde0b1", "sighting--72697911-c956-4d48-820f-4f9be7e2b433", "sighting--887da265-6171-4a1b-963d-5ee14217ac16", "sighting--5f2493b7-184b-4812-86d9-b4453e67392e", "sighting--89d131a2-ea28-483b-a93c-dd449c211849", "sighting--4a17fc1d-35ba-4c4f-a84f-0421dea4b40e", "sighting--eadc7b18-400c-42ae-905b-5d47ffe5113a", "sighting--e3f8408e-346a-4a0c-8834-45a9064f95a5", "sighting--2e10142a-2d65-41a9-9d65-6ed6144dbe62", "sighting--c742a354-6ee2-4549-8c3b-ea7194ee936a", "sighting--dd904c21-efcc-4b4b-a451-2fef4f782b3e", "sighting--db22091a-ba6e-4c50-ae8c-243c8ace826e", "sighting--125bc6b9-28f3-425b-a32b-b58f5d79eaac", "sighting--7e1aae24-41c3-48a5-ada0-5cc9aba61850", "sighting--f8ddf67b-2ee0-4d48-becb-5a36b31451d2", "sighting--483fa44a-b0bb-46a3-a08d-2378ad75cce4", "sighting--aa639ce0-a498-4d6f-8c3d-ed7f1865908a", "sighting--bfa23d24-f7d5-492f-b3fc-34f67c144d58", "sighting--b9f17d05-1b88-480c-8cee-fb2408022096", "sighting--67ef3951-5521-42a1-8d51-fadf7305164a", "sighting--fb00c14e-cb41-4339-879d-75f20d98abd9", "sighting--d4246f1d-2ce7-4dca-b53a-83042821c785", "sighting--8d13479f-1587-4971-ab70-1ee30dc7a920", "sighting--b7f686a1-a22c-41dd-9c79-de2bcd8c64a5", "sighting--8c2b27a4-83c6-4641-97c7-d83879ae8ffe", "sighting--8918ccaf-31a1-40c2-92a0-c52804bf06c5", "sighting--d77ade36-7ed0-4c93-91b6-5b4ef5902385", "sighting--4822f13e-cbd8-41a0-ae41-bdddb573b875", "sighting--1ffcd933-5fc2-4e2c-abcf-7c9980772aef", "sighting--f26b04c9-8673-437b-8d3f-755ff138170f", "sighting--09573a1d-9b02-45e2-af80-ff25828657fb", "sighting--1e470e5a-167b-440f-b379-3febec770a55", "sighting--7ce465d3-0479-4c23-82bc-5ad0594c84e8", "sighting--5b72f21e-c55e-43ea-a213-0ac8ea528c56", "sighting--9b1c5e9e-6121-4a43-9de7-742520879716", "sighting--a0322a32-c7a3-45e2-96bc-45e86874f52c", "sighting--affe4370-7b6c-4437-b92e-3d5656e54f91", "sighting--b701f4db-8a20-4cb9-b963-9753392348ac", "sighting--bca85426-44b8-4205-97c8-d6399256e7d4", "sighting--bf72a1a6-3888-47db-baa5-31e6bd92ec9c", "sighting--645f727b-00bb-4e0d-b069-c993289c5853", "sighting--7c200396-3416-45a2-af45-69f936cc7bc9", "sighting--1ac5dc21-e3f0-4877-bcfd-d54d3f7ba5d6", "sighting--0ec84223-173c-45b5-845a-99c35554878b", "sighting--8bc007e8-db28-47c0-905f-3265b1a31e83", "sighting--f1286b5c-875f-43db-908b-9a68329b0665", "sighting--9b325935-8f4d-49c3-bb0f-bd3bb704e179", "sighting--3fdf04ba-01b1-4bc6-b7ec-21ac1622cfeb", "sighting--9769ec8f-1f67-477f-98c5-f85909d528dd", "sighting--f94eb3b5-4764-4c55-a386-5d6bf3be48a6", "sighting--d6771ad9-cadd-4bbb-b9a3-391b4ad2aa4c", "sighting--96da5eb2-1618-4844-954e-456c45d7481c", "sighting--29fd68eb-fcd0-42a1-8530-bd00a0113688", "sighting--d09d5630-48bd-4b9f-b3f3-fd6cdb6a2be8", "sighting--2b41b598-1bf3-4ffb-843d-4777b881bc82", "sighting--30c12351-c5fa-42b3-9c30-d5dc045c818e", "sighting--5a177b00-1ff4-46b8-9497-931a23e06564", "sighting--21eade5a-2907-4c7b-822a-290eb609ee8f", "sighting--406f4477-ec1f-470f-a9f0-37bddd8985c7", "sighting--2d29ca16-3607-4ef1-9f01-c7f48296a825", "sighting--84e418cd-8791-4d21-be84-1d73318016bf", "sighting--71b024fc-e6a8-4112-88ee-90591811e840", "sighting--761c5491-7706-40ab-8894-ceba947bb19a", "sighting--7d9695c2-e7f9-4ce2-b29f-807a780bdad5", "sighting--04757608-65e3-4cb6-8acb-34d7d722ca4e", "sighting--e04422c2-a99f-4ba4-af60-9dc8aa539516", "sighting--271760dc-2b74-4ceb-864b-b47b59ed2290", "sighting--5724dac3-13b8-4fbd-8451-3a65bcaddc76", "sighting--69efc036-2fe4-42fd-8a46-49545f495eac", "sighting--8b7d4bdf-d29b-40fa-9b4c-7d2e6aabc67d", "sighting--508ab607-b05b-42ec-b241-c68c804dc9d6", "sighting--db823454-f26a-441d-bd0f-d59c6fdfa804", "sighting--f69fd5b6-63de-432d-ba18-9ecbc8c7e1d3", "sighting--60ffe89e-3eef-482e-9e6d-64a5bff006b8", "sighting--c4839041-40a9-4d6c-a32d-c50fdaa1acf8", "sighting--26e6d780-2722-495b-88b3-650934321f6c", "sighting--963858b6-e4ae-4fb1-a81d-163467153541", "sighting--4fe855ad-41f1-416f-9823-8659322056f9", "sighting--49d26d46-2ccb-49d7-b42c-0f1088d5fa15", "sighting--77ef6924-ddec-4d46-9683-97cad11d576a", "sighting--daa38717-f1ae-47cd-917c-a5befcc3e167", "sighting--1fb31c64-52c3-4dae-b403-52b37fd76905", "sighting--7eff2359-9508-45d8-9668-8ad0d1d17895", "sighting--f4367228-1337-48ae-8a92-53960c70a0fb", "sighting--9ba7bfa0-fe76-47a6-b5a1-b294cff4b310", "sighting--fc6fab37-549b-46bc-ad04-334efbd4edcb", "sighting--56001759-27b3-4a9f-84f7-098c1c32390b", "sighting--feced580-92b6-476d-9f1d-6eef3e87e184", "sighting--dea64eff-e69e-43c0-901a-8cfab9f9cf07", "sighting--9120da33-d6de-4dfc-992e-946e4b803970", "sighting--42b8926d-d0ef-45da-b16f-6b6f1c040191", "sighting--ef34a19d-2abb-47e3-80bc-85ec3c453653", "sighting--f1cbef46-bc64-441b-ac1d-a3534d86352a", "sighting--f7240dda-b9a2-4ea9-85d3-f0d4147c10bf", "sighting--11effb21-47cc-45b9-a613-38ec75aee177", "sighting--461d90ab-fc4a-4b8b-9c76-55ebd5d40518", "sighting--40173897-a76d-4768-a2fa-28feee6f5525", "sighting--b73ee63a-2f59-40af-b8ab-007e1092fb5b", "sighting--948d9b24-59e2-46c8-a215-11976cef9b87", "sighting--5c93157a-3fa1-4bac-85cd-ac20c55e613c", "sighting--b8cdf8f2-076c-4b34-a400-832ed7d77e93", "sighting--1846ba8b-0b84-4050-960b-4803b2389e3f", "sighting--41ede4b7-e348-4811-8bc7-fce384cba58c", "sighting--a2b7823d-25e3-4f7e-951b-4e6605c535ce", "sighting--9a083314-004b-479f-ba90-8409b112995f", "sighting--74323569-d8c5-47d7-859c-249f8183ae87", "sighting--25ce61b6-5a31-42ed-b75e-e2c42131b62d", "sighting--3c393b37-d5a3-49ea-b3c1-24d2427f4e54", "sighting--f1b8f77b-0940-403f-a3d7-e88d31fba86e", "sighting--f29c6dbd-4bd4-4ca1-a23c-7cc65ad63840", "sighting--95dc4e43-cda4-4ec2-b633-a51f7da1ddb1", "sighting--e7230b28-5a5e-4277-a0f1-22fb88ddb685", "sighting--22500fac-d300-4b82-9a08-d62477b98307", "sighting--1eb692ef-517f-41ac-bc4a-4a55171d80b7", "sighting--d83e9d93-265a-4fa0-abb6-07385452c861", "sighting--44c7c01f-c584-4214-8d2b-ce8257a0bc91", "sighting--dd35fd98-1a6f-4d63-8f93-fe2b949e130b", "sighting--957fe031-7a8f-4179-b836-1865794be4b7", "sighting--5d2ccdc1-50c7-4c4f-8508-03b2348f91ec", "sighting--44a3ddd7-a920-4cef-9340-5db1721090a7", "sighting--8c7b9707-27f2-46ec-9d82-1e4061562f8b", "sighting--a2f1e3de-cb51-4a15-9030-51cd6caad90a", "sighting--7fa68e99-26bd-448d-8db0-5688a2afc000", "sighting--78a74d60-9052-4d20-a269-b1fb87ff4043", "sighting--082df7c0-6dfd-4b6a-a1e4-ecedae02d4ac", "sighting--051dffb2-38fd-4ed4-b830-e3c501adcf42", "sighting--1fa47597-f090-441b-a12a-0fb3a53b4128", "sighting--127d4ced-55c6-45b3-83e0-2e74c9f3d384", "sighting--6c028b5a-44e0-4dd0-ab1b-32c68c20f61b", "sighting--4cbdcf88-d213-4dc4-be2f-a0f3176e1ef8", "sighting--1027ebfe-9c24-4a06-9575-01494fc370aa", "sighting--9e20e594-2907-4d8f-8e7c-b8820b845b57", "sighting--ac394c67-97d8-4931-b96b-5825194ed268", "sighting--efe86122-7bd9-497a-9cf2-ca68f05ba848", "sighting--05cb70ee-6da2-4f73-aa47-7a172ed3b37e", "sighting--64a4250d-26d8-4951-81cc-691319983236", "sighting--408390a8-f814-4bfd-92cd-d9d99f76fb16", "sighting--cfca8d99-95eb-4257-a463-f553d6392433", "sighting--213de1c9-72ad-4513-bbaa-4ce74bfced64", "sighting--fd137cd6-2be8-4b13-9698-7a484ca0158f", "sighting--bc5d37c8-8d34-468e-9f98-ff66ab52c67f", "sighting--a65638d6-2240-41d1-9111-7a5b2d3a1a1e", "sighting--0318d61e-c28e-4c46-a0f5-697520ff25d2", "sighting--e11e9534-7270-479a-a4d6-bd5b6a4e9d17", "sighting--e7b6ebbe-51e8-4ef4-b59c-2ce55ffa8663", "sighting--44a9544b-158d-4357-a374-679306f23b5f", "sighting--51ce3447-7df4-46ae-be2f-bd5d2ed5285d", "sighting--7a39422d-33c9-4273-a0ac-567163d30c50", "sighting--b65b18b4-9234-4fa5-aec9-bec65dabfb0e", "sighting--a6ef17ef-bfb7-4190-a926-a166a70b85f3", "sighting--d3281991-9b65-421a-bd03-2b2d3e76b6b0", "sighting--f6ce00ae-17f0-4733-8998-7157c8bb4c77", "sighting--10754c0f-c386-4c9a-920a-763a2f9689e5", "sighting--5a13a39b-2f25-4ff3-a2f9-378b30021386", "sighting--e9a3320f-cb8a-497c-80c6-260e32b3d5a8", "sighting--e4d1e6fa-4cfa-4df8-b390-bb684ead2114", "sighting--46a49ce2-0676-4a2e-aa7f-509057a939ab", "sighting--b57f8479-7585-445d-91d1-f953808ca0f0", "sighting--f63cc7eb-2219-4e32-a310-b2012ef2f0f2", "sighting--21151965-5ae9-407f-b49e-1733cc58521d", "sighting--ffe0d9f4-0a74-4d9f-838e-be33af4ce651", "sighting--4310aa48-0f78-4320-8bef-d6e756cdd87e", "sighting--5071cdad-e081-4c7c-86ce-3d7a61ebbd7d", "sighting--c2926b23-c48a-4ab8-bf55-eb32d723c691", "sighting--c0c62b5b-adca-4c71-a4c1-b5981c5565f8", "sighting--4d1f5dd0-06e8-4310-8457-aadc39c4860e", "sighting--d00fd5d1-ce32-4a2a-b3fa-4977d920a0b0", "sighting--498a9c12-d65b-431f-99a4-a79be2e269e8", "sighting--e844a34b-6295-45b5-8da0-0fb4222f8be2", "sighting--a8f639fc-0bcd-49c1-877b-4c2eedaafb25", "sighting--6e0f57ab-3b13-4dc0-a703-26cecc84713d", "sighting--0a542399-2d32-4225-92f7-cc4788d2ad26", "sighting--fe40ebac-90f7-493a-92db-2b26d71ae287", "sighting--bd64bbfa-e642-46f1-859e-4e4a1e10f754", "sighting--f17bda12-6a2e-4736-b819-b64977b4d852", "sighting--9abe55a6-7ebb-4612-b963-77a8caec3962", "sighting--9f568453-8dae-4aa7-a4a0-fa860c2fc5b4", "sighting--2a8da457-5e87-4fad-a7b4-c08cf3456b8f", "sighting--26b191ac-8dd3-4da8-b7bd-3b2dcd52f527", "sighting--5a247c5e-bf10-4b81-b47f-f8c2612126e6", "sighting--819a9d19-f0d4-4186-af36-4f2970ac30b4", "sighting--9491e163-3772-4794-9312-40a567119363", "sighting--0da7f7e1-6f7c-4bdd-bbe3-5ba7c2330c5c", "sighting--a2dd0005-1f8c-4a91-b5ad-492b145e9604", "sighting--97bae4ac-5572-4379-9339-724d51ef959d", "sighting--11cddad4-2e99-4482-9c8d-909010c5e868", "sighting--1dd15ab7-7577-4006-8894-67e3e8a6297f", "sighting--f5ab1012-8048-448f-a14d-8b96c8cb52d1", "sighting--ac0aac54-56c8-402f-9705-75961f4452fe", "sighting--247c97e6-9cdf-4902-95cd-ece079df487c", "sighting--dacce314-23e5-43f9-a038-49c93c8c4611", "sighting--8109b03c-e930-4bbf-9a18-60fb89da222e", "sighting--ada2dc7e-29d6-477f-a0bc-514b98813828", "sighting--af94767f-aee2-4983-9017-6627b706fbbd", "sighting--82825f53-e4e1-4e90-8dfd-24c233dd78ed", "sighting--4cba32b9-f082-49f4-9cc8-5efb77ab66d5", "sighting--f46f6a94-407c-4830-8eb4-2e4b778b770c", "sighting--39379e64-683e-426f-9e47-3f5aac24cf94", "sighting--1dc22032-efd1-4975-ad9c-aa46edc3f13b", "sighting--1208b7f2-97d7-4149-8ed2-a0da02ee95b6", "sighting--a4664a50-35e5-43c3-9e90-40d157259d0d", "sighting--6d454ffa-8be5-4e6b-8c17-d310211c7887", "sighting--e8908c4d-fa0b-4215-ab03-d399095a2708", "sighting--f972fe04-1222-435b-ba38-a0147bb4774b", "sighting--f1ed7009-2d74-4eb3-8426-35cebdf9d69d", "sighting--00d767c4-7615-4843-ab13-4b1211f4ddc4", "sighting--04c7efd7-0b04-4256-8ca4-97565e55cc87", "sighting--439de9de-b8e4-4fec-908a-ba89e61eee13", "sighting--2bed833b-3b99-4aa2-acf5-0c6163f01d02", "sighting--45f189e9-c36b-42fe-8fdd-869c7899fb0c", "sighting--3ab94818-d500-4ccb-9970-cce9a0fe267b", "sighting--32162ece-0747-4631-9704-6f55059ee1cf", "sighting--83821c9a-ba6d-4514-8ad0-0d7abb0d5de1", "sighting--127b74c5-6f5b-43d2-b876-7bc263f1303c", "sighting--f7a0190e-8a73-4e65-8938-1b293e521506", "sighting--a8616461-182a-491e-967c-81390c4d3a4b", "sighting--44f12d4b-8d0b-433b-a025-a15f3e05ae8c", "sighting--920e3b79-1fb8-476a-8fdb-4044557d83b8", "sighting--b64f82e8-6f33-4a22-b215-7535fa765f81", "sighting--7a9d3227-13ed-4390-a2d6-543ea07da70a", "sighting--2f5691ef-a203-40cb-8910-8a9b828593d7", "sighting--46033b34-8852-47b7-bb96-dda9f34e79c4", "sighting--35a55b54-eb08-49fd-ad2c-d5f2c45e6f73", "sighting--4de3b369-fd5c-4be5-9acf-0d2546aa0ffa", "sighting--c763120f-513d-4a3d-a909-4dd2537b2f8d", "sighting--49abf042-545d-4395-8ea1-e6b6b2cbf19e", "sighting--53fc16b6-242c-4ef5-b765-0f59868595e6", "sighting--65320995-5af9-4ab9-8546-da2e9da6192f", "sighting--c8ae65fc-e2c6-4670-a684-7b0e8ee74d0d", "sighting--7e234af0-387b-4e2e-95ab-c82c747eb2df", "sighting--5fc59bd7-a221-48ce-bb3b-5e875c7a60d0", "sighting--29087b69-90e3-4904-84e7-0cb7092bb5a5", "sighting--82cbf679-2b85-4415-986a-a1373bde6840", "sighting--a360370a-ad00-48f9-8911-c589a5bdd89d", "sighting--940f16ca-2f76-4bc9-bd9a-031f6dde1991", "sighting--8258a2cc-d0bd-4fb0-80fb-7c865d6ef11d", "sighting--3136151f-7258-4e30-ab6f-9f9b4d7658ee", "sighting--7acf3111-5085-4d15-8c27-fb95de526c1d", "sighting--fddc2ae4-6703-43ca-ac45-01f5ffa18150", "sighting--66835661-b099-49b6-8880-28cf8f058390", "sighting--93c3fec9-72ba-4750-9eba-f44120e0f381", "sighting--703b96db-fd6b-4f9d-a693-d2c3e6256e17", "sighting--54563587-8e83-4712-8c7f-f605c510002c", "sighting--0e944e60-bf47-47f0-acac-27543a29084e", "sighting--45b33d1e-26c5-4e0f-bb9f-d526c4a5ed18", "sighting--a1cd88a8-8b0f-4b2e-8e96-f0d41c870c67", "sighting--6f34bbc9-b37a-46aa-856f-61b0a63ab785", "sighting--a993aea4-c5bd-4de5-8a32-d62a476fe3b6", "sighting--69d1d0b2-794c-4067-8c3c-42603e3bcce4", "sighting--4be917c6-7ac8-4d9a-952f-77f8664d1441", "sighting--8558550f-68b2-4374-9035-7dca0464b215", "sighting--65099d8e-e131-42e4-bc6a-13efb2bf47e9", "sighting--108acda4-b628-429f-8d41-bc30dbfff48b", "sighting--d7d457a2-4935-482a-b4cf-5f7585a8a660", "sighting--40cde1bf-870e-430b-b6b5-8202530ad99f", "sighting--8898d3cb-1be4-4870-981f-01e333ba145d", "sighting--73af2952-dd15-4b27-9307-cef2801dc413", "sighting--6dd79ac9-5621-4cf4-b0b6-c264d3083201", "sighting--1d1da072-523b-4c34-96c3-4b3419d92be2", "sighting--ac36cff0-233d-43f2-9d68-164335447203", "sighting--4c16e876-cc33-48a0-9d37-378c1fa2678e", "sighting--da00e963-ff6f-4856-90d3-26f097e64c72", "sighting--3f99e9b9-3a94-42a1-aa5b-4e4d235204d7", "sighting--de5d9169-78a3-41e1-b1a9-3cc61e8c59a4", "sighting--76391417-3a96-4a88-bf13-4096c07810f5", "sighting--5f21c3e0-2062-4bf6-81bf-6c2fd508f786", "sighting--cd5dd0e0-5bd8-4c8e-a970-971fe81d6df0", "sighting--3ec9aadf-f8ef-4177-bffd-cdcfa99ed98a", "sighting--b495ae76-2535-441e-9533-bd39978b8c18", "sighting--5830d6e4-b48d-41f5-b9b1-5b7349eacddb", "sighting--9c487448-3cb1-4199-8f27-41ea2039abee", "sighting--655b89df-7c46-4b2e-bdb3-7400c1f0a76a", "sighting--2f3d5da1-d676-4721-9ef6-d93057d726ba", "sighting--3e4d0710-eb10-4338-9384-897c73b243f0", "sighting--1bb0052a-6392-4dbc-996c-a21b5bc355d4", "sighting--ecf71884-0dc8-4261-b94e-7b7a332fdeb5", "sighting--0698da34-ea86-4612-a130-66640662389a", "sighting--deccf449-7b90-4937-abf6-e9dacb713e59", "sighting--9d1b6fcb-153b-4bc9-9eac-ec5c14779f4e", "sighting--9db5b340-952c-4f61-a23e-d17bf333b703", "sighting--603eb360-ab28-4243-be39-c25af18d07c9", "sighting--9c3e8c59-5fc6-4bf2-b7e3-68ac41f0cdfb", "sighting--daf63ad3-ffa1-4511-9fea-d0db264b735f", "sighting--9352c224-dcae-4eb5-860f-db7b3954c2ef", "sighting--0277bb77-0882-4158-ba75-814a600af039", "sighting--f2efc271-08af-43ab-9bb7-211606804eb7", "sighting--12662176-b65b-4e23-b47c-03604ea0e8a8", "sighting--09b870af-7db2-4f32-880d-4d61357ab7cc", "sighting--673f4820-8f9d-4163-8765-24aff3f4afce", "sighting--834c05b0-974f-4d4c-8099-042065977394", "sighting--e9704910-1da8-4cdf-b474-34e648592970", "sighting--5528c8fc-8321-482c-8300-cf85995f491c", "sighting--cd04492c-5c09-466f-bd58-f0989eb9dd68", "sighting--172d6083-1727-496d-a9e3-b0cf353a34a1", "sighting--7522bcc5-29b1-45b6-9672-3de15644aab2", "sighting--068634f8-e24d-4c00-84cc-8036a3b69f4a", "sighting--c69ef66a-159d-4140-813a-922d1671ce2d", "sighting--e080bf0f-b4ab-4afd-a6de-72c22764306e", "sighting--fbd1fed7-fe37-49cf-9fff-558a846ae663", "sighting--bb9d8aef-07db-47f1-b7b2-70fdfa8e62b2", "sighting--6990e517-897b-48f9-87d8-1f441175a824", "sighting--acb9df12-b1ab-424b-8761-3e14d1659321", "sighting--c7a320f5-a7a8-4dd2-b997-06c99b98c780", "sighting--13e19933-5fca-4633-9c4a-274f8f374d85", "sighting--ba2a366f-dd15-4d80-ac4b-3a26beeb6918", "sighting--b938c7f3-b571-42d4-84b1-36bc4ddacc31", "sighting--61c8c6c1-143c-4a0e-9f06-f7a6468d36e2", "sighting--ca509d27-103e-4741-ad29-1ac1a0f28737", "sighting--1379a126-ca6e-42d6-b5a9-0107de8dd447", "sighting--34f3ae8e-ea63-4542-8fa6-03e535d95fd4", "sighting--1237ca1d-9a70-4a8f-8a09-96af8329788f", "sighting--152152c5-218b-4127-89a1-d847d3125374", "sighting--df929905-5a77-4234-9560-0b9bdb916e69", "sighting--5c00ffdf-f2d2-4563-be4d-3b466d9ca85b", "sighting--ecceccb5-96ad-4c6c-8615-2447938cc724", "sighting--a482a744-36dc-459a-b799-a947ae641618", "sighting--156e673d-49da-4d6f-a599-d9d951d104c0", "sighting--403e5ac7-ebaf-40cd-a3f1-0cbcf65573ae", "sighting--33ae1c98-08eb-4852-b93c-0216e21814ac", "sighting--d0b5192e-3eb5-47be-bd28-3aca0a12798f", "sighting--6fda7a34-aa98-4321-8962-9d4a214855eb", "sighting--21822f6d-ad18-49fe-aa07-c76e42f1f1d6", "sighting--aa393a96-9596-4eec-b75e-8c0e67791bbd", "sighting--e752248d-a533-453c-9ed5-a5de60a1894d", "sighting--4ad5905d-e222-4f89-ac47-dd0cc41fc7b7", "sighting--ce74ac5c-82fc-4bf9-876b-849239bf9525", "sighting--2332bea6-3c8c-49e8-8a34-ee19bb23023a", "sighting--e3f17b48-18c7-4f57-b322-825d8f8cae64", "sighting--fd9fb030-22f3-4339-a0a8-8c55e458e5ee", "sighting--3f31b6e1-3547-49ed-ad27-28af5ec3f3f0", "sighting--0ca36ae9-b10c-4f5d-a6cb-be7c58579171", "sighting--47be7106-c316-40fe-a298-2d08dbbbe2ac", "sighting--573cd97f-e00d-47ba-8b6d-7abbc9abf5d9", "sighting--671a3341-f8dc-477f-b477-31e00e757724", "sighting--99960120-7eb7-424c-b2ff-318198409c24", "sighting--a0742fd1-3428-4141-9ff0-a0e4637a0e3f", "sighting--f7011b7b-04c8-4dfe-8458-0ce182e62eea", "sighting--e44b2f1a-9ebb-4731-b5ce-211b33ae8331", "sighting--efb263a9-40e7-4a4c-a5a3-78e802dbe105", "sighting--935887e1-999d-4da7-9995-217475267718", "sighting--2b9dcc36-1748-4c22-a2f7-304524255a4c", "sighting--0d56e6eb-1926-435f-ba76-faa3b51f1c91", "sighting--bbccc2db-ccad-47e5-b562-e5ca468bac15", "sighting--097d9935-91cf-4ed4-8ebd-12ee45090aca", "sighting--5254b65c-aeb7-45fa-85e5-57275aa17a62", "sighting--952f4cf7-1947-4d25-80af-62b6b31c5edd", "sighting--80d84d9f-f32f-42ba-9f77-0540a0e09449", "sighting--8a871afe-3a24-486c-ac03-32f9757cf541", "sighting--ab6a264d-0cde-42fc-bf1f-81e90b532588", "sighting--9cbc3bee-458d-4254-b271-dc04e9b744f8", "sighting--428890e6-a4f9-4f11-80f5-2f518eedfa78", "sighting--5bbce1b2-6536-4cd4-9c98-ed252b2b1694", "sighting--62e2b557-d19f-4cf8-abd6-bc9071b642e1", "sighting--fc7909bd-3174-4bfe-a6dd-80dcbee132ca", "sighting--dbd990af-03c4-4c88-afe0-1b2813135d82", "sighting--ba45c412-8f50-4be7-977a-b0eeb8151700", "sighting--dca82c2f-ecb2-4132-8dfb-badd616e12da", "sighting--e10159ba-aae3-4f7d-a086-4dc60c9ef90c", "sighting--048ee12b-5226-43af-bcc3-cfb9b3ee86c2", "sighting--a749020c-bb06-4fb3-b7fa-16d778fd7472", "sighting--0be9bd61-53ec-4a1f-9e3c-71a421d21041", "sighting--71f85b7c-961f-438f-b181-9edf6b1ac893", "sighting--86ae802a-8b37-44db-a1f3-1e357865f9ed", "sighting--b6a038fe-4766-45ab-8c79-d2b48ac9eccc", "sighting--3480fdc1-d89e-40cb-a496-f9552b5b37d0", "sighting--a787f3e8-814c-4b32-b03d-1fe6b18c7652", "sighting--600f1d79-2785-4b1a-a336-edf7695d89b6", "sighting--d685854b-c196-4bf6-9bae-c403a72b82db", "sighting--52ada3fa-4133-4dcd-9ccc-fe581de72ca3", "sighting--e75bb359-1209-4157-a0cd-aa69e45e0624", "sighting--b80b9b04-1346-49e4-a8dd-7b26d4e01b5d", "sighting--df5cad0c-3497-4462-b3ee-4dbe7c51b481", "sighting--45c6a129-c50a-4ef4-9f82-529102324ee7", "sighting--b32ef1ee-e1e9-447f-8654-c37fa45aff40", "sighting--1bed29c6-13c0-488c-b3c6-380f94575632", "sighting--603e7009-b1be-4000-b78f-79734c6d54e8", "sighting--152bf1df-cea0-40cd-8913-f9618e468636", "sighting--de6fc6a7-103a-4f24-9be9-bfc9d8057f00", "sighting--77dbf0e8-d6d9-408c-a91e-0171c04933b4", "sighting--d46384b2-0824-453a-a149-81ca09ad4623", "sighting--a0c0d25d-c3a6-4304-a8e1-feb0104441a5", "sighting--38d48955-10ec-4e60-bd23-d7b4b8bafd64", "sighting--db51a31e-4b23-4229-a1bf-d26eab086beb", "sighting--30fb0805-941f-4607-9ce3-0ca6c6681ff0", "sighting--044b9c45-c3a7-4a1f-8658-7e561421d92b", "sighting--fa803681-ccda-45bf-be2f-2241ad66c89a", "sighting--23b45434-7ad3-4c1f-a991-38c53bf13417", "sighting--a4508e13-e75e-4f20-8bcf-77cd041f6f04", "sighting--27cfe197-37e0-49a8-9127-e3f461ebf3fe", "sighting--7ab1b485-84fb-4367-b390-96363fb42233", "sighting--ae84e4ce-db04-4cb3-bd40-4a57d7ad2f4c", "sighting--7704877b-0b6c-4d53-b25c-956b3bc701b8", "sighting--7d22758b-a4d5-47db-9377-d900dad6e015", "sighting--18e4783a-b8c0-4a55-bed2-bedbd8512fdb", "sighting--7ed99949-3a95-4e37-a202-650eab449175", "sighting--82faa6b1-32b6-4dbf-a902-548cb77b77cf", "sighting--b2854804-c692-4e06-8722-9648418b3f50", "sighting--6bff1ba7-1592-4913-9508-b1b9df28b435", "sighting--57b1349b-0853-4011-a156-217b3acfb0ea", "sighting--0726d795-7733-4677-8dc4-42b484945e10", "sighting--8b52d3e8-5519-4a27-bd08-6477a4a17501", "sighting--0692d5e0-5c9d-4165-af8f-3766d3610844", "sighting--5893d2ac-11b0-428f-8134-d745e731b449", "sighting--1a2e327c-1de5-476f-8147-612ccceda8dd", "sighting--6b64acda-92b4-4c55-8540-b1abc5199e63", "sighting--252faffc-b248-420a-8fdf-5b7be3f1c4f3", "sighting--e571da50-7af8-4515-85d5-55322230ca62", "sighting--b0d93d88-7b27-4812-9aa5-a0507a00e57e", "sighting--67e76ddb-7ab6-446b-95ea-91a302b3e1d0", "sighting--be949f16-fe9f-498e-b7b8-6c5d085512e4", "sighting--64cc8bdd-932a-4209-93b8-33be6e2b36d8", "sighting--f507185c-e930-4808-aedf-16ea4cb403ea", "sighting--bef16d58-61f8-4a33-b5ca-eee948b563c6", "sighting--2dd7fb61-09c6-4abd-bc18-7129dbb33e71", "sighting--1fc6ceb8-6b71-4f30-874b-8d0d5e43cb22", "sighting--e3c6c8b2-7461-4f71-bad1-31c0ebf3e772", "sighting--7a8a2e72-0ef0-4afa-b5f8-bbdc43dbd7b7", "sighting--6e9d4a9a-6a46-4c60-90e9-6c06333b6350", "sighting--0e88005b-8f0d-49f7-91d6-e8c35ba9fe02", "sighting--f9b7ac53-4ee4-42ff-827e-a771b856dcdb", "sighting--fa1401cc-58fc-4a71-a129-d5f3f05efd16", "sighting--67ec3051-811f-4483-83d1-d2966c44c8c2", "sighting--867d6fca-24b1-4e12-baf2-ca47732d2683", "sighting--608a7f4e-0c27-4a6b-9226-fcb20aa314eb", "sighting--e9e01912-5ac7-4000-be2a-8b3d94aeb386", "sighting--9d6fee0c-5c91-4c82-be51-3e8d75292a4c", "sighting--f549ff47-788c-4c78-85d9-1fe0e4f422db", "sighting--c386b156-226e-4478-a426-d8459a0ad212", "sighting--561ead64-d4aa-4e5e-9dfd-8ba0e21bdb8b", "sighting--cfa25c30-197a-4c5d-8bbc-9f741468825a", "sighting--58b3094d-541d-4d7f-9ac6-2a17d6099543", "sighting--bae14a45-cfe6-4cf1-bdad-574c99e22e31", "sighting--cdde55c6-338b-496e-ae6d-bc96765cd964", "sighting--bb2f3f02-1f2c-49ae-a0c9-43d29d6cf8a7", "sighting--cd57d8f3-f5d6-432a-98bf-836d179b1123", "sighting--3cfec061-b39b-4eb1-bb46-e61a18bc9020", "sighting--8bf55366-920b-4902-b312-bb44d74e88a1", "sighting--586b660f-61d0-43af-aa3e-45e5d006ca87", "sighting--8005d7b2-cad4-4d4f-919d-a05b98fbbff4", "sighting--c1ff97b7-e94b-49bb-b746-c9448aeb5607", "sighting--9808a7c3-5061-4a31-8236-164264efdc02", "sighting--bc7ef40f-b1e4-427b-8dfd-d096a9c474d2", "sighting--1e200647-0e14-487d-8173-c5e6982cff21", "sighting--e67238e7-b4e3-499d-9301-46c1112e670d", "sighting--7945a97f-511e-4d20-9a51-85299c2f4d59", "sighting--19a72918-8497-45d7-a1a4-dc1c9dde2f92", "sighting--d91d4446-66c9-4dc7-aab7-0eaf80f36abd", "sighting--35350aff-247b-4b80-839f-c5f26eb7208e", "sighting--6a8f80e7-38bc-4460-8d3d-78b3614edf60", "sighting--f7682c21-1713-4763-b15b-1aee78d5954a", "sighting--3a6bb1cd-d8d7-42e5-a1c0-159822607bdd", "sighting--29c9b761-782d-4c71-b5f1-999a50f89b4d", "sighting--93c7c27f-6411-43a0-8480-7131ea09253a", "sighting--82567b4c-247c-4cde-ae8d-4b3ca58ff620", "sighting--accf42fb-3158-47af-8534-ce521fa23179", "sighting--c7477fe3-8692-4aaf-a167-52ef12dfa739", "sighting--b51d09fa-dc45-4267-a213-8a314f1fc1d9", "sighting--af8602a6-641d-44c1-baac-b4b9628fd028", "sighting--27dd6dd3-3fcb-4e04-a62c-d352d5ab0c7c", "sighting--beb23895-2fc6-42a4-9778-d7075faa7d89", "sighting--6bae1bb0-e26f-4fb9-9d9c-526162a2ef77", "sighting--9e499133-f922-4d53-a836-d383819d9b73", "sighting--e55fb8e2-2428-400b-a9a0-feefd4f23128", "sighting--4c2ccddb-7e5b-4e93-ba99-c818c785594f", "sighting--bc155bcd-5774-421c-bf5c-54be3defb2cb", "sighting--90bc6bae-77c6-41b6-beb1-dddc56895334", "sighting--f024435f-a7cb-4d8c-a037-9654ef480058", "sighting--4b72f51c-9878-4f91-862d-1d6c19075d73", "sighting--b58c512d-f553-43bc-afb8-247ae4d03945", "sighting--f11c9eae-120d-4095-8f8b-2822dcebb284", "sighting--9f58a801-98e6-4e6e-9681-40fe8e449afe", "sighting--09f05fad-e87d-46c0-a59f-82ec17dff833", "sighting--1d06c66f-416c-4cd4-a3f4-98aae29f1119", "sighting--12163947-fb37-42e5-a0b9-80bbd63ee562", "sighting--6fdeeb8c-41ff-437a-8a63-6e0ff32ee3b0", "sighting--7054a223-f10c-4e3a-a736-39e05b557fad", "sighting--0f34f1cc-5ab9-4188-9f75-1a13b58db88b", "sighting--42359063-9bba-4e5c-b33d-b80094372dd0", "sighting--f5b18e80-f6d1-4456-8cc4-6f7db9277464", "sighting--2926ea9f-eb83-42d2-b63d-cd8bff4228a6", "sighting--8c272a1c-09f4-4477-a2df-4bb30a0c4d20", "sighting--d2181cee-f702-4880-963e-42b3657ba385", "sighting--60ceb04d-f2be-4324-982c-866520c4a1b8", "sighting--70543827-3e66-4b2e-90b2-3328a7de2c95", "sighting--5ed7011b-f632-45f1-859f-72cc013962ed", "sighting--244a738a-682b-4401-bc47-6c7cdaba363d", "sighting--4a758732-cb6e-4b24-8d39-e75cb947177f", "sighting--b8b62147-afe5-4e82-8fe8-b26753ce2851", "sighting--71263ca3-5126-4b44-82b6-0d28fac49bd1", "sighting--ec4deabb-90b7-4e06-bac3-9b03f1f00cf4", "sighting--d0ad3323-104a-451f-9c50-9fcea6674401", "sighting--73b8be0c-adbf-49ce-a25c-12d39bda6a32", "sighting--bd6077a6-c2ff-4e87-9a7e-26ad051202c1", "sighting--3a2240bc-22e7-4b39-9f80-db5639c61c2f", "sighting--c68d69f7-f11d-4900-8f91-898a3fb11928", "sighting--8acb6961-24ca-43a8-b79d-86b5a60f23a8", "sighting--51fd89eb-f11f-4934-9220-7dedc281cb00", "sighting--3005692d-3210-4616-a8c2-e42270448fcd", "sighting--8cef240a-7147-4daa-a16d-34ee1202cf44", "sighting--9a26ee44-5afd-48df-a9d4-69a3f1bbdec4", "sighting--321b87ed-61b3-45e7-b125-180341183700", "sighting--e6e03d5a-4701-4345-911d-7c42b939e8a3", "sighting--8e9dfaa6-b871-4462-ab5f-956048ec6b45", "sighting--e8d93393-88d9-4c3a-b4c0-02e409d3b805", "sighting--6d48ba19-1b68-4312-8516-698ae6b085f4", "sighting--e94c71d7-5e43-4c6f-b223-e245ecc85eec", "sighting--1f1009d3-ba42-4c7a-94fc-b95402d802e5", "sighting--410f0fba-4302-4b66-b26e-3aeb91cd037c", "sighting--4b13ebbb-5fe4-4d03-9d23-4086dfc5fe17", "sighting--9b4eecdb-7500-4326-a4af-b80bb780a281", "sighting--2a0b7c77-8c0b-4122-9cba-278499b1e296", "sighting--0aa4cc5b-40c3-47b5-b3e2-55984b9e7071", "sighting--6b9075f8-b02c-4c13-b106-9078ac895108", "sighting--523f1f16-3970-4888-a904-9c8b4ed0ab48", "sighting--e8246eeb-75f7-4b13-9f90-59cc7c5bc59b", "sighting--de9968f5-828d-4833-b4cf-6123dc7336a3", "sighting--81593385-9534-43c7-a1ad-76586761d219", "sighting--401f194e-de5a-4687-8c10-4e4d486455e8", "sighting--b1c7c656-cc75-419b-b455-a3eec22797dc", "sighting--9970148f-2f5d-4f96-96a5-e5b66019c82a", "sighting--2fd7ad31-532f-40a0-8235-8ee1b7e4af27", "sighting--570e1a6c-0e81-4fca-999c-7f39c6c1aacd", "sighting--9f69998a-1bab-4e1a-a975-19774d752af5", "sighting--6d8c2601-fc68-409c-8eeb-9cd84158ac41", "sighting--ae7fc6b1-21c9-4d67-a9a1-2fd01d4854d3", "sighting--72c57df1-d978-4f75-a935-1f3e2b222dc9", "sighting--a43806d0-3b96-4e73-bd91-a00b62d91c0b", "sighting--154659f4-0026-4b1f-99fd-acafc3e352b6", "sighting--708d60c3-308d-405f-8dff-9b6b1b204ccf", "sighting--6ad8f9b6-d632-403c-be16-f012dd471fe0", "sighting--19c4f5ed-6d67-43bf-bef5-96eeafee4906", "sighting--0e7066c3-05d5-4d4c-b80b-bb5131428984", "sighting--4db62834-509d-4c42-a153-ec2e223e0ab6", "sighting--5117cfe3-addc-41d8-b44e-a2480ea5b858", "sighting--5b37a930-743e-4e17-9c69-4d4bf6804efe", "sighting--023550bf-b56b-49ed-877e-b9d1b56c3241", "sighting--9e183b12-a8e7-41cb-8a26-7f272ee01594", "sighting--b18d4698-aeb5-492a-98ec-9674856e39b5", "sighting--97599e97-7025-4d09-9513-e34565528ac1", "sighting--93958989-e7ef-4c15-80b1-f694e0733205", "sighting--91a64265-9649-4b59-b377-6fae3a4fcfeb", "sighting--3f119f92-31e2-4e88-a63e-12eb3a8c357c", "sighting--7e1ec9e3-0c68-43e6-b4a9-c415dd575137", "sighting--d4f86377-eb62-4b66-b88d-0f93b0c897b1", "sighting--f443942b-8887-4055-94c0-8d2d0c6cdb1e", "sighting--7d13cda4-b4c3-492f-b599-0c2d2718f746", "sighting--7f3990ea-c238-4160-b42d-cafc06f5f2ae", "sighting--b578da47-d10b-4a8f-a934-66a5331afd60", "sighting--437530b6-2d84-4e76-991c-019cfd5041a0", "sighting--f2ecd4a6-e3bd-455b-b3d3-3e9a2600f0b3", "sighting--80ab1fdb-1ae0-41aa-978b-7065749d0c83", "sighting--2c6b0345-21ab-4bf0-aac8-12df43ea06e2", "sighting--dba53eba-aaac-4dde-9816-465f6c051f69", "sighting--92cb6f8f-c3db-4886-b5f3-6f92e5fdf547", "sighting--971cb6b0-d88b-45cb-8d28-b5a5d5a45a7f", "sighting--206b6003-2f9e-4e3b-9593-2ddb79c30342", "sighting--40af1ef6-a870-4f5d-86d9-3f5786e7095e", "sighting--9c1f45cb-d324-48b2-b443-30d4bebe265a", "sighting--4333e05d-9e3b-426b-b474-71a6c153ddbb", "sighting--bf29c4e3-490c-4cdc-b19a-f1ab5e28d1cf", "sighting--a3494f90-6124-422c-a867-3e2e651539d5", "sighting--9c899d67-62a9-45f8-9b56-e18740d2b916", "sighting--6f78c013-31b4-4582-9d08-c28d0feef1e3", "sighting--a7765701-0a04-42ce-8673-dfe90917c8c0", "sighting--afb0f829-047f-4fb2-b5ad-49310ca07aea", "sighting--ba4225a3-a674-4434-842b-124c17ff2157", "sighting--6a189db2-eb7a-4279-a506-02990b58b4d9", "sighting--c9d5f9d2-e4bd-4422-a8e3-ef4843904700", "sighting--43c4542f-ea1f-43d3-a559-1cb14e847744", "sighting--9facafad-f946-4385-a31b-985e106de098", "sighting--1051ffc2-7ab3-4cb4-a3be-72e752b9c570", "sighting--9b821eee-a953-45ed-a192-6102734d96a4", "sighting--3a2ec12a-e83f-4250-86ea-b9c3a5c32926", "sighting--27cd5a54-90a8-4555-a444-75d280e8989c", "sighting--5262a542-c1f1-4775-8f32-c584c669124c", "sighting--3a369c2b-c0d6-4298-893b-9e66f31ca41b", "sighting--0223a1c5-e268-462a-b28b-e41a9fd36bd2", "sighting--307d7df4-612c-4b9c-9c45-3175cd5b1f7d", "sighting--1c9b5eb5-a947-48ed-9ee7-56692caf9dde", "sighting--3206f431-bff7-4810-9758-d55a9b50f4ad", "sighting--36ec17fa-a2e7-4a5d-93fa-a012289c117b", "sighting--9de8b249-c2c7-4c71-8ef2-5b1d684a0e41", "sighting--a87adbeb-d552-4b74-952f-9e82f9a5b30c", "sighting--b0ac912f-feca-4ae8-820f-9333917f4314", "sighting--9f26d6db-93c6-4af5-8e70-a981d8148985", "sighting--56e7da72-8db4-405f-9661-dd388a141f16", "sighting--d4886a3f-e554-47f3-9b8d-e3d39a4c472e", "sighting--9bebd30d-7893-4799-a0a5-9b3d44f391ab", "sighting--5d00d329-7dd7-4dbe-95c0-d5cfd00904b4", "sighting--91126f1e-cf11-43af-94be-9dc6daf4c530", "sighting--54685080-a671-486b-9bdf-f080006af328", "sighting--73e7e94e-ecf7-4481-830d-6ca2ac33ae4e", "sighting--11747f17-edd5-4297-99f4-2bb182cf6761", "sighting--539a3ba7-f0db-4540-ae18-48baac6d0f79", "sighting--9f2f252e-8341-45bf-9fe8-26e5bf6fdef9", "sighting--8714420f-0865-4198-bae8-2ca3b24f1ac0", "sighting--16ccd546-74bb-4fe4-ad30-c0fecb3ca017", "sighting--08651f9b-fd5e-4e5c-bf35-e6051af625e9", "sighting--3f11a200-14d7-4438-b85e-5e5c373e832e", "sighting--c55a2bf2-0d05-45bb-afd5-5ebdafc7de4a", "sighting--a2ae7b5b-d597-4c90-aa45-1c7520776cb1", "sighting--6c245822-17e8-4d84-9b61-b1b52f9fdd67", "sighting--b731ec32-1657-4a44-904e-0e1cb2ac7d31", "sighting--017bf189-467f-46f6-ab22-0208eb9bac64", "sighting--6641a6d9-1b23-4c11-affc-8a0d8d96b298", "sighting--481200dc-e965-4fdd-901d-b3ad2a070c3f", "sighting--50ec7c4d-db62-4792-a233-3f5e3b60b43a", "sighting--b0edf47b-b3c8-487c-b659-0c1ab5db05d5", "sighting--89c377ce-8365-4971-a915-38e1228792e7", "sighting--b388eb57-c0ad-4131-8e18-e6fa35363349", "sighting--5eddbf35-a0c5-4136-8505-5ad234bf37ba", "sighting--393249b2-9245-4990-87d0-01153799db49", "sighting--3458909a-b5eb-4f2b-8933-07d64e89626f", "sighting--f8d7fc42-6597-40ca-8e31-888bf6512930", "sighting--4342e838-348b-4027-8e33-234546cad579", "sighting--2bf54b0d-40c9-4005-a4bc-7a110da230fa", "sighting--50ffe78e-5822-467b-bc5a-cf1a9bc8a571", "sighting--7d4cd799-f8cd-40ec-9730-46766da8c5bc", "sighting--c9e45a22-6305-4158-9120-353455b5bb1b", "sighting--dadfb220-d7ec-4383-a04e-b4bd1c5d428a", "sighting--84924e23-211b-478a-a196-ba9c377261c4", "sighting--e96a828b-69f9-4c85-b1aa-da36fa990c8b", "sighting--c98cfb40-4ff6-4b56-8283-15771869538f", "sighting--373d9a5f-8e91-49dd-8bca-6b59728fa561", "sighting--6e3cb0e6-fa3e-4f81-8d55-67d9bd6e7897", "sighting--1d0237e7-68db-4cdb-93a8-5df6edf71e26", "sighting--93ac881c-36ae-4be9-a97c-cfbf414b91e1", "sighting--265d1763-abce-4d23-b3b7-b935593abee9", "sighting--cb99ed2d-9682-477a-a6e0-cf3e51d61bfc", "sighting--93981d96-0330-42c4-88bf-589edcc8392d", "sighting--ae16213f-d826-4705-9d2f-ab51f040d0eb", "sighting--fdd41410-3c6d-4adb-98d0-5f744ceb1328", "sighting--5e52ec15-91cf-4f80-8e48-30e4b740d8d9", "sighting--63da0cf3-cd3f-4bee-a394-ccb01fd5ee7a", "sighting--436acd8a-4a7b-4209-abb0-a22efb00d593", "sighting--c33714cc-17b5-4c46-9938-dc295b4930c1", "sighting--b1a6da55-1f00-42e5-b681-0152d8eab4d9", "sighting--0d69a97c-e83c-4ac0-bd7b-c8cb23703efa", "sighting--a6d22f7d-0471-4848-af9c-d217f6b2d195", "sighting--4eb768d6-6b74-4ff9-9f9b-1fcec9cde394", "sighting--a0dfd132-57e9-4cfa-b567-033b3b4fed9c", "sighting--cf6ba228-b143-4fd7-b9c6-91ada69a8a1f", "sighting--399a456d-198a-4862-9f88-4530b09c73f2", "sighting--83a12fcf-3796-4982-b24e-3af2c0a3eaf3", "sighting--8457ca59-9b2b-4502-adf9-94409aa43bd1", "sighting--0da80fda-ac82-4e66-907d-f25fe7bfea9b", "sighting--795873fe-c298-42f4-b7f3-e7806e3b2b36", "sighting--bfb0149f-72b9-4d9a-8fd3-a4af3d14afc6", "sighting--36885312-cee9-480d-bdbd-39729bf62b1a", "sighting--7ceeb370-95cc-44c6-a8ad-bde58800a0f5", "sighting--f02cf9db-14c2-479a-9bc8-456f08f917e2", "sighting--45b9878f-647e-44ec-8d3b-2d35b84777fb", "sighting--890545c5-918a-4b28-82d0-942e6bf02927", "sighting--a1d7e244-bf5b-423b-8d69-06e9b226ace9", "sighting--02141458-66e8-41b8-ac39-bf720bca50c7", "sighting--b9612c2f-15d4-46c3-86ec-edddf6199da0", "sighting--2deca952-d4b2-442e-b3e5-ade8112d34e3", "sighting--28dc655d-de93-421c-8aed-a1907f278c1b", "sighting--ca6d33bd-c86b-4908-8d06-be217dd77b80", "sighting--213f6588-cba4-41ef-a6ff-45736b8dafa2", "sighting--3d368368-ac7e-472a-ab50-ac7589945892", "sighting--460dae2c-e337-488f-b30e-7e952e13a372", "sighting--125e68c3-ee84-44f6-a7db-988b6cd7c9d6", "sighting--c953118b-8474-4249-b07f-4b10cea80e4e", "sighting--73514f58-0962-4cee-b453-67940be814d2", "sighting--5d764eb8-258d-4a1a-8fe4-cfe4b97876ae", "sighting--0a9d5a42-65c9-48f6-81a5-a3f154294e1b", "sighting--4ad972df-6872-466f-bac1-d1b503e1e6b3", "sighting--5e6e5ba5-e0ac-4c04-9289-308a3a001978", "sighting--c4404276-06e0-4c11-b1a0-f1dc6d96c16d", "sighting--e831ca65-0ff4-4f02-848c-3a8e5631eb7c", "sighting--b79355b5-4304-4cca-910a-ee9b6c429df2", "sighting--b64e9000-a7b6-4635-8e83-403dc9cc80c4", "sighting--2461774f-95d1-4920-9d4f-b5c0ecae5776", "sighting--093eead5-f7e1-4ed2-966e-993e16676fe3", "sighting--80db6dc7-dca0-4531-b723-b51cedfb9538", "sighting--22382e47-0743-4e1c-8e0a-0701df182a58", "sighting--1250406c-2066-4345-ba03-fdb44aa5b7ea", "sighting--3d5109c0-7303-4e18-8215-61c8d680dc54", "sighting--78bcaeeb-7616-4309-ad47-175744090020", "sighting--a744b4a2-6308-429f-80a4-15a574360d1b", "sighting--57bbc945-d897-47fe-8fbe-00c3fde78c62", "sighting--84226c79-9ceb-4845-be7f-01b015ca0f05", "sighting--a6262011-2b37-4ae1-bc50-2d19f934d453", "sighting--6a7cbe3c-8c3d-4ff3-b12d-fe9528b72bce", "sighting--c569d57c-cd10-473f-b140-1d6ff54d1545", "sighting--d28d3492-dd08-4407-8c91-a630f789a630", "sighting--300840f0-30c1-49ad-bb48-c165369359cb", "sighting--079546e9-d5cd-4430-8fc2-3a86503a2004", "sighting--b920637d-e224-406f-b0f7-7df71ceb9166", "sighting--a15566a0-30c1-4175-b108-b0772047eb63", "sighting--091b2809-86fc-4141-b5dc-34e185f7ac42", "sighting--9af2b520-a5ec-44da-8c13-7443bd7dd44b", "sighting--636bebe0-4dc5-45f6-9b06-6d22d115d9b7", "sighting--eb615568-3dee-4e39-80ad-97f7487d4b2c", "sighting--c74c612b-4e6e-46e0-ab11-3bb23fc563c4", "sighting--bde5d29b-a081-4ff6-ab94-f36ff3739b1d", "sighting--78dbc838-d8c9-4026-b2d8-1609e6319bca", "sighting--7a42acae-c805-4b9c-adec-91bf977e36e5", "sighting--4d8cef9c-5f67-401d-b339-074990496eef", "sighting--247b65d6-1535-4ca7-b372-f8d07cdf18ca", "sighting--b6ea7d4d-1917-403a-9238-3df9b94d6389", "sighting--1fee4e02-86a8-44eb-b722-8926f3e6f21d", "sighting--4492d9b7-6990-4a44-b6ab-2caa0ecd8e7d", "sighting--e8c64580-f1f7-4e24-a1ca-1793a08f4d29", "sighting--9b70e9a2-c25f-4d5e-a9e8-05237c104392", "sighting--f3d8f350-5720-4e91-be47-c4b44732a670", "sighting--ffc1ad57-717c-4a68-8030-89c30a384e0e", "sighting--cd862c8e-4e22-4991-9a55-59a21f7a693d", "sighting--efb52f6a-b69c-4d26-9b79-6e156ca38266", "sighting--ceba9a82-2af6-48f3-8f9b-95dc73c3dcf3", "sighting--8a825295-01cd-4152-8959-cb6873113f3d", "sighting--ad9d0a9d-f36b-4d02-8042-ea99ec8bfa6b", "sighting--825c65eb-0892-4b40-8699-e860eb287eb2", "sighting--ecafddad-c798-4793-8e9d-95b14f2d1b1f", "sighting--6b84973a-7df7-4c26-968a-44ed6f445f55", "sighting--375f1917-1391-48b0-ba19-fa923cd44839", "sighting--81a9df83-69c7-42b9-9b55-042c28402514", "sighting--9cc72133-3029-43e3-93af-18d4d75d80f7", "sighting--1d0d33c2-0f9c-4910-82b7-bce1254b8312", "sighting--44e77cc8-1be6-496d-8efa-a69196b9d233", "sighting--cac01cc9-e847-4b1b-b158-d19538f06d53", "sighting--e2474d36-ba41-491c-b8b5-f3de89f4c35f", "sighting--c9f8ce18-9849-4fa5-a0bc-dffd71ddf2f6", "sighting--9d0bb31f-7d38-4341-88df-2836dde5f3b4", "sighting--146ca32d-0cc7-4c1b-a63f-41decf923043", "sighting--c53c8793-27e8-4710-83af-8d75765baa91", "sighting--d9a5994b-1375-459f-8602-0b2bb1dd2ebe", "sighting--0101246c-8930-4ac0-b1a9-44b9804a8ebc", "sighting--946d536a-75d7-4eab-a63e-d1246ed0b3f3", "sighting--e993e8a9-9814-4e37-8c20-7e5fcbceace1", "sighting--c58ab206-3266-4da9-b3f6-e363eee02bbc", "sighting--6baf6a1b-0edd-4556-846f-82860a144fdc", "sighting--aba62ae1-7873-4319-bf5e-5ff0a6224d71", "sighting--5ab2b89c-3786-4c3c-9b38-942fbab8e711", "sighting--c63dfe87-bd7c-417a-b8fc-4e72c74bbb21", "sighting--d00033c4-795e-4865-a424-4a93a08a5bd9", "sighting--29795c49-5f5b-4167-8d32-920a8c0e8e77", "sighting--7915bc7f-2282-4fe3-b9a5-443dbd4d2a4c", "sighting--0a47b5d9-e2d6-42e5-9177-fe875c47a934", "sighting--3189d6cb-512c-49d6-8014-0683a9348523", "sighting--a25e92c0-03dd-42b0-8955-95beb31ad233", "sighting--460f84b7-8e78-48fe-8b51-72c830fcc863", "sighting--5bfbed97-3c30-433c-a52f-158d718fd7dd", "sighting--c18e578a-4038-4413-9e52-0cefd188e414", "sighting--7a615226-5697-4a9f-9636-9fb459cc4f3b", "sighting--77adc21c-b334-4134-a11d-0158bfaf7e69", "sighting--67f0ad39-9e89-473c-9d08-4aae980ea4e9", "sighting--5ee0a51d-c24d-446d-9291-43ab289e586d", "sighting--d9d3a743-2391-4a92-8816-ea64c89e2d72", "sighting--4a4eb389-2970-4ba3-b244-6baac9ea68d4", "sighting--602d4e0d-59c5-4606-a393-bbee503c5589", "sighting--cd370080-a5e2-445a-82c5-cf093ba3446b", "sighting--5d5a7f9c-ca5d-4b18-a7d2-aa7801c01fac", "sighting--8107b220-88b2-4000-a760-944e1152c41c", "sighting--71cecb36-4f62-4097-bdca-d812856d7df0", "sighting--f76c6669-7ac6-49c4-8d11-e8e303e4335b", "sighting--f0039d52-141a-4413-9576-5db3c05ed935", "sighting--b163569f-3db6-4582-a79d-9820d67e8128", "sighting--17f7c603-e6b5-4425-b80c-d254fb0dc409", "sighting--2dafba24-5272-440d-a11f-ceec1ed8c034", "sighting--8add41f6-6eab-4344-8255-183636171067", "sighting--e3dff2a3-84a4-4491-9dcc-260cb9cf3689", "sighting--63a6a9ba-3115-4f79-bb53-06e3895e1ddf", "sighting--011737aa-5a5d-44da-b333-0954d61497b2", "sighting--45d6f10e-ae45-40ba-9ca8-95622c78db2c", "sighting--48f82927-14ed-485c-aeb7-03cf8bc1e58f", "sighting--b1cbfaf6-5f70-4b4d-b494-64f368f8d5f1", "sighting--98f7cd41-698c-46b3-9b9c-741421376cfc", "sighting--a2d7475f-5991-4a57-b7a5-52724ef0a4a0", "sighting--cad44197-b745-4afd-99c7-cd77c8cfdaf5", "sighting--6bc1d8df-9c3c-44df-af95-7070ef4df1da", "sighting--e48b038c-3fdd-48e2-bd32-0e878e100b41", "sighting--2c1a052a-fbb6-4517-9166-75e5727ca5c4", "sighting--73c9ff71-1f8a-486b-b76f-df5e0484ed52", "sighting--475179ab-f9c7-4189-938d-4b6bfdb7629e", "sighting--3dc71d55-7f96-4324-9270-f5f56975ed1d", "sighting--b9c2c7ca-2018-4401-a384-a34d91b86484", "sighting--c397e5e6-0ee5-4654-9625-5e9ead1491e5", "sighting--a0473284-700c-4a4b-ae25-37ad453a2a0d", "sighting--bc5db686-f69f-4ed1-be50-95863486c769", "sighting--4b55e8e9-8aeb-4ab5-99b0-33867ada2d2c", "sighting--6a2752ce-14db-4db0-a268-7f87c852bd20", "sighting--f2abe315-c1e5-406d-a520-c4b243f796da", "sighting--c934097b-3a41-4274-beb6-f2811ac9809d", "sighting--30368e6c-1113-4cb3-9937-50c989e94a64", "sighting--00f53959-88e0-4ce0-bc79-108b24c16577", "sighting--7e534055-48ce-486a-a257-b8e1ee06e50a", "sighting--1fea0111-5e46-4da7-9aa6-47da420a65e3", "sighting--9547bf39-72f9-4c36-b521-cf077f45e421", "sighting--6c60fdc1-24ec-4a5d-ad14-68809f9fd960", "sighting--c0c9c800-29e4-40f1-8ebf-e82130f61856", "sighting--5698b577-56f6-4bb6-a605-ca4773bc558b", "sighting--550f99dc-476f-4da2-b787-8cb03dda5f7f", "sighting--5068f1ca-e6a7-4fdd-a877-6c0b846dc1d5", "sighting--63e652d8-d0dd-4f68-aa88-b6a22a388f18", "sighting--5fdcdb66-fff5-4aaa-9950-2cf5660b3cbe", "sighting--63a60e08-e13e-4b35-8538-6ab4760e62b8", "sighting--4cdce090-ecf0-42c1-b08b-b85003050d43", "sighting--cc4bf4b5-8fb6-482a-801f-c12da2c358a6", "sighting--c2ea1497-8154-4ef3-8a38-a8881be9f2ff", "sighting--3a5849ef-2cb9-41de-9922-04c55f38b561", "sighting--574a6b81-670a-4faa-ae1c-5c906d1ad710", "sighting--cab633ae-2ee3-4819-9260-b3c7585e6f97", "sighting--d34c2f32-0a83-458c-9fe5-150833508d86", "sighting--bf2c29bb-8945-4585-bf6d-3cb00dca1653", "sighting--c3c00ccb-96b2-476b-a925-87cbdbd8b9b7", "sighting--e07458ff-611b-41d6-a92c-d342ff9cbb4b", "sighting--72b71583-f5e4-4e36-b76e-72e5b018ae1a", "sighting--97b1dfe6-1b55-4a77-ba9d-80aab81025e8", "sighting--e84640b4-ff0b-4457-bfda-6525a59443c4", "sighting--f45243c5-45ae-4a92-b91b-bf678be84b69", "sighting--55117e8f-c9fd-468f-a78a-b66b6db0e11e", "sighting--fa9dccb3-6fdb-43ed-911f-cc792639d16c", "sighting--ca409e03-3b7c-42f0-b6ec-606824d2d69f", "sighting--0ccfebc8-d4a2-4476-89e2-33d4d54e7777", "sighting--19849f6a-7c63-498c-b9c3-228694263722", "sighting--acf97d9f-8905-4d07-801c-f3283c9b72a2", "sighting--915b095f-702b-4483-9bbf-c95b60644675", "sighting--8a01f4ad-3f55-43cb-8f8c-2e8f9fcd6432", "sighting--17a9cdaf-cb5e-4d29-8332-98fa97df4930", "sighting--9dceb3c5-25de-4712-bd8c-1a8787a3ffd6", "sighting--446db933-4237-4324-b8b5-1a0272bb0a32", "sighting--9386a262-1e89-40a8-a7cf-66623cc562d3", "sighting--d38d3722-c171-49b8-9301-377158f01471", "sighting--c56c6893-c4ad-47e5-83b5-4fd2fd64b576", "sighting--94483258-cc52-4c6e-a330-f7c71bc642c5", "sighting--df758d65-4c0d-4893-8b03-312f7d7114d3", "sighting--8a003c17-5e47-4470-ab0c-eaee658179bb", "sighting--489b6802-58ee-45e6-a4c3-d9184fb2fb1e", "sighting--843fdfc2-7d46-4c3a-95b0-f4960379d7c2", "sighting--53a36f24-2f9a-4535-a2c1-c7faf5e52cda", "sighting--c381844b-1592-4756-b08e-a2d05af27283", "sighting--bdb6026f-5c72-4fc1-b5e9-9af60ec9e34d", "sighting--ba2239b3-0fd4-4b39-99f5-8dddfc61eba0", "sighting--7c871243-56c2-45f0-8d26-ebc692a25aea", "sighting--40381b77-924b-4808-b3be-548398e9d69a", "sighting--c0cdabee-a582-492b-ab6d-719cb35c8022", "sighting--0f4346fc-b582-4435-9eac-376e0c71b73f", "sighting--dae664ff-3ba0-435b-9a6e-7febe79ffafa", "sighting--9754eab2-4a87-46df-b579-2c105b41b383", "sighting--3969d5eb-d5f3-48d5-968c-1db0c04dd2d5", "sighting--a5a9e9a0-f38c-4748-a96a-78a1b6e26ae9", "sighting--6ea164a8-4ce9-481b-8d64-09dc9bdc804e", "sighting--911b1b68-7a1a-466a-986f-d4744470e17c", "sighting--bd539140-32e4-4d5a-bd36-fde3e81e3c4c", "sighting--af831f15-9967-4120-be41-1544f4b2197e", "sighting--cc5a1c3e-cb3a-40aa-a2c1-b4ecb584c5af", "sighting--24a97818-83ce-488e-8b6b-021173b03562", "sighting--c2665ab7-b6ee-49a0-bb2e-3046d790f681", "sighting--9cb899a7-cf4a-4891-95ad-48eea5cf93e5", "sighting--53773e8b-8b3d-4a45-9d52-7fb362b87bad", "sighting--dc935ba1-b800-485c-9459-6409d342bd64", "sighting--aeec31f9-a119-482f-973a-0dbfeac63b70", "sighting--810f295d-abc3-4094-a2ae-d8faa658a5d0", "sighting--f455b1da-1fbb-4535-82ae-7efa62db863a", "sighting--28303ae9-bd09-46fe-a97e-c20925fd604f", "sighting--ec587dd8-7317-4062-bd3a-dc1f7464328e", "sighting--71fbfcce-1bbe-4c49-9161-41df6084a308", "sighting--efc49e9d-1b52-47b2-96eb-d409f113ba31", "sighting--2031ca48-bb2e-4286-9141-935cb043f8e1", "sighting--9d78563b-61d2-4d12-9bf5-f5d963afa601", "sighting--a4ab2ccf-4c14-4198-9ba0-4639cdb3a95f", "sighting--d050f993-d317-41c5-a649-8501bbb37332", "sighting--c93cf96e-86c8-499f-8cd6-db0e398efcad", "sighting--a8e21fcd-6341-4185-8e08-f84ec55a9617", "sighting--0ebc219f-9ac1-47df-bcbd-d0de96355ede", "sighting--1b3ee9d1-dd00-408d-921a-9300b784b4a7", "sighting--b523280a-7bfc-4b2e-aa05-afd633c733ad", "sighting--7ccff0b5-13ae-48e1-88d5-5e5d046e19b4", "sighting--fd1720e7-254f-4357-80ee-b8f74abc72e3", "sighting--6e3d6136-01ac-4f4c-b7b9-94aad93b6913", "sighting--9ef7d68c-2574-4caf-87be-32ec8767cbaf", "sighting--ffff272f-f519-4675-a299-4a5f00a267cc", "sighting--22286d50-a3bb-4c74-b10b-8d8b37716fb0", "sighting--8250ce4f-5da1-493c-b2b2-fbeb257e2c14", "sighting--6ea0b8c7-f82d-4431-a27c-5beacada1359", "sighting--17bf63cb-763a-4f76-96c7-71a70cfde8e0", "sighting--2cab32fe-3dd3-4880-9e77-ed6d13acba2f", "sighting--01cecd14-0a0c-4049-878a-4eb5edee7413", "sighting--796cf456-0147-4b62-b3f9-f87293e4f8aa", "sighting--bc061cf4-6933-4528-b5b1-450fdbc86299", "sighting--bd11f317-2fa9-4cdd-91cc-4c9a0fdd53df", "sighting--dfff8352-3162-4ba0-8481-8032adf951aa", "sighting--82fde138-3c9a-4c11-a277-41b577ed871f", "sighting--d213da94-4a45-483d-b4e5-46756546649c", "sighting--64a9eda3-c093-4a29-ae05-e4b4041c13c9", "sighting--364e98ab-1ff8-4775-865a-cd3b12c8e072", "sighting--de4d0d05-7fb1-439d-ba8e-89cb6d3528f0", "sighting--a865fa4e-eabd-44ff-ac62-d984556b32b7", "sighting--388fb614-16e8-427e-bba4-9b440524448c", "sighting--8c2d77f4-affa-4483-a990-ae08ebfba12b", "sighting--ee76de9c-7e11-499f-aeb4-467763febbd2", "sighting--a999e149-df3c-4a7c-95bb-c27ac07bb9fd", "sighting--083cefcf-71b0-4424-a66b-db2f34299e84", "sighting--3172cb3f-c6f8-4f1e-845f-87e5a659e122", "sighting--088f5c86-4e90-4cba-a0b3-762ec21d4fa1", "sighting--1b9a36e5-f5ca-4e35-ab18-d2193345d399", "sighting--44a8ab4d-b4d5-4bfa-99f7-283dbb2e0dc8", "sighting--1a165a10-8534-4858-9929-73d9abaade81", "sighting--54b12ed2-e89a-4853-881b-0ed1ea986641", "sighting--969bae66-13d2-4514-8c6c-395dcb9e3233", "sighting--d38377fa-c4b3-475c-a960-d9860847de11", "sighting--173220a6-c73f-40e1-b496-ac614e21be02", "sighting--fb1ef900-3df3-40eb-a1be-13913e3c0d98", "sighting--a8551a53-9668-411e-8086-b8471fd4f76b", "sighting--da993375-757f-4d8a-8994-80362f60c22a", "sighting--8aa6655f-0fce-4ca0-b8e2-79b2677e6ba7", "sighting--e1b77351-1e11-48f4-b693-dc89dd4c859a", "sighting--76492dbe-368a-46f6-82b9-fa171849dd78", "sighting--9f418c02-1735-4f73-899e-1a0e97d1c9e7", "sighting--958a4f92-c0ed-4075-b968-a02e52668ae4", "sighting--46fbbcf8-ea9c-4850-8c34-a2773647596e", "sighting--e96b106e-d1de-4860-89e9-87e1db47a92c", "sighting--6da41b03-9d75-4c83-b956-47a27cd4e18b", "sighting--d9f0a0e2-b559-4d2c-83e7-6943a881a1ea", "sighting--4f577ea9-a8ef-4cf0-8475-edf217c8a080", "sighting--695304a9-3bd6-4775-baa7-8449f0bd1d58", "sighting--b9cef5bf-100b-484d-8c82-47c25b34a5e5", "sighting--1ac517d3-ada2-4caa-9b40-b5c7ad5c1594", "sighting--9bbe2498-067f-4db2-b19f-0eaeb580e074", "sighting--e68bea66-dd2d-488c-aff8-a59c7829aa07", "sighting--f73d9b3a-dd40-40b2-a7eb-c73c92540678", "sighting--fe6fb23b-8513-43eb-902d-9b1c1085f735", "sighting--10e973b2-63cc-4455-a110-bd3bb464795a", "sighting--0e8b33fd-4634-4dbc-a5a4-acfd9c5168a5", "sighting--6465a711-ff89-41e1-ab9b-a06fa5a65da3", "sighting--593b9151-9909-4edb-8589-bf387b5b3d4d", "sighting--aab45f74-c197-4a64-9695-ecc529ec4a37", "sighting--8e613e11-a285-4b9c-98a4-da2547276ae8", "sighting--8e202ea1-3284-466f-a15f-4dc402435849", "sighting--cc96d093-c978-4231-90e2-98e43d81aa9d", "sighting--9231cd5d-afbf-4b9e-ac1b-df8458ad82b2", "sighting--fab2bad7-c913-4e0b-99e9-13428a2cf988", "sighting--b7d738fc-153b-4f05-8eed-719de03eb7a1", "sighting--47aa3958-aa74-43ee-b24c-f1a7dc874048", "sighting--7c333aa5-ed9f-4e18-8607-bc3fee6b72ba", "sighting--eb65e38f-8c55-42bc-a755-e340ec761cec", "sighting--fcd47b02-0ac2-4f97-b998-07953d585e4d", "sighting--38325692-f063-40b3-a74a-193bab6b9e96", "sighting--bd09036e-5846-4012-b1c0-c9b6c6c67c99", "sighting--69d7fd13-2566-4498-a4d0-3fe1e9b2e777", "sighting--f26e2f98-1097-4dd3-b4de-bf253eea2583", "sighting--3cf63e8c-094b-43d9-9dbc-6f60b6ea6a23", "sighting--1d87ec55-0e2f-4c62-9d3a-073a54dd09f3", "sighting--f875b241-1c49-46aa-9d32-0390f74313b6", "sighting--e564f463-780c-4784-8c41-e46ce1d39aa0", "sighting--9ba847ba-8cfe-4a0a-b013-4d5bcf6f6de0", "sighting--6a9b78c7-03f2-4822-a675-a02f04e32560", "sighting--46013a46-2f35-4d38-a03a-1f812adc2adf", "sighting--37eaac7e-fb9a-435b-84ed-7b5f0845200a", "sighting--fe90cc97-73d0-4320-8ebf-7d519fbb5756", "sighting--549283e2-9732-4972-a4af-8e90b6378f53", "sighting--27d764fd-1712-4c90-b8fd-026762f16a46", "sighting--c4c6e15e-b543-45d3-93d6-f18a31a243b6", "sighting--65c1450f-f679-4d15-863d-b4b15dbd39ee", "sighting--8ee56cfc-7a55-4c50-84a6-796b8d10eb3a", "sighting--e1a7d79f-d3ba-47eb-bc2d-a63c607b0277", "sighting--ed9ebca8-1612-4741-ba2d-5f3b4e62d27a", "sighting--c141f89e-9ee9-4e93-bd56-fc456a108bb2", "sighting--a1a72f54-cc8b-4d35-88b4-95f373165082", "sighting--2eff472d-edf8-4e97-9112-e64f1066abc2", "sighting--225aef10-c75a-42d5-9a4a-fad980213e0b", "sighting--84a59da6-ebe0-4a44-838b-159f9a9b196d", "sighting--f23e2258-26d9-400b-a26d-a279b652afa0", "sighting--730f0e7f-9b51-4fa5-a4f9-fb1db780bbfa", "sighting--be696312-5d87-4867-899d-c9417bf58848", "sighting--321f6250-8bb8-4506-baf8-f07b2443aaf5", "sighting--d87d2c99-f117-4a7f-b092-0a6a09cb5e2a", "sighting--79c68271-53b3-4184-bf37-1024cc1121f3", "sighting--7600791f-57a3-4a6e-a08e-a37bb7b05ab2", "sighting--d252a9d9-a49c-427e-8e9e-6945258c8ebd", "sighting--ac487392-95c6-4181-9ede-334cd540d5d2", "sighting--cbe27a81-7c98-4a16-8101-caa234a3ab69", "sighting--3974c0f7-0a4c-48fd-a864-7a84c20de1b5", "sighting--5512a33a-9cf5-4024-838e-870e783fd77b", "sighting--6264f157-1423-4e96-abf4-addde60e4ca6", "sighting--8031ec7e-9805-48e8-aee4-9bc986b7e4e7", "sighting--a695ea16-64cf-41b3-b694-df352c92ec8c", "sighting--e20a3b1a-bb3a-4a28-b287-4c7ca79b327b", "sighting--573e66aa-4085-4daa-b406-dc63f5d7b747", "sighting--0bc899f3-d8f4-422c-a494-3f856e520f5d", "sighting--adf4b77f-7948-4441-a60a-2860c1de34f8", "sighting--1f5de28f-1200-4ee9-b3ee-b0647724ab33", "sighting--1e2cc060-f8ab-4a38-b231-3fbf8d8d6970", "sighting--374af0c1-5411-4d69-bdd7-24c6b9807f57", "sighting--2d623ee6-0cc9-477a-acd2-aa8fe304899c", "sighting--7a44c558-2b59-4acc-9b4f-32d8896ac032", "sighting--39fd62ab-3ae4-4602-b320-5f907d817ab6", "sighting--1871c3fe-62dd-4070-9dc8-11bfe32951b3", "sighting--203fcbd8-55c8-4400-aa7f-8c468344f411", "sighting--9d722bdb-ff5e-4a55-b3f8-177066f0682f", "sighting--aa3536df-7390-450b-94e9-61e23e0607d1", "sighting--f63bb833-123e-4d76-91b4-9c67d30fc5c4", "sighting--7a4e30b5-034e-4ef9-9c47-728763e53f76", "sighting--02eb2fcf-fa3b-4866-8aa4-83e50dcc0900", "sighting--bd468b18-8593-4033-8688-27e13ba3462b", "sighting--0ef468a1-e86f-4295-88c5-a7ca6082c17b", "sighting--a12fe0aa-2b47-46a6-9478-6dbed6617eb4", "sighting--3bcffb9f-17a9-465d-8a2b-10fc07f4fe6e", "sighting--f062f43f-d6f3-4bf0-923b-12eff7f370e4", "sighting--e9052f3f-e6c2-4596-9605-43442653b876", "sighting--3f0351b4-8d39-40ab-ac78-72faa665486d", "sighting--2cf7b74e-29ba-4010-ba96-88e5d642c626", "sighting--9a404044-51b1-4f69-98bd-49f4432265e5", "sighting--1893824f-f2c0-4979-ac20-eec9742f412b", "sighting--b735f9fd-2fde-44cd-a877-18b04b81abf7", "sighting--ef47e4f6-63f1-4d36-90f7-8213268c0400", "sighting--66423277-1050-4d4f-93ef-9fc915dd38c8", "sighting--f3755fa5-d26d-4a4c-824c-f328ae2012f7", "sighting--84717e65-6df7-4fa7-a972-e36165f85dfe", "sighting--7c3d5839-5e45-4865-b538-bbfe6d9e746b", "sighting--d4b0eab2-f857-4ffc-a571-38c927898988", "sighting--1e81337c-9766-47e6-9f2b-e28d7f02ea63", "sighting--37a1cb7e-1786-4a40-97e8-30eb40b599f5", "sighting--af68e541-7b85-471f-8d5c-36ee3006a91b", "sighting--997c46fd-7e79-43c1-bf04-e140332cbde1", "sighting--0bfb7c9d-053c-4d8c-a199-7b83aa6a0db1", "sighting--421376ee-56c9-4149-bb6d-7484759b9ffc", "sighting--40531c4f-c87d-43fa-bb91-c402d7e4c855", "sighting--c7be35b5-c5e8-427e-886d-eaf961a85535", "sighting--b774cffc-485d-495e-a0c2-6b41492d36d4", "sighting--0b962312-473e-4388-aa8b-f037f638899e", "sighting--7975a909-330a-4960-8207-5b0d61c3e0fb", "sighting--47dad561-da8b-42d4-9bcd-eb53e4a09776", "sighting--198e4edd-4229-4e6c-9ad8-72a06a1d236b", "sighting--52c01482-0e53-4b25-9549-0030b26d1f2a", "sighting--82dad673-baaf-4976-950c-eb433417166f", "sighting--13a5f118-11cf-4e49-84b8-958a490fa57f", "sighting--1531b48a-e0a8-4632-82f2-93c8e3c1722e", "sighting--64778ce1-c49c-447b-8cc5-eb7995f4136d", "sighting--8cbfbc46-4181-45e1-83bf-364afa3038bc", "sighting--d18edd60-ca53-4bdf-85e6-aa6ea99bfe22", "sighting--b8713bc8-9834-42ff-b71a-46f20c472d7a", "sighting--7389349d-51c3-4416-ac75-f679b9b409fe", "sighting--bdb655c4-b7e8-48f9-b733-1dde0eaebc9a", "sighting--2d40187f-d34e-4ac0-a1ca-3c0f160fbdcc", "sighting--8f2b3e68-535e-45f9-a7c7-2acdcf3f9117", "sighting--983e49b6-41bf-4a17-be37-57f713d01033", "sighting--527c5a4f-815c-4f05-be96-d55328194a3b", "sighting--e53d3115-5dbe-4483-83a3-189b991c34c7", "sighting--7d83318b-f04a-40e8-a948-646e4884dae5", "sighting--b5c84821-a5d8-43e2-98ad-b0837de8ac84", "sighting--1b950020-bfa8-4ffb-836c-06484dce329a", "sighting--e6899e19-b136-4183-b763-1d6b5f5dc947", "sighting--06a99ad6-4d44-42d0-83f5-678ba4b04cda", "sighting--4f4f11af-ce19-44f7-bab1-428c6baac4b7", "sighting--cc38e975-6c46-4f8c-99eb-ba4a46eae0bc", "sighting--8c1e284a-3f20-487b-b332-1ff1c6ebe0e8", "sighting--90fa53b0-358d-4190-a331-14e54e7498ea", "sighting--5de2abac-fbef-40c5-bd9c-9fe21758e559", "sighting--4f3ea112-111e-4495-a2e3-81dbf85637a4", "sighting--14e0c7b4-2414-40f2-accf-0bb4696b2fc3", "sighting--730c5a5d-5435-4a11-b1d5-96e2160de21d", "sighting--ce292f10-0e03-488c-affb-8ccccc2594a2", "sighting--b6351e92-e9e7-4130-83e0-7a742c7e2407", "sighting--7de9af6e-2383-42d1-9418-7dd620f49b20", "sighting--068e2e6e-63aa-4e08-96dd-541be8f64d57", "sighting--537f7bf5-870e-4cc6-8a09-a6eae602fd1b", "sighting--9c8f7fe8-0f2d-40e1-a1ab-40a442ace669", "sighting--7cf018cc-48b8-48fa-bd12-07b335047f1d", "sighting--c206f761-d605-4ab3-a732-125533fb6642", "sighting--a83cc545-d3f3-4963-83bc-784e58af8f3f", "sighting--c8b98334-7b27-4c5d-8054-2a7f966b8be2", "sighting--a75bf1d5-372a-4b7b-ab40-ed48ca18f5aa", "sighting--1fcb4fef-f2e2-4633-9586-212eecc3eb57", "sighting--97de337c-ea46-4d0e-a45c-9f8624236f02", "sighting--354bc9fd-d5ef-4cdc-892e-e822f4b17c3a", "sighting--dc973b0f-9408-457a-b9dd-60d62d2088a0", "sighting--26cac0a3-e625-46dd-82af-365d5272f08c", "sighting--ad134d95-2e56-4413-8106-7f97c41b00b1", "sighting--189343fa-20f4-4da9-adee-684542cdb5bc", "sighting--044a83d2-7039-4d7b-9772-c86e1c2b252d", "sighting--e3734854-e923-42e1-a754-fd17cb8012bd", "sighting--28fa145a-00df-439d-ac80-95338cd21a76", "sighting--5795871c-c5db-43f4-8f6c-cdc9b30da185", "sighting--d1c66980-30f0-456b-aa6d-75bff73361c1", "sighting--b968ed88-f2f5-475e-86ed-c4a07e53fe19", "sighting--641f2498-9963-45eb-b04f-abfcc74e7428", "sighting--67be27e0-8d6b-4db1-9021-02b73b7957cc", "sighting--e1c212b4-c335-4cb6-9eb0-92c6dec0e37a", "sighting--17329602-ca33-49b3-8240-4e266bddcab6", "sighting--b7b72e2b-b127-471f-85c2-07815632b338", "sighting--5ac02cd4-8066-43f7-9dea-a4fd88469c92", "sighting--458abc00-f8ca-450d-9ae5-cf005995a49e", "sighting--242ac827-67b9-407c-bf31-ca4d52b37dd8", "sighting--d344e8f7-8cec-4428-becf-268f29ddec8d", "sighting--525c83e4-0fc3-4118-8de9-39fecc540878", "sighting--8d75aa3b-199e-4270-873a-98c732a087b7", "sighting--4e59c357-b902-4777-9a05-e6cddfacb67e", "sighting--52149870-4d5c-4c81-9f19-60c6d235ce7f", "sighting--e270186b-cf4f-4dcb-90c8-a79901468e80", "sighting--189d1069-9b56-475e-8a5b-797ad09d1ae4", "sighting--76b20ea4-2647-4fe7-92a6-94c79c88b918", "sighting--5474e1f4-420a-4df9-9080-11a59986a79b", "sighting--a474401b-9d76-436a-945f-80d0b14f2086", "sighting--839e75c6-f53d-4d22-ae85-5d6d534c241d", "sighting--ab12959a-a9f5-4934-a597-a68f96745383", "sighting--98c9e791-fc47-4bc5-9a7b-eb5202206591", "sighting--0ee53f71-b587-4d9a-872c-8a123201a86c", "sighting--ea304d62-27fc-4278-a706-451621dbc583", "sighting--44876502-8331-42b3-ac28-c7d92b969037", "sighting--95f214c4-45f7-423a-8bdb-e909d636e3fc", "sighting--769e972c-d04f-4531-9f1d-5d268e526314", "sighting--9de976fa-ba54-4e9e-9ffa-aa3d935e737d", "sighting--a6cb66cf-f7f1-4a45-9d67-6631689d4bff", "sighting--d47c5358-5830-419f-8940-5544bd9f8657", "sighting--0e94f067-4629-4e1d-97d3-4a9039069864", "sighting--32b2573e-f45c-43b5-859d-e39893b9c5f6", "sighting--e3310705-ceb5-4809-9cf8-72a999d8bc70", "sighting--dd6a44f6-72cd-4405-a106-e4ef7138ecea", "sighting--87a8facc-0449-41f8-ad46-1fe2ad9e35c9", "sighting--62289afc-023c-482e-91a7-add499747fd2", "sighting--5bb734b9-8f7f-430b-9344-25724c7f9efb", "sighting--0b1c0e5d-a750-4e5f-871b-83d2c911a835", "sighting--bcdcccae-c92c-4a23-b730-03128e4982f3", "sighting--143b67d8-8fe8-47d4-9adb-e159a056037a", "sighting--094464f5-0b02-4d4b-8bde-928c08224c9f", "sighting--9d5ba76b-017f-46c9-9bde-73748ed8236e", "sighting--803f251e-d93d-47b8-ae7d-2c3f2ed4dfb0", "sighting--fee78775-60d2-4c7d-aaf6-a987e1693c69", "sighting--bb437e17-4519-4369-8999-4ccc2507f4d2", "sighting--d7e58f16-82a7-4ac6-ac5e-9042f8d03722", "sighting--517d0ce3-cc10-47ca-adce-3a85dea50e7c", "sighting--794ba237-e6ca-4c42-a7e3-1ff2fa217a21", "sighting--07a76988-15dd-49a9-810a-f89bcfdac6e2", "sighting--72bc76bb-93b5-4565-873f-4d674bcaa5d1", "sighting--fc66de94-a81a-4c0f-a3bd-1a473658d5c8", "sighting--b3ce9212-327f-4da4-b3e7-cbbd7c50f0b6", "sighting--0e3af6af-5064-4788-aa30-97dd890e4d1c", "sighting--9cac266b-8d88-41af-84a2-7578b74c1a66", "sighting--35c173a6-8485-436f-87b2-5c4fe05e7992", "sighting--696fea3b-4c0f-4bed-98be-9485d277097f", "sighting--ebf9dbd3-e447-469b-8afa-0e670ca1444d", "sighting--f83f2cb5-61e3-4c9d-8814-a221ffcb5bf7", "sighting--c8770507-d1e0-44a9-9af5-4feef1ce9dbc", "sighting--dc96479f-75bd-4d40-9364-54a9ca523ffb", "sighting--05207bfa-1529-4fe7-afc8-02ea9af9282a", "sighting--8ac57a1c-a3b3-42d8-b082-ef64904e5d96", "sighting--b3fc3634-49f2-4884-8c52-22b92e4feec1", "sighting--5c9ce0ce-8a7a-4ffb-94f1-ab5d8035941a", "sighting--e9aaf536-369d-420f-bf49-b0907f433234", "sighting--7eb11e4b-4f40-4c66-bb1b-67aabbd0683a", "sighting--fdfad537-ba46-47d3-b7d2-bb7dcdb4d7fc", "sighting--98f26952-5458-4e13-b8b4-5d81ec8e58de", "sighting--41cea0bc-cbcc-4c19-8584-3c7e8e997b28", "sighting--f70e51d6-3184-43c4-99be-42a34a356bf2", "sighting--d23c070c-a83b-4b44-9d66-28f7a798a06c", "sighting--7b18cab7-c91b-481f-8df2-753d4ab2bb16", "sighting--0bf2956b-e8d7-4353-9b0a-8718a8994ff8", "sighting--3f8f48af-0cdf-4ec9-b80c-f5dcbf95fee3", "sighting--f5bd7d5f-c10c-4048-b496-268ce943af1d", "sighting--6223956b-c9b4-4d70-8cf0-2515bd393efe", "sighting--6a7c0f73-bf50-496d-b69e-3ba2032a5302", "sighting--47fc3470-484f-442f-bee1-062b5f0c74a3", "sighting--73c6b323-e657-4b86-94c8-edf4104e19ce", "sighting--89435309-9d27-48cf-822a-e90c889eadea", "sighting--5f458138-f926-4292-8b92-f8d63fb12113", "sighting--2ff8f5e0-b1d1-458d-bf8f-18f6c24e218c", "sighting--c945de8f-2c01-442d-b3bc-2f5ef25a2f31", "sighting--d59e9d1c-759d-4324-9c58-25ad00a92b00", "sighting--28f9d16a-7bc0-48d6-8a11-3258fa5d74b4", "sighting--776815e7-351c-41df-83dc-42b27be95fb7", "sighting--53914634-4ac3-457e-bae8-f084284a3c90", "sighting--0f702e54-166a-4a5f-b78c-3baa7ce29f1c", "sighting--e07abc06-90c2-4b58-a7ce-4d2314f9056e", "sighting--27f5eb04-b687-4037-9166-90ec025e6764", "sighting--a3051c20-1172-44d9-bc80-0afc2bbaa47d", "sighting--3f223b8e-aba8-4a06-a2d1-7b2adb2e94d1", "sighting--2ba019ed-5b7b-463e-a842-0d6420a305f2", "sighting--6863e4d0-465b-462d-afca-20030cc78dc7", "sighting--f392fbb3-f8b5-4fde-8d97-0ee95c0add2a", "sighting--c15259fe-707d-47ee-85de-f9d77cf7d3fe", "sighting--388525f2-d0ae-42de-89ff-9f838da5ed91", "sighting--c4fd8599-fdac-477d-ab67-420b51e34732", "sighting--fd69503e-d954-4183-aeb1-cafd5b3578d5", "sighting--0aedaccb-4c92-414f-be02-9e615c89eaf3", "sighting--4b52b7bb-332d-4d31-9167-5a4c5873f9a4", "sighting--53e3ac8e-300c-455e-9a3c-e7f82e10220a", "sighting--f968e251-9949-4861-a0c8-bea99a0e7d25", "sighting--36097e40-8ba9-4c64-9bd3-4d9e30832b52", "sighting--5c89c91b-b188-4d6e-91cc-4da151523183", "sighting--d1bc7135-a82a-4f9f-97e9-0c1ac8c41f7d", "sighting--b7171544-2d25-4a99-9829-036861cea1bf", "sighting--25be804d-00dc-45f6-9c50-f44e6896ce6c", "sighting--86e18d0b-1dc0-4d2f-8650-82897edeb60f", "sighting--2b35dff9-53ca-434a-a578-5f6fd743174d", "sighting--2bf36fd4-634f-419f-87bc-a0e87e2b2dc7", "sighting--554b373d-603c-428b-b6e0-e1516f203a64", "sighting--da55d1a3-ab99-4b63-ad73-854ac45c7552", "sighting--024b723a-dc21-4905-bc74-2ea47877dc30", "sighting--3d819347-11ee-4f48-a4ec-33d8eebf08a0", "sighting--001b0245-335c-409a-8787-7688555fa539", "sighting--98adaec5-c79f-4b1c-8a6a-934e7c462da9", "sighting--cefb7d81-18f6-4a1d-9f97-0d4031073f11", "sighting--69673558-c9d1-48ab-b002-5d2218c9e729", "sighting--951eaa16-021f-461d-9e97-2ccfe84bade6", "sighting--8e5e7f6a-6f75-46a3-8633-a968de0e4c03", "sighting--c6a37540-3d35-4d2f-8b36-a0d612ac4f35", "sighting--b5656253-fa59-4113-aaba-9b4e423e29c7", "sighting--14e8e5eb-9df5-4ad6-b675-bde432698207", "sighting--8561f761-9a1f-483a-b48a-469a7efdf7ff", "sighting--d6b9a1dc-7653-43cf-9215-13e108f7d598", "sighting--29235f8c-534a-4d93-b18c-817eeda36026", "sighting--b07aff97-ffa9-4eaa-85f3-ff691234512e", "sighting--707ba1dc-1c20-4dd0-8b5f-bb2795a79166", "sighting--0566bde1-03e5-4808-af00-eec79ad3b61d", "sighting--395651a3-759a-4860-a874-633a8342830c", "sighting--7549a12c-12b5-4c50-80e2-774fba8da0a0", "sighting--f27323a9-4727-45dd-b91f-d22bcb32faf4", "sighting--d66c54cd-d9f8-4166-b729-e5b1137ddc4f", "sighting--891b8c77-cf03-4e8c-94cf-7f29cd5079c5", "sighting--ef48b9ac-6d08-43ed-9b3c-8e6b4f06533e", "sighting--5ca39054-d216-43eb-8b58-dda9eeb2eee9", "sighting--fbfa3042-5e18-48bd-90e1-31df4025c961", "sighting--2f120ec9-8aaf-4c1b-9779-696a90261f7c", "sighting--b74b1749-4690-41c8-8715-340a30d00039", "sighting--3a0962c5-a03a-46e1-9bc4-4caf5f1085fc", "sighting--e284bbb8-ac71-4687-9e58-e8678832a105", "sighting--18d8fc91-de99-437e-abd6-60991a94fc49", "sighting--34000929-ba30-457a-a340-2f23d70f7046", "sighting--331e3964-f27a-4e7a-bb90-49140ab2a1ce", "sighting--7426cf16-c64a-4181-9063-f9a60fc12c53", "sighting--974b513a-208a-4b62-bf66-53ac63cc2a54", "sighting--602306ba-b60a-40ca-a855-1cb50d5a0fc5", "sighting--20c82186-1bbf-45ea-85c4-b8f211aebce2", "sighting--ac76a771-f3e7-4221-8c26-8bc3fce8554f", "sighting--6f17a2a6-0def-49cf-9540-abe16c3af55b", "sighting--4c207181-3f0f-467a-ad7e-dd4bfc3dbd58", "sighting--7d8400d9-7edd-428c-8ae3-d600fb82b36e", "sighting--017ef09b-9d61-4b46-b06a-d823c4df5ca4", "sighting--6b657145-0728-427e-bee4-c521b2a5c6fc", "sighting--dc215a64-3cb3-4096-95ae-f099f748e01d", "sighting--60a0f0e7-bc67-4d04-b4a5-6e45342562e6", "sighting--e86289f8-2f61-49b5-a509-8b2b43e1235a", "sighting--0e0bd01e-aba5-43d9-97d8-3050485468ba", "sighting--e509b6fd-716e-4f0c-9a4f-39a908cf58a4", "sighting--b47aa254-e8f6-4660-a398-156a66132b5f", "sighting--40ed5ca7-1491-4f95-8abe-da80e5d53006", "sighting--c738e6c0-5778-486d-85d3-9452c37ec38d", "sighting--74d5a2dc-399e-4559-96e9-51f40c4b94e5", "sighting--3c591951-5b97-4970-9a77-132cc671597b", "sighting--9c1d8b72-4dd2-4505-9cb0-b27230c69e93", "sighting--2bd45929-3bf2-41b4-9e76-7a92f4d55212", "sighting--548da31b-d48d-47ec-9e56-f9e0d81336c4", "sighting--760c969b-ba82-4155-a4ee-7032bcb40d1b", "sighting--e2f5e354-804c-4581-bade-69514d4b1e80", "sighting--37c7a077-1d11-4e17-8a42-2490fa1643a5", "sighting--76c9ea5f-ca47-4465-b489-482d1b7d1ad6", "sighting--0327b452-7acd-4ce8-a091-85165125a07f", "sighting--03047d6b-41ee-40a3-b9fd-0e0827b3ff7c", "sighting--80409de3-934c-47a1-9054-7499a9097126", "sighting--08386ee2-42f7-4de3-9a4e-8c94231cef01", "sighting--c9e1c947-c9a6-42f1-8014-e2e615d4f6b0", "sighting--25717abb-abc3-4699-b99c-7cf8d3851412", "sighting--2722bdaf-4802-4810-a544-040ee8506cca", "sighting--88cb6847-4380-4f73-b66e-cfb41f45a0be", "sighting--ea759ff5-8e69-4a07-8cbb-cbe14751b625", "sighting--f69ddee2-cb23-4a1d-93c0-d9730591002e", "sighting--7e6763ea-b750-46c7-8ba7-86ed0f3ebe88", "sighting--d386cd46-3330-4160-9b46-882f6d0ed24a", "sighting--cbe5b7be-efae-4426-a264-595ef989ab1f", "sighting--ced63358-4259-4b32-9a69-e4030cdb9e38", "sighting--edbabe36-f297-47fd-b72a-aa80c5ed858d", "sighting--82abf22d-fa0c-43ec-9059-8676fef1d136", "sighting--fb88d910-9305-468a-a1b2-a8cabd8b7c7c", "sighting--3895f4d8-cd20-4a5a-88d9-63ff75b70dd5", "sighting--70a700dc-f652-4db6-8f5b-361dd548125c", "sighting--adfe9fd6-e2fa-43ea-9ee5-2bb3def19392", "sighting--61bce241-57ec-4347-ae1c-90bbdf20fdc8", "sighting--67c2c0f8-2535-43fa-8ef7-e4eaf7d2dbb8", "sighting--bf4ac56b-1da7-4fa4-86c6-a90735858549", "sighting--cd02bc6c-f973-460c-98de-7c0086f03b64", "sighting--e2e9bd6c-5e50-43de-abf5-77337e477fad", "sighting--4b97717b-3023-48b3-890c-47ae74a47fe5", "sighting--a37e9236-bda2-452c-bd0e-ca87f0f1ab64", "sighting--93dc5008-b18a-4ca7-bc79-c0ef15b22a66", "sighting--266e4cad-9f9f-4abf-87fa-37870b3d9e23", "sighting--89c6e975-0fd6-4a7f-9082-b6a5fc1d1957", "sighting--b6352396-f1b8-49dd-b20f-a3fd159d809e", "sighting--2cc8bd75-c1e2-4865-abf9-d48cd13806b5", "sighting--4736a7e2-a21b-40a4-a060-be53b1581ea2", "sighting--16010276-5891-4631-a790-d276aba64e2a", "sighting--b3940fb3-bd6e-434d-afc7-edb473e797ed", "sighting--a8b0c9b3-a3d6-49e6-9bf5-2ab5f04874b0", "sighting--a7104af4-bc1a-4bf6-9136-502428e753a7", "sighting--db37c313-275e-4307-a7b5-d7f01dca4a22", "sighting--9349ba50-870d-470c-a0c9-58697bf9d1d0", "sighting--f0fc344b-b9ac-4348-839f-e137fb0c1860", "sighting--b20a6d67-543f-45e2-8b99-b6ccf86bbc7d", "sighting--9f878e00-c496-4513-9b21-c2f7db330439", "sighting--a9be5b01-b48c-4c57-b05b-1a4bcce201fd", "sighting--bc90fce9-42fe-451f-b2aa-0446b3db877a", "sighting--aec35ab7-a20c-4713-b2d4-7abe9441ecb6", "sighting--26a23047-b7f6-4d7f-a9d0-b3ae22cded6a", "sighting--366c5dc2-486f-4ac5-b1db-fb2067975a38", "sighting--0d32eee3-cc13-4a26-b315-6d50ac81920a", "sighting--2473e660-7fcd-4287-98bc-2dd8a8e9f057", "sighting--595d9f19-a5aa-4615-9e0d-b324f56ae508", "sighting--6e809293-99ca-439e-9bf6-ecbe9f9b517d", "sighting--a17946d8-0460-412c-8400-ae4fc4f3f2de", "sighting--91bd16a8-4039-4efc-9d2c-0799173814cb", "sighting--2a316b2a-ce8b-4d6f-a2e5-c3da841aec38", "sighting--a636b642-668e-4f2d-a72c-587ede89f46e", "sighting--9ddc42aa-eed6-49e0-8124-077444bb001e", "sighting--4dc15a7e-1f0f-4864-b1bf-0c1eb395a7d4", "sighting--508d36c8-5ca9-46fd-b982-e3e79948751b", "sighting--7fbbc733-be69-444e-8369-794e3fb838ee", "sighting--bfc64c53-b196-4f57-a2a4-5c88e470f6c9", "sighting--fdb46e72-56a5-4db1-b0eb-22cec82fecdd", "sighting--11a44bb9-d092-4bd9-bd49-bb80afa1c203", "sighting--c37d839c-e6bf-445b-8eca-c62bf9a4f2bb", "sighting--b03f0d74-f392-478f-8cda-1efddc42f095", "sighting--dc84cc7f-35f8-4808-acab-944b3a9a4c78", "sighting--7c220d77-b962-4ad4-894b-c91b8d4203a5", "sighting--02f32573-c7cb-4a55-b6f0-c4bac7cc961c", "sighting--5b69cbde-590b-4507-9c21-f7fb4fd1cb2c", "sighting--08b31773-1beb-41c6-b5ba-8b07bf68b2d1", "sighting--4bb927df-2776-48a9-8647-053591d43ad9", "sighting--ec084773-2c54-4c7d-b317-35a430b77dcc", "sighting--f86ecd34-d96d-4eea-88c1-5fd15143e540", "sighting--d8a5fecf-d514-4111-9a53-3f404991c7e5", "sighting--567c3268-a72e-4060-b76f-b996351a3924", "sighting--e3173af9-6e83-4d6e-b5b1-a5266ed97312", "sighting--06d04ac2-0409-44f4-997a-ec54376faf68", "sighting--eaf159d9-1620-4e7f-8a5f-ac05820c3f74", "sighting--5bdf4535-40c1-46a0-bf6f-6e369d7b773c", "sighting--e7543b0a-7313-4671-8dfc-7957647d8684", "sighting--0c7ba567-0ecd-4dc2-8d05-31e9406a3348", "sighting--68543b4a-5609-40cf-bb05-a296ff630902", "sighting--ee9d7560-26a1-484b-88a2-7efc873271f0", "sighting--c7e27beb-84af-43d8-92cd-d6cd914c1809", "sighting--dedd17b8-7f0d-4d88-80cf-c34272e21cc0", "sighting--6a3ebe61-0940-4bad-95a1-e19551f231e0", "sighting--8f26b171-a2b6-45ef-ae72-001869957d97", "sighting--a162140a-1254-4e7a-a661-2a9d5fa4a881", "sighting--df7a508f-0302-4a1f-904a-955a3ee2b736", "sighting--f89ddc1d-bff1-4153-b2c1-32f86cfa184b", "sighting--e898e071-0f52-4782-b242-3d8f8bd2c85c", "sighting--4c39f788-bcd9-47fd-8e28-c250cac1d696", "sighting--c5874446-63e4-4bce-ac0b-c8a62bc62162", "sighting--6939898e-2d00-44c0-a09c-cab15f9b4d9e", "sighting--515cd0a6-0d45-4692-bef7-2b6f7bc56612", "sighting--9070dc11-b9a9-4e4a-9174-597003e0f7b6", "sighting--ecaface3-605c-44f5-97cf-f129b8810c3d", "sighting--219b3623-1b4a-46db-9f79-c9c6c1caeddf", "sighting--90407c8b-e66b-4355-84c7-9bcd78a6cf36", "sighting--bbd8fe97-06ff-497a-b89e-ecd59bd76209", "sighting--fd08adf3-fec1-497d-98eb-2e48d7b501db", "sighting--2735c2df-4248-4f71-af51-eabad0c61954", "sighting--29edf133-63fd-4c0b-99e1-01f92d5daa76", "sighting--f8048a0c-611d-49bc-8478-c3ad350e0f31", "sighting--9fe68f79-bf2d-4d7f-8bb5-f5ab7fd9e358", "sighting--d4a3687d-3456-462b-82e7-ce4c26140a6f", "sighting--5cd99aa5-0d38-4354-8239-91d4452683a1", "sighting--c3a14840-7fb7-47d6-8f44-b9baf2cda979", "sighting--8fb7aa32-4f14-4150-ab50-10dfe5f5a2a4", "sighting--7dacb990-7380-44f7-a7f8-5d0f4dca604a", "sighting--209ef458-9aa5-4ba7-bdc2-48c8db844ef5", "sighting--67196e13-80d7-42e0-a0ef-8aa9b98b9d1c", "sighting--d4fb9f4a-8ce5-4c21-b020-5e3a3d8b7435", "sighting--c4a89e80-6e50-4d28-bc53-71c7e6b2ad81", "sighting--b58e95c2-ec65-46f7-a88b-0548731cea81", "sighting--70b08d97-6bad-4491-875f-2743202d94c3", "sighting--bfc4a690-0d91-4bc6-a911-dd2e9ef433a5", "sighting--e40a43cc-b0dc-4e1a-a34c-791925c583f2", "sighting--d7f259b0-da86-4240-b370-54d0106e47fc", "sighting--c002b72c-ce2e-4540-94f2-612c5e475643", "sighting--f51a6ca7-a828-4e27-8cbf-10bb813c9806", "sighting--fd7904dd-01d8-4ba6-ac0e-36e5ce13ff8f", "sighting--f76f5ea0-a499-44c9-b0f7-c89def7e3cfd", "sighting--8a80c968-d3a2-4918-b470-03a5be03d670", "sighting--edba12e0-68e3-4059-ae11-05fcdf13a580", "sighting--dac0be35-5d6f-4529-99c9-63a8ad0ed7ad", "sighting--9c78bccd-580d-40ab-b568-2f95eb71a6fc", "sighting--b3742e8c-889d-4e4c-bbc7-2139c4010f8f", "sighting--4fde262b-9382-44d7-bd66-f466657e2e48", "sighting--561a043c-68ce-470d-8855-f82dd57248c1", "sighting--c2bc488d-86d2-4da6-a5da-bf5a07c4c43e", "sighting--e57c02d0-5c8c-443d-8b14-0eccb2879b52", "sighting--32daa2e4-437f-4418-bc4b-0d4cd1669fb1", "sighting--8927b081-5645-408f-84aa-7e06c4fb27eb", "sighting--9135a409-0593-427a-9c85-ffc8751a09b5", "sighting--d2c83d5b-057b-4536-80dc-93df038c4180", "sighting--18d95f09-c778-4dcb-bfee-da0092ef108e", "sighting--63b12152-395e-4d2b-b31b-c6ef292b95e6", "sighting--3fb56a02-ed63-499e-abb2-a9ca1048a22a", "sighting--5c8f2923-670d-4f9d-b1b0-a0cddcb85f7d", "sighting--b7ab9e42-16ce-4973-8b1b-205f39abd990", "sighting--1a789469-ded6-4d4b-9ef1-462f8d2862a7", "sighting--c5cb1080-ce19-4183-89e0-267c30e1f600", "sighting--f6de0de0-2af8-4843-982c-8f7bfefe1bdc", "sighting--b78b9b3f-affc-44b8-9c15-0d0672f200da", "sighting--32d593fb-4eea-4fad-86e7-5ff0087e3b50", "sighting--1d56a128-1b31-4ce0-8d74-eaee37795169", "sighting--9eb0b3f3-908b-478d-af27-23083380dd37", "sighting--11dd04a3-a675-4373-8c10-c53f36655bd8", "sighting--3ff717a9-f6f5-4c79-9b06-8a6ea12e96c7", "sighting--158e40ab-1572-4190-8b0c-5317f7b4c8bf", "sighting--e6180965-60e0-4242-9d3b-005b30b74f9b", "sighting--48d5236b-fb22-4f78-a629-27e6a38be43f", "sighting--74e0e583-9214-496d-9282-c9ffe684df5f", "sighting--00a4d460-e70d-43e7-a497-b143a96de774", "sighting--b7efbf12-b1df-4e10-abe5-158efe9f37bd", "sighting--8ed03a23-a3b9-49d9-afb9-1c22efb34194", "sighting--d9bac534-a5ae-46c0-8f19-052d5f17c934", "sighting--49adb487-f158-4bfa-8adb-4d0aabe94863", "sighting--7f4a08e3-3396-4ebd-9c73-031ae5321a36", "sighting--7be80313-7be2-472d-9d7a-98a9f7ee2015", "sighting--fbc47e66-d326-451c-ab17-92a9edcd68df", "sighting--f76f4b40-6fee-49bf-a1d2-f8e6a57a0833", "sighting--417daed8-f7a1-49a3-ace0-06ff90d0b1ca", "sighting--f16e540f-443c-4417-88a8-6486eba14e02", "sighting--3f0ea80b-5e8c-4a89-bd59-dc9d47015565", "sighting--38e1c3e6-635a-4ff7-b094-005a9bde6f1a", "sighting--e8cacacd-131e-43d2-8725-7a87008a99a1", "sighting--3d48ce5c-6c8c-4a69-bf51-192a068e83cb", "sighting--d95d0d93-73ab-4cc8-a3ff-49b1b60271e8", "sighting--d8e310e2-5153-42d5-8536-9ea1694eb85d", "sighting--40ed870b-4ab4-4086-95dc-429a284dcae3", "sighting--4e3b404c-ea27-47a0-b453-5cb44e5fe49a", "sighting--5900fd44-586a-43ea-9b10-f70e8a6094b5", "sighting--18a78d1a-f846-4fed-802e-83d3fe20b95e", "sighting--0ce92afd-d729-44e0-a0ad-314427c3011d", "sighting--ab9db4f0-b830-4206-baa0-37110e90eae3", "sighting--1b7bf550-522b-48f7-9dc6-091c899fcba1", "sighting--f725a3e3-dfcb-4433-ad80-f8d7b6c9e4e5", "sighting--5ee767dc-b13f-43db-af3a-3595e9b13da3", "sighting--b7412c2a-1876-4914-8aff-0ad54ff518e4", "sighting--440f2935-725b-4be9-929b-0883314c5277", "sighting--ff7ce388-f7b7-48ad-9fdc-e029b2f51c47", "sighting--233e3b53-6152-4590-9026-f7d291074680", "sighting--7090eab1-f803-456b-b9db-18fb388c71dc", "sighting--52b2451a-e017-41bc-9fa0-8fd29d35a377", "sighting--5949fba3-22bb-4097-a73b-51b092fa707e", "sighting--b278bf38-4080-4523-98ab-60f695b50232", "sighting--4ba2d966-59db-4b6a-9657-37cd4d67dbc9", "sighting--1bfd6a2b-33a9-456d-b2c3-8b0e06b7a2ba", "sighting--5b701cae-54ab-48b6-b23e-868e726a34d1", "sighting--fc5c9e62-a0a4-4339-b846-57c428b3669d", "sighting--cd70205c-c79b-46b6-b56d-2a0e72a3b31b", "sighting--ed9a4299-c238-47e1-b05c-fe4ed342fc06", "sighting--968bfe4e-18f5-416f-a191-5153e7221857", "sighting--ae96840c-2b5c-43a4-8f1d-a090a6fb38de", "sighting--53513bfa-6b1b-401b-b29c-e83548089353", "sighting--404e764f-100e-4869-b4e2-df22914792e6", "sighting--f6549776-6ef4-48e6-a9f4-09f20c138703", "sighting--7c9e99aa-72d7-4244-8c89-d52af38339ff", "sighting--b173e542-6a32-4062-9580-44f37e0bb3a4", "sighting--7927cb4a-521d-4502-a189-ea01135e573c", "sighting--5040c51c-3bdc-4d2e-921f-75b7f2602490", "sighting--796c608a-ec09-4290-aa8c-480671d8679a", "sighting--e50b250b-944b-460a-a8dc-d63d880feaaa", "sighting--700ee0cf-2724-4a74-ad9a-d4b7e4ece811", "sighting--838dcda7-fcff-4db1-a683-4c4351f66ed7", "sighting--9a64941c-d7a6-4dd6-83a1-5535b773b06e", "sighting--6e86cdf3-c025-4224-8c4a-2b4e60673036", "sighting--cb8987dc-090e-4728-af70-6e5e60dae0ad", "sighting--c5ff8c5b-3988-485e-871e-dfda941556df", "sighting--09a6c85e-463e-4425-9b16-22a02c378c38", "sighting--e1e5f151-12e6-428e-88f0-5d03dcadfe8c", "sighting--dca96ac3-d38d-489f-af22-10fd585c15f5", "sighting--e9be8fdc-b3f0-40a9-a135-9af1e9414c2e", "sighting--f44fa08a-30e8-430c-b83c-0b5f39b404b0", "sighting--48091434-62c4-4c0e-bcd6-1767160d8049", "sighting--9556a876-19de-49ae-acd8-89e27fbe0c9b", "sighting--363a53ad-b39a-4fde-a5c5-5af27749cb2c", "sighting--7a4fdc4c-57bd-4e70-9c72-7b3a767c52c1", "sighting--d83613fd-efc1-4e01-b602-96bde812ed92", "sighting--68cc478a-d90f-4910-b7f3-cfb8a297fe46", "sighting--02550fab-e690-4b62-bd12-60cd3da0e9f7", "sighting--6a5e78f6-47a3-428a-8016-27262cb278f6", "sighting--d338fd06-a2cd-40ce-80fe-2c68072729a6", "sighting--291eeb06-9428-4191-adae-d9b00e6344f3", "sighting--88d35fee-75a8-4879-903e-224e0151e4e4", "sighting--46636b46-5482-454f-a831-14ef80b446b8", "sighting--ee207a17-ebdd-4ec0-a1a4-5c8f22dcb1d8", "sighting--f3cf296a-4411-4faf-8135-ed874a6f9e33", "sighting--80fa0709-1e30-4c45-b164-65c161d116b7", "sighting--9772fba6-756f-42c4-930c-82023d6588b1", "sighting--bb680e77-6e13-4fe4-b597-a1362bf0b22f", "sighting--f11d638e-0e78-4cc8-9b19-952d4161f1b8", "sighting--3a20c83f-1fd0-4108-9e4d-946d916c3abf", "sighting--e80edbd8-041f-48b6-abe5-0933bd72f7c9", "sighting--f7591e52-f308-4a3e-a47d-0260fdd7594d", "sighting--17ce0686-8d3b-4547-8efb-c422ac796c29", "sighting--98755503-09ad-41ed-b931-0c6278257344", "sighting--3a821e0f-c634-4066-86bd-a21c697830be", "sighting--cf4d00e0-082f-4d5c-929b-f4aa603c986a", "sighting--021762ef-85dc-41e3-bcf7-0149f5c86371", "sighting--becd9feb-3e2d-41de-8b31-a7d5d8bcba5d", "sighting--ac6aa3a9-20dc-4802-85bb-32b8a46db9eb", "sighting--0582ac35-6145-4371-9030-a140472733d2", "sighting--59d1d9ec-a5cf-44f6-8604-2280729ae69a", "sighting--eec06ebb-cde0-45a8-88b5-f56ada8c50d8", "sighting--bab6fb8e-25ef-4ca1-b281-f6075bf27909", "sighting--ef42b74b-43a2-4e6d-a2c4-9bfc69233e7d", "sighting--63089911-e736-4ed9-bc60-b0b9a6ef6a4b", "sighting--8ec7a051-ba5c-4aff-8a78-0bafeca91740", "sighting--45966224-409d-41ef-a83e-d8d2a99dbb34", "sighting--eda1dfc5-d113-42ed-8523-baeabc8cd5a9", "sighting--df09b9a6-8a58-468d-8eee-c31ae76703c0", "sighting--f2dcfc85-16c4-4cec-bf05-6617695cc0b3", "sighting--2a02569b-c746-4ce2-9924-fcdd7747054f", "sighting--add2d0b2-accb-4843-8f22-c1506f3eced5", "sighting--d6833ce2-f9c3-406e-8e59-fe4e31411214", "sighting--be70f0cf-979c-4b70-baed-a162d358669d", "sighting--9c0e624d-c529-4685-97a5-7b3faba40bd5", "sighting--29201bbc-9860-4f69-a73b-4e9ca9718437", "sighting--9705d5a4-0398-4210-ab87-a01860cf4720", "sighting--9595b5f8-1d3b-4acc-b9e1-f25475c3a066", "sighting--1e483c8a-287c-477e-bee4-24de7b8d31c7", "sighting--5546ec2c-b497-411c-94c5-16af8a04d965", "sighting--aac847f8-964d-4539-ac4a-8730a6f3e8a3", "sighting--6753a450-9100-4964-90e8-7326ed5c3cb0", "sighting--59918826-8754-4ac4-8ef1-b9f5154a396a", "sighting--529f649e-43b3-46be-bb5f-fc3ac1936839", "sighting--32377c63-f458-406e-b670-29b813a53570", "sighting--1faaeb66-77b2-4eda-b0a7-50476cfc89bf", "sighting--5d1f2463-8c48-445e-8d9a-784a5c0a3091", "sighting--9f63e99b-f837-4b5b-a99c-cd5b4d90be4d", "sighting--35a074fc-ffc1-42f1-b0a1-6b5012a690ec", "sighting--8e277306-5c6b-43ef-8dee-1397bfddcaa5", "sighting--1b58da4e-b8b7-4953-a8ee-e208cb13b452", "sighting--404c4584-15ab-4c3a-88ab-4327800a8342", "sighting--3c6a379e-88fb-479a-9a8e-11c8367f3bcd", "sighting--5f518477-9467-4048-9d0a-a94af8fe0534", "sighting--3907f98b-e2df-4f16-ae46-845e83e57b37", "sighting--25d3de49-be81-4238-983d-c280dbd387a1", "sighting--b132e424-043e-45f8-a7fb-47eb4a7614c1", "sighting--eb22ce98-2392-4922-95d0-747e11db6bff", "sighting--9a7a6ddb-8326-4432-a04a-32a954b9eaad", "sighting--a53ebe8b-bf4f-4f0d-8e11-dcd05a6999e0", "sighting--40b8fc7b-f4f9-44b4-a0be-5071200c6eef", "sighting--33dc057c-edb9-464d-82a1-924150e92e99", "sighting--930f57ae-d713-443b-865d-a872fbeef3c2", "sighting--7a4513dc-02be-4261-bd22-bc70e308678d", "sighting--8002ac90-c83a-42ff-81b5-f9dd54d33eba", "sighting--72dbc927-19f2-4bff-85f7-993bf60f8470", "sighting--f8d92f6f-b28c-4361-b9f1-cbc89ea6b32d", "sighting--818be309-e0d6-4153-a2a3-acd7894a04ec", "sighting--4549b3db-36e0-4fc7-866b-19a63dfd0a6f", "sighting--543b5e1e-04d0-4d9e-ace0-8d8e9e54452b", "sighting--a879e44d-b904-40d1-a4e4-8ff882a1551a", "sighting--a58a456c-4c97-41ff-8af7-4239941ef9c0", "sighting--ed05479f-b312-4802-bb2c-552a14b1caed", "sighting--2a9ebdc9-8678-4635-aa15-e723338a5769", "sighting--3cd7af04-f384-4c98-8919-89773f356138", "sighting--3b685000-748d-4ac8-94df-eeb6b7cd584d", "sighting--f587d440-e969-4b50-9878-75fe8bc65452", "sighting--127abc88-fcf7-4839-9047-b5b554573d70", "sighting--aec42724-c305-4540-871e-cb77f5f472b4", "sighting--4fb9dec7-4025-4bc4-9767-d65955e56f24", "sighting--0c2cabdb-60f4-439e-a12e-999fab6bc1d9", "sighting--ea2b2f46-c826-4040-bbc9-cd3a98016136", "sighting--7a09ca8d-e6af-4d5d-8349-425081fd6052", "sighting--0ff3616f-8949-4937-a2a9-727cb37f5d16", "sighting--edf7374a-738e-44d0-8ca4-7eed29cd42f6", "sighting--c002bbfa-389b-4790-83e7-35f16cc41fc0", "sighting--3d0d6867-b475-4612-9bc7-f7e36aa28e30", "sighting--48fe132c-4714-43c4-81b6-45c673c55430", "sighting--f3b413ab-f77d-4cba-8dd5-cf3c57489f75", "sighting--1723ad70-4390-442f-b738-46b4b579b80e", "sighting--26f94e9f-0ab0-4b77-8540-d1255387afb2", "sighting--5d2c3a14-70d2-4c35-9a04-7d705b6e58d6", "sighting--16d17488-49d5-4003-bf61-a188cbaf66df", "sighting--6b0a5c72-4b7f-4157-93eb-4e023b612f37", "sighting--803bd5c9-d19f-463f-b16b-7c08661ddbd2", "sighting--034fb2b8-2aa9-438d-be21-de9c4ff6ee93", "sighting--2810cefe-3deb-44f7-b636-ef481bb8245b", "sighting--14bdb0d3-99a0-46d8-ae27-025fd388538f", "sighting--a50729db-17b6-4f75-bb01-44cb1ecddc9f", "sighting--7e020d3a-682f-4766-9dce-b220ca91e6e3", "sighting--47d7e763-033a-449e-8235-ca442be1a1a6", "sighting--3e17f7b2-b2f3-43f3-b82b-cef7fa9497b8", "sighting--38042073-6ba5-4905-8423-a12b3e8daeb0", "sighting--3106752f-4562-4b77-98c1-74c2b270f09b", "sighting--aacd243c-bce8-473b-919b-90bbdccec252", "sighting--23c4e7cb-c752-4687-8ab8-122435d55b2b", "sighting--1a57619f-ea2a-40bd-8c4c-daedb235be43", "sighting--23e0f4ba-fcaf-4fd9-89d5-3f5e1ed8af20", "sighting--bcce4daa-9d1d-4fa8-993e-384a1be19624", "sighting--629196f3-c763-44f5-b533-9dd34492803a", "sighting--8c052072-a63b-40a1-ad2d-9a493f7e7fb2", "sighting--b040400b-f6a0-470c-8480-0c97dfb08286", "sighting--54184da5-b922-4cc3-b920-76ea8d7b0dea", "sighting--cd29f16a-1109-4e4d-9e71-daacc1a3183e", "sighting--05fd6ae5-fa21-4cfc-af33-7a3a9fd40e4f", "sighting--bde8d387-44bd-4dad-bf31-aaad150d63f4", "sighting--24a72256-d240-4f59-a365-689d515c1f51", "sighting--32e94b57-dac3-415a-9611-ebe7ac1f5a71", "sighting--a3e15586-0fde-404c-9ccb-25b888cb3602", "sighting--5142f247-acde-4dad-8efe-6f72ee9f6ba1", "sighting--8b292562-8004-4035-b438-025f7863a0c8", "sighting--8dacf212-e87e-4e01-a7c5-d3d9d6f3897e", "sighting--223458ff-36c1-4656-bde8-87e5d8b68a6f", "sighting--1c674071-0aae-4ecb-8504-cfabcf027951", "sighting--e769c07c-28e3-45c4-91ad-89a4efa19a29", "sighting--44c817a7-4bd1-4077-825a-a174892d03a3", "sighting--8c3bff81-60b8-4f2d-b573-ab1413244a13", "sighting--5bec8251-b626-47eb-9b66-0154634bcd8f", "sighting--6f057e96-e7cd-43df-a01a-16c546af6229", "sighting--f1691609-a448-41e6-bc7c-b0ba859e61f8", "sighting--26d11b59-b26b-4e5d-a0d1-6dbd56880356", "sighting--eb899b71-0138-4474-aacb-97652e0e352f", "sighting--8b2d8233-5958-4a34-b788-58ae70dbbe2b", "sighting--f312c8d0-bc54-4322-a148-65e9e042af80", "sighting--b69a05e3-99b0-4c8a-a322-8e0a80efab4e", "sighting--22ff830d-354d-42dd-9d7d-1d352838a01e", "sighting--6d051f68-8ef7-4c7e-8626-d2d903fc3a0b", "sighting--d527ff95-d261-4c2c-95b2-6f0744d9c190", "sighting--0a9a0b95-91f4-4968-b9e1-4c6a7876f8a7", "sighting--4709494d-30f5-4626-881a-0feafc7b0741", "sighting--a11504e7-aa62-4558-b9e4-5dfddd0092a8", "sighting--66e694c6-ad40-49fd-b33d-b5b18aaa9bf4", "sighting--37cf9b39-fd24-480f-a696-83adce50f081", "sighting--10ab4825-a069-4590-9fc2-c5a63e20a193", "sighting--14d44fc8-e700-4423-a8f4-2ea6f39abc44", "sighting--0f6b5ddb-f564-4337-8412-65e346773ab0", "sighting--86003fc8-10bc-45f4-acd7-4f02b7d01695", "sighting--5ce1d1c2-2773-4b85-82d0-6346d020dbb4", "sighting--66e6006e-96be-4bc5-b5fa-1ac1ea80da33", "sighting--3897e85c-a090-4c76-b80f-da368c19fa1b", "sighting--09e10991-971d-482a-adc7-49cbe7714422", "sighting--e0758266-2c95-46d9-acee-e05687ebe9eb", "sighting--ae346960-9ced-495f-81bb-c89cac51de71", "sighting--d8822994-8e9e-4520-83e4-25af1d1030fc", "sighting--69f0b3df-5f37-417c-a122-b84fad60b3da", "sighting--07754e98-b689-471e-88a7-f1d7f52691bf", "sighting--aeb4570c-f9af-4711-86c6-7749ff657202", "sighting--5a8af3ea-45be-49a6-b296-d819d5e8a6b7", "sighting--aa1375f4-9dd6-40f9-ba62-7721e8c87b0a", "sighting--c213b864-d245-4bf6-af9c-79dc5c6a53c1", "sighting--872cb1c7-87d3-45fa-b744-8458020b7979", "sighting--2a5af1b1-0939-4c0c-83f9-3fec7fead414", "sighting--b9c67184-7cad-4adf-abc4-a26efbfb0eff", "sighting--39c0dece-a8f0-4190-b29d-86bdd8340d29", "sighting--9d64fd30-51f7-4fc2-b055-126b1a93dc56", "sighting--06b17156-bb15-4ebe-8bf1-1f40f0dc4f83", "sighting--30f3f87b-62ba-4193-a300-7bb374001aed", "sighting--e9d4aac7-9fb6-4dc7-b76f-b4004c3ca8c3", "sighting--89e4dd2d-3251-4725-8224-db9c613713b3", "sighting--a431a00d-3036-4c08-a54a-833f808113ed", "sighting--8992a9e2-adfb-4e06-8669-a6c3013bf6c9", "sighting--a30a2efd-3021-42ad-a553-8b17ad838ef1", "sighting--70ac9efa-bbc8-43d8-b70e-aa3928ea3ce8", "sighting--3fa1412c-f4c1-40da-bca6-1a1a12b55177", "sighting--91aa8644-1c85-4748-9ac6-9b6aa3074b80", "sighting--9f151c6e-bbd6-459d-be7f-3b9756553ccb", "sighting--6c936912-471a-44e0-a494-fd0a39a060b0", "sighting--4fb4b814-e5ed-4c02-94f1-c0382b856415", "sighting--677e8ebc-d696-41d5-8668-1cd106a87369", "sighting--a04f3dfd-eb94-4244-b185-904863cf4315", "sighting--f25b730f-8c3a-4653-988b-b08c9654616f", "sighting--4a78bc64-83f8-42c1-8d4c-9bda105e09ab", "sighting--029a3d28-c6b2-4879-a8db-40d26eadbb82", "sighting--6e448177-7edd-4efb-9b6d-4611debbb62d", "sighting--79f4271e-e6b1-4abd-9454-d20dbd77bca5", "sighting--394e56f2-0c5f-4475-a18e-54722c91adc4", "sighting--1adb7be7-f1cf-4d59-8256-6434b0d96104", "sighting--79132539-ebaf-43f5-9660-f2abdc580ec5", "sighting--7186c12c-8180-43aa-9122-a5d28f01fe3b", "sighting--b85292fe-11eb-452d-a69e-c7d46220b2ba", "sighting--165d69cb-9cca-4a67-a5d9-d43c9c02dbdb", "sighting--6ddcae19-4bf1-48e1-81f6-409eb60223dd", "sighting--6d56914d-a682-4e8c-ae3f-3cbb9673f7b7", "sighting--5d88b47c-8575-4250-9342-1ce03f0428de", "sighting--5460c6aa-cded-4788-940c-36a6b4a18b9c", "sighting--b4c6f7d5-0d52-4df0-9cc4-82d532aa7c07", "sighting--0b5ffed2-feb7-47de-9a21-26c58d1a150c", "sighting--fd9ca653-1afc-4ae5-a358-e2331cb4c3ce", "sighting--3af57cc4-4d1c-4df1-85a5-7d9a5eaf6a82", "sighting--d89aee66-5c38-4e3f-9258-5d284c50ef91", "sighting--38430cbe-6c0b-47ea-b13f-f60fa1097656", "sighting--03f62a46-d50c-4f2e-94e1-26ecdba6cc7b", "sighting--b628ef5f-ecff-4a5c-a7d0-1ea23b9201ad", "sighting--1ec08133-201a-46ce-ac66-779ce8aebb44", "sighting--408e866d-381c-4b99-b685-fa81c6ce1537", "sighting--ff3ea5f8-4321-4d65-8038-83e82806f773", "sighting--98883cea-e6e2-4676-b4e9-3906225327c1", "sighting--81e5e3fb-f470-4b75-b78a-ac4b009699b2", "sighting--b9ae4e51-7153-454b-a578-d5a82c535256", "sighting--638f1f14-8a18-419e-96a3-7601de05f01e", "sighting--2533dd0c-d387-4119-b7f1-2ec1c81eddff", "sighting--7ea20165-b709-4cb9-80c7-e0203a6ee29f", "sighting--81b7c7cb-d9d7-4559-91c2-4a20af825fd6", "sighting--f0f1c332-2507-45bb-994e-1ab0bce4a823", "sighting--1049a303-8381-4177-af99-9b37766e1992", "sighting--f5a7f57e-f453-411b-b892-647737b54344", "sighting--67243052-ae5d-4e7c-9b19-35051551f977", "sighting--d4639433-1ede-4e3b-b259-8186984d6929", "sighting--927435b8-caa1-487d-93ed-bada02c701d9", "sighting--87978145-94ca-485d-aa6c-a7e992c9081a", "sighting--707f925f-5427-4d89-a23e-5dfa606cc70b", "sighting--dd7e5d65-c0f6-4a02-9ec5-9f5096c53f7f", "sighting--b4479e48-a799-43d0-934e-6248f20400f9", "sighting--f5d740ac-88c9-4965-af67-2b20f19ae143", "sighting--c8843e95-4c60-43c0-ab4d-792d90e628e4", "sighting--40c42355-5e49-4039-a34f-9b9b48e5e1b6", "sighting--d9e48368-a605-4ea2-ad1d-32af0b5b1ad9", "sighting--e91b059c-7f14-4a21-bedf-076c9a5019ce", "sighting--83716ad0-d522-4959-8722-52b6074ab04c", "sighting--c66beb0e-4b94-4951-8161-903d1658b856", "sighting--918c0ca1-67fb-46a6-89ee-f5e96e5b09c6", "sighting--313de364-89ad-4d28-bcfa-eb5ec4a281a9", "sighting--bc47f595-16a5-450b-a113-c969c9cd40a4", "sighting--c92819fe-aa28-40ee-8892-946408a93e79", "sighting--69bd4ed7-c24e-486d-8a1a-ed83aea18083", "sighting--214a712e-99d9-41a0-8398-52a3af82c95a", "sighting--1d6a6c6e-0efb-46de-90fe-b08dbbae58a8", "sighting--8a976782-f2ff-431e-8d66-cd2ef669be7f", "sighting--e4a72b14-9272-47de-9128-252390fbdf80", "sighting--ddd5f7b4-83ef-4d88-b818-7e69540e825a", "sighting--046743af-95e6-46d9-abbf-c03500643743", "sighting--974a9102-bf83-4518-ba4b-15407709e93a", "sighting--a8797dc8-6406-47b4-9c13-82f9be3dc6cf", "sighting--e48a7c68-9062-4e0a-ace1-185ceb9861be", "sighting--23b29a23-fc3b-4cc2-a177-d411129fdf93", "sighting--4540e76b-09e4-4d65-8ebd-7a34e7751b53", "sighting--a6f63081-f87f-4e81-8dbe-1e9d3293a00f", "sighting--10b0b793-ccf6-4e62-9ed7-b7c66ab809b2", "sighting--e3f1aae7-c9a5-4817-9e3d-358f00991d1c", "sighting--d2549a46-b4c6-4171-912c-2cde873e0449", "sighting--a0d2441d-d8c6-4b67-9c6b-02392fb9cc75", "sighting--e6c9323a-e308-4303-9c0d-5956d03bc82a", "sighting--1d0ccb35-eddb-4cea-9f70-c43a023a0a9a", "sighting--1b9c1bf2-5b8f-4314-8eda-09258f2c6b1c", "sighting--8046c5d7-94f0-460c-b39f-c285d453d960", "sighting--785339b4-6443-471f-931d-6da09c7dfd2d", "sighting--826090ac-1b4b-47ff-9aaa-80971887a510", "sighting--0a5025d7-06c8-4138-bc7f-3f959c447518", "sighting--85395664-c4b5-4178-ab27-ec7dcf63a27c", "sighting--49f2ff20-d493-4470-9234-34f09302da80", "sighting--9c86bd1a-1c53-40c2-b597-cd2ebf61e04d", "sighting--5e470ae2-c380-47af-8a25-df4d801cc870", "sighting--984591cd-00a7-41b7-ab6f-8733f3cc4a6f", "sighting--f4c9402d-7213-4740-8ae8-2b5e48471a7d", "sighting--f7e2ed87-6e58-4623-971f-344d9c6027da", "sighting--7ddd8502-e513-4ba2-8106-9c0f32e58208", "sighting--794cbea9-3008-41a7-b30b-dd37a704ae8d", "sighting--91e73422-57eb-4497-bbc2-5b2e02663307", "sighting--9c733e85-22f9-42c7-874a-953654979dde", "sighting--46d1e35a-6f00-4c66-abc3-554ec09a306f", "sighting--8d5909ae-01d1-4bfb-87bd-6af6cea5eb60", "sighting--dfbeda5f-f4b9-416e-a70a-45bbfd2781be", "sighting--295a5217-cc11-4df8-9475-d14df2d9acbc", "sighting--5fb522c4-9ff1-4f27-bfed-4221bdf4309a", "sighting--1055d350-c7c2-431b-817a-0a989700437d", "sighting--a8d79b00-bc71-4f55-b743-a416208fc2f5", "sighting--25bc5bc5-153d-48d0-8a5a-38ef2a93c4e5", "sighting--89dc61c2-1f38-4698-97e9-b17f756c1f24", "sighting--f47d4baa-6c8b-4390-99b3-fd3ef60faa75", "sighting--802a3fe3-3a78-4452-ad55-dc8b45403cc0", "sighting--668d65e7-6897-40e8-a0ba-0203adebd937", "sighting--88bd582e-1be1-409f-96ed-400b1ebcce69", "sighting--d5e680e0-a4a6-41c7-b0a8-003b4a581756", "sighting--d42f2a68-a438-43ab-bde6-134f60598818", "sighting--a52f1ebf-c932-46d2-9c54-ae470ee4058b", "sighting--08062d0f-0bd2-41fe-b155-e6ddd3b8c4c4", "sighting--8f0bd7eb-539d-4556-8794-45aec8a1c6d0", "sighting--ad30a806-a7ce-462e-9950-8e4c59db2ebb", "sighting--b277d51f-fc2c-45aa-bd0c-7848edd07f2d", "sighting--a6314992-ca8b-42dd-97c4-952ef19237b5", "sighting--08f178f3-5671-4afb-90d2-d7759c1826b6", "sighting--41ac7d57-23e2-48bd-8a05-221d7d99d9a2", "sighting--f7c47a66-9d29-49e7-b4b3-bf03ff485a15", "sighting--18145834-0721-4839-9022-254e0b08dd92", "sighting--a0f36eb4-04a0-43c3-858e-045cea8aa824", "sighting--ecf40fb4-22fd-42e5-b371-a2d90b3da240", "sighting--2db042e6-0ed0-480a-bb77-e98537ffc96d", "sighting--456716be-89ba-4473-9692-2fef2739acf4", "sighting--d39b3f14-45d8-46f0-9a6b-5dcb0b93a9cb", "sighting--075041ef-beb4-4db9-af76-f7d25c4cdb4d", "sighting--d26773d1-8f73-4afc-ae3b-9e91094d7e26", "sighting--454ed94a-ad3e-4353-984f-5e6fd3887423", "sighting--8e51f426-8610-4ea2-ad93-529a7c20f543", "sighting--78cf1b5a-12bf-457a-a447-13e427586c4c", "sighting--2733df5e-349c-4e6d-a805-904cac33fad8", "sighting--d402f284-57ef-4e53-9aa0-0d440b45a4ae", "sighting--7f3f35d2-ef06-4568-8770-ceb6608b71c5", "sighting--629044fa-31f0-4b9b-ad5f-0cff09a26967", "sighting--34606a0b-27cb-4e60-96ec-b3fbe568379a", "sighting--14e5f2e1-c534-4b05-9bc5-e0c9616ceabf", "sighting--ed7bafba-a719-4aee-ae62-e48c7a5b4119", "sighting--e24a01d8-337a-4129-ba94-b483563c67fe", "sighting--106817b1-e33c-4ae5-9c74-17b9025e5d5c", "sighting--cad31f4a-6842-4fd2-9863-27f60f813b06", "sighting--e1ddceeb-9754-4a34-b197-abde4d108530", "sighting--cfae1776-5168-4486-bb81-07718e3a3aac", "sighting--80bd717d-f5c1-4727-857a-8a8ed75948c1", "sighting--1271a0a2-f700-4518-9ff0-6d0fea1ee7f5", "sighting--5dec5d8b-11ec-42bf-9272-a9e68b11f6a2", "sighting--6d2d9fcb-a407-4f68-9158-d4f924423b36", "sighting--f640c05d-dab5-44e7-9698-ab86102424b9", "sighting--303bf521-6db1-4967-b7ab-b86ae3caf426", "sighting--81029199-c264-4c35-8670-41766c170733", "sighting--23381efd-27d6-479c-8433-0233bfec041a", "sighting--904fd6dc-b01e-48ed-8a68-5e3a72421a20", "sighting--268da2d3-ae3f-46d8-98c2-c85818765f7c", "sighting--bcf91798-d8a5-4393-a49c-13bbc27ed16a", "sighting--4605cb09-0a6e-4b97-888e-643538a53411", "sighting--7a72401a-145c-4fa2-b964-7652d6fa2b66", "sighting--3063cf82-1038-4be9-b590-2942e7ac229e", "sighting--cb65b844-3e9f-4e73-8c5f-4b2a3a1651a0", "sighting--d65a6cd1-c01d-4c07-83ff-735f887cd802", "sighting--aa664a71-b228-4dc8-91a1-aa164c91a8d9", "sighting--07e5ebbb-7c52-45f6-b915-dab57bf833e6", "sighting--c1571197-c669-40c4-9547-076cbf9f5a9d", "sighting--df0e125c-9085-4eed-bc9f-0858ef05e07e", "sighting--42382f38-0610-4c8c-a12e-d6663e04d316", "sighting--dbb73b22-e73a-4e68-a3e1-a9de56fb20f5", "sighting--4f030629-d0a1-4b08-b4bc-b6410fa72d0f", "sighting--a16ba1d4-6df2-4cb7-9632-5676588d02d6", "sighting--622b4bd5-b7e2-4ce0-a14d-8c23b7d9662b", "sighting--e5df866f-b960-43ad-bdfc-116f7573a693", "sighting--d8105c08-3662-4637-aa14-7735bc913b5d", "sighting--9d89be82-8f16-4323-a207-633c46f7647f", "sighting--25154bde-0f1b-4b91-aea2-e931f75b7d2c", "sighting--d7b2b710-d1e0-41ba-b235-65951abd2575", "sighting--5cbcbb81-2ca3-447e-a525-39ae0d0b6546", "sighting--51a96cbc-f1b6-46f8-9cb5-aecdd1110ee4", "sighting--b31d6a6a-61d7-4fa1-a113-7381664eb449", "sighting--a110460a-ce54-4dc3-8422-347e12ef4555", "sighting--2dff0ee4-69db-4322-b12c-2226f90eee5e", "sighting--eb45fb77-bf8a-45dd-b3ed-1996b1e77992", "sighting--c26ae4a3-6334-4894-835c-3e5a99be179c", "sighting--3c9e0ecf-9fbf-4549-8eac-664a1ec86ed6", "sighting--df674986-f972-46d2-b9d4-467cb6700fb7", "sighting--8add2cf7-bbe3-45d5-b8d0-5fdbe0b759b2", "sighting--a5bb0bcc-23fc-4a31-8a9c-60f90bcfe3a6", "sighting--4168b23d-e2db-462f-9a1f-765241f916f8", "sighting--5711953d-3fb2-478e-ad3a-fbb770ba781a", "sighting--b7889ad1-291d-43a1-ba2b-6a19ad6a8c67", "sighting--0282c9d4-ae54-4d26-ac3e-b4d33921d259", "sighting--944e60da-a7a1-4a46-a7f6-1ae70053c965", "sighting--13f2c5c4-c81f-4a90-ac54-e55128d06852", "sighting--dbf6de4c-e132-41a2-b6e6-fd04f520daa1", "sighting--53bf2b60-3c31-4615-8678-ef11ed289261", "sighting--df00d7a8-9b9b-4008-999e-4e747cb8e1dc", "sighting--874586e3-f7b8-4666-8511-afc4aacdd8b2", "sighting--c31894a8-068e-4ecd-8138-4538bec829a5", "sighting--d4076090-2160-40ce-8c6a-941c22d37b42", "sighting--461e92d3-01c4-440f-ba0e-ccf44ef52555", "sighting--a831ae19-449c-44fb-b193-9de535f151d0", "sighting--8350cacc-2e0c-42bc-a546-e380a20dbb6c", "sighting--56184feb-db6d-4aa4-9713-15370c6c8a4d", "sighting--021ec7be-da6d-448b-b833-5be8e7681ea0", "sighting--02ed73f2-a225-4668-8886-466b4e391e66", "sighting--ad64c6fd-5938-4012-975d-6c84d95dfe82", "sighting--8e0247cf-ff81-459d-93c7-ae245233d999", "sighting--d8f228cd-bdb1-4c26-a5c9-78539cad5b83", "sighting--d905c847-aadc-4328-b7ee-511fab14f998", "sighting--e50e2b37-aaa1-4c73-9e6b-b8efade161bc", "sighting--474ba529-9137-406a-8f35-5e03de1851d2", "sighting--24eba1b3-60fc-48c1-83e2-8aa2dce1b154", "sighting--6056f89f-6c44-4b2d-9bd5-53fcaade126d", "sighting--85901e53-9c76-4bc7-8fd9-7a8e5fdca84e", "sighting--cf34313e-32b8-408c-a3e8-20b1477b1a66", "sighting--c71563ea-cf6c-499f-8b15-c39e30c87e92", "sighting--a9b9d755-5116-472d-a1f1-86e8b2de605a", "sighting--893e1478-d2a1-40aa-bb09-009c9d47ace0", "sighting--16221a3c-a119-47b6-8df5-0930f5c40b29", "sighting--a3296874-b19c-4c28-815a-d88948b73433", "sighting--c0851796-1acd-4391-b484-7559df79760c", "sighting--35ceed30-7d0e-456b-95b7-7cd96caad853", "sighting--4ad243fa-c9c9-453b-96f3-e4a46a1f9c01", "sighting--694025d7-26b7-4570-a76c-3c5a994ebd0b", "sighting--5b22144c-9dda-4772-b99f-39fa5d908acc", "sighting--73a421a0-d657-49c8-946c-ac1fe627f72b", "sighting--e9d40af1-a2bd-4a35-90c1-19ed546ac869", "sighting--1eae61e3-3dfa-441c-b145-edb14f2075b4", "sighting--a7a213a8-527e-4152-b538-c62d0b02aa70", "sighting--4f500488-d047-40aa-8d4e-7547f4dc9687", "sighting--562563a5-e03d-4c72-9d9b-75cf5758527b", "sighting--1f63b597-f521-4684-b699-7418a77dbd02", "sighting--73f29afd-68d0-4b43-9d57-c0e3b8b794f8", "sighting--f619aa1b-5b0f-4c3b-bc85-13566326aeb7", "sighting--eb3765c4-3ed1-42bf-b4a9-53891262e93f", "sighting--01c5de26-b723-48b8-bff3-f350e2c7a236", "sighting--a27997b6-f30d-4af7-b4c2-b33c89065533", "sighting--7327a4ec-aea1-463b-a919-e5d5404eaaef", "sighting--a5e15063-073d-4054-924f-0dbae7c5c77e", "sighting--7b758370-5835-4dda-84df-4ad68d2cbfaf", "sighting--cf1c3a4b-d167-462d-8074-afb962f929b1", "sighting--3d41ef91-9d64-47ca-b6d8-8861c3a738fa", "sighting--5f43277e-e709-4a3d-bdc2-6b212c8f9992", "sighting--132cd4ef-32b5-4f7d-b5fd-c15d5fa360bf", "sighting--f03551d4-9dca-45d7-8af2-a494d25c9091", "sighting--f4cf9d28-dad4-4e9c-ad3c-bc01b413dce6", "sighting--f59d35f5-2d1b-4a4c-a306-94917df60380", "sighting--442a904f-3597-412f-9c70-1208885f57ed", "sighting--fd53559b-88ec-4550-8e63-176696c6cbd5", "sighting--4b5ced5c-02ad-4125-8ded-d6ed75fecc31", "sighting--e84a313c-f5f4-443e-b708-9c416e206c27", "sighting--dfb3a695-a5a2-47dd-bc19-4e3eb3b15e5b", "sighting--c571d575-8731-4e41-a153-8942a7e370a7", "sighting--d4c8de5f-1c91-4c6f-92f0-b09b0afa933d", "sighting--1c997781-17e9-4991-907c-20ad120666dd", "sighting--c16e2fce-fc39-4520-b799-d3b88c7911ff", "sighting--79fefaed-d22c-4bdb-a9f3-fd39080523db", "sighting--5018702a-0230-412a-bb18-c6b44665453f", "sighting--3ab18dd9-0ea3-44b2-a2d9-1620a6f96dc9", "sighting--37e73958-a086-41ff-864e-14fcf8c9d98c", "sighting--b7aca3c2-4186-4325-9ad7-ee5a10e65f5b", "sighting--12c02dac-ecfd-48b9-8011-9d9aa780495e", "sighting--b564b4d8-4415-4d21-a306-467282839d7c", "sighting--5ab50fe5-2619-40ea-b6a7-edea4a1881b3", "sighting--6a8a5b85-4f64-4a64-a010-42af65cdadf5", "sighting--2ffa9312-c22c-44e3-b9bf-2e13eda39346", "sighting--51ae57ab-176b-42e0-b23b-efb8d1a2e693", "sighting--6b972bc2-e147-4c2b-b385-65aba4617edf", "sighting--00c3957b-b1ed-4696-a9c2-0dee466792d0", "sighting--dc81231d-f841-4ecc-a028-3627f1f55acd", "sighting--9042b0c4-7ec3-457f-ac47-956ccc5b09e8", "sighting--f9a5ffa2-839d-4281-b275-3dc419e23248", "sighting--960d78e0-4402-46a5-909c-1b2f2475b1da", "sighting--0f7b81a4-111d-489a-8ce5-700e39015ebf", "sighting--482a192f-5340-4bbe-bc10-31c574c1254e", "sighting--a1e00b59-e276-43b5-aebf-d1dee41727e1", "sighting--a41f11bf-ab5f-4cb4-9f70-e16de842e517", "sighting--d05b33f3-e916-4135-aa02-406e20743456", "sighting--77a4519b-c9fd-46ff-9032-0bf371a6c047", "sighting--1ed175fe-ffe5-4c46-8efc-6d1980ff9775", "sighting--6de67959-a6da-424d-b889-ff9e223a1722", "sighting--cc4b843c-40f5-47d9-ad46-dc41e10ea67a", "sighting--1e3f5cb1-91b6-4e4c-97be-6ae36265cb1d", "sighting--3c08e385-5eca-4ae6-bca0-c3c90ba0b30a", "sighting--04273bba-ae88-41b3-9919-2113eac5e5e5", "sighting--6a63851e-cf2e-4098-a361-558b3435625c", "sighting--67c4c4e1-7e69-4bbb-8860-6f49e55988d4", "sighting--909cdd41-e8ed-4e02-9292-cea28a5a5331", "sighting--b05868cc-b471-4d9b-8ebf-bec32497e084", "sighting--fed148e3-6615-4e7e-9dbd-76a9b3a3eee8", "sighting--e109f915-a25e-4a1f-a453-faaa4330470f", "sighting--fc94dd7e-10e6-40d8-a2d1-f9b92d59e837", "sighting--0ae7bdb8-4640-4953-ad39-93b015ece115", "sighting--fb50d457-34b6-403c-9840-a71c3e68d8ed", "sighting--992181e3-4fee-48f6-a7f6-e15c3236b258", "sighting--97275bae-ef64-47e0-9de7-49bd6fced263", "sighting--cd7fa763-a139-4c6d-97be-1816a4aacfa4", "sighting--97003a90-f3ab-405c-9c0c-2f7cbd173de2", "sighting--21b3ee2a-b81d-4767-a2e7-7a5529e330bc", "sighting--1f238b2a-228a-45e7-b4d4-5db88a448802", "sighting--3cb05c02-634f-4c1e-9c0e-98e4766b9aaf", "sighting--07993f80-f054-449d-930d-6a2fa567ce2e", "sighting--2d51f6e5-e015-4b3d-8a1a-5b9146e60d04", "sighting--6fdfce90-2696-469d-8aad-6beac44f689d", "sighting--a30ab0c8-8bf5-42ea-86ce-7fd3c1b080fb", "sighting--3b0cfddf-8fa5-4e58-884b-7193188c0cfd", "sighting--6626b86d-e3bc-4af4-9040-147d6986e938", "sighting--62287615-ed35-4521-9a46-51b42def3c54", "sighting--70ed3d37-e8ca-4ebc-bc9e-a43e0ca92434", "sighting--2753a212-a78f-4f3a-9739-60bf0aa09807", "sighting--e1fc3282-dd9d-42fb-a66b-af77e20f4440", "sighting--544a4d21-0309-4788-af0d-83499928c81f", "sighting--81ab580f-c4fc-481b-b8f4-490f8873ce4d", "sighting--fb4036f9-7d4f-4a9f-9c70-8e5248926321", "sighting--91fd1826-76b6-4623-9438-334775a77de3", "sighting--d1a6767f-6050-4084-b22d-9e120c1a29ce", "sighting--a1b0029e-d2e2-40a8-a33b-cc838af659e4", "sighting--041542c0-01f2-4688-91bb-9014da378279", "sighting--c5d92c02-e6ab-47a5-b2dc-8bf84bf0300a", "sighting--e90cde61-9a73-47f1-a17e-3a1bcadb5d40", "sighting--e9fb55ef-2e4e-46f5-97e3-6bc9a2134b79", "sighting--7d212cf4-122f-45b2-9465-8080721966ff", "sighting--b96eca94-555d-4137-8e35-e4a09e379ee6", "sighting--c2c50ead-65df-4ab6-8621-fce456e40fcd", "sighting--ac72e61a-a8f6-49f2-a83f-e681aeedbeb9", "sighting--aca7e6d5-8c14-44dd-8d53-c98d16f0abd6", "sighting--9b5d9c6d-4762-49b2-92a8-b283c89b625b", "sighting--2068a081-537f-40e5-b40d-2de17c4e7959", "sighting--d6adbc60-79f5-459f-af69-65b1df22b674", "sighting--8abf9d2e-7cc2-4c72-a7a7-abd9e692f5ac", "sighting--4206f9fc-9da7-483b-ac34-4129dabd1317", "sighting--75f177f1-2034-4520-97ed-3ded7e5ab344", "sighting--8ffd5b31-d16c-4e6b-8af6-577de3a9770a", "sighting--64d69c37-e9c7-4e8e-b754-5827234e2bef", "sighting--f7687bb8-ae6e-46db-9f0f-a7d444244add", "sighting--5c45d26d-07a2-4e86-a3ce-c18d97d4c6ef", "sighting--37c60405-add6-416f-bca8-c86cb81b7e3a", "sighting--eab816b9-d50e-425a-873e-9b03551ed552", "sighting--368ba58e-5779-4931-833a-0ba31951c5d8", "sighting--47035e14-89aa-4216-8db8-b7ffd25c90af", "sighting--13afa07b-8440-4dd7-8ba3-76cabacb9830", "sighting--9dba3a2a-55a5-4619-a332-ca5108cfa23e", "sighting--5fe87ad8-5a85-45ab-8fdd-243045e90fae", "sighting--ce74043e-1919-46b4-b1fb-4222a93075fc", "sighting--5ad9bfa3-85a4-49a9-9cbc-d3c8083bf7a2", "sighting--33b8bdd9-dab4-4c57-8653-c805dc715092", "sighting--f51aef82-c993-4b1d-90a2-988c561e2348", "sighting--50cde5ac-a8c2-45d6-ae99-6fb5dbfb0a8b", "sighting--a4cdf61e-d17a-4fe4-a871-82e077874fd1", "sighting--46b9e43b-2867-4395-a503-80d5ab904635", "sighting--d65f47a1-8eba-4ee9-a182-e0a2b61f39a2", "sighting--e0119ac6-c050-4389-b92f-184908ec97ee", "sighting--2f527b91-a1e1-4b93-aed7-ac3d73e99bdb", "sighting--064f2e19-8447-49e5-b3c0-7d6e0818a9ba", "sighting--3442c01e-59dc-44f8-bf99-6c583c813e4f", "sighting--823e5c28-ef66-44ae-a5c8-b3ef23a60ec7", "sighting--beb50b18-2a93-4529-945d-b858752e30f0", "sighting--eca0e9c2-f807-42db-ba68-bd9f9f9d3878", "sighting--1c522d72-5e88-487a-8d72-d713f1942f84", "sighting--4f21e10a-5591-4dd2-8100-d0bb6c400cf2", "sighting--1c54ceb9-c2d5-43df-a91a-5a602995b2da", "sighting--ac63ed34-d1dd-462b-8152-47f1d8a99f7a", "sighting--e18f95c1-1039-462c-ae0f-c4553bd42d8d", "sighting--e15602a5-1a9c-442b-ae0d-047324c9e2ae", "sighting--718df3fb-c286-4b37-97be-e587c0a40de7", "sighting--2022ed39-6c8a-42d5-a12f-fcad16c4cb59", "sighting--22d2334d-b98a-4198-998f-997b02dc81cc", "sighting--92b010f5-f06d-404b-bd09-ee616bb52665", "sighting--7f174b3b-008a-4a8a-a883-c6318cbbf09f", "sighting--b8d055eb-5012-4aac-ab3d-f0abb5a33e74", "sighting--13893414-e7a8-422f-882c-d5f0b0f8eafc", "sighting--5986a53c-666d-4d25-80eb-d93355043cfd", "sighting--de108d78-9e17-4e21-89b5-164b43f8d73f", "sighting--a0f61380-a459-4fbc-a511-41af35958d4b", "sighting--5d57b69c-48d8-4019-9826-8b67f8cef91b", "sighting--92b8ef5f-22c2-41ef-8da1-2e91a58490e7", "sighting--4e9a1a56-80b2-4a17-8cbb-2463f7bdb611", "sighting--1ebf319e-e392-42a7-83b5-db01d0fdd79f", "sighting--c2480f28-4716-4b2c-bb8a-973e004e1683", "sighting--8fbdc8d6-5772-4af8-b122-2b8c2949408b", "sighting--c529a24d-cf42-4bd2-afc2-d81f4a1e215b", "sighting--f30d0de5-67f4-4f6f-aef4-e2f3594abf2a", "sighting--3365623f-25aa-4a5f-8add-80616efadd87", "sighting--0c21da8b-7643-4ac4-a3c4-9c274965d1bc", "sighting--b5156df9-0826-4ff3-bae3-482964b0fb43", "sighting--66024995-102d-4b42-a622-2cc0715e107c", "sighting--f3af9b0f-03ba-49bb-b0d9-583690bb1a91", "sighting--97928026-9a25-4bc1-8009-417ac29f544b", "sighting--72f71def-fd32-4ca0-bbff-cd79953884b8", "sighting--b529dfb4-c79b-4a35-88db-3118b48daae3", "sighting--657a7a91-d1b8-4ff6-9d0e-1e934e93d1e6", "sighting--baf9f826-6ff9-4ada-b056-177bf5c3ffe2", "sighting--70221d41-b31c-48b3-9841-814bf2812edf", "sighting--53587cb0-0915-4ee9-892c-7090410e3475", "sighting--961273fa-1c33-4efd-8768-3718fc6b4e25", "sighting--706068f8-1a0a-4164-8ece-5cc849785a82", "sighting--dedcb56a-6572-4021-ac5a-c2eaeb75545b", "sighting--9a4f69a6-e4c1-4f14-a576-3f12989b7334", "sighting--ba340b96-7882-4ee9-bf51-65c0b0f88cb6", "sighting--0096c2f0-6394-404c-ade9-65138f2f5bea", "sighting--afeddbe2-79cd-4234-87fb-be436308f6d5", "sighting--28d28080-87f5-4754-bd83-63456a6e5195", "sighting--6006e6b4-7e9b-443e-8500-1472279a4ec6", "sighting--bbf12a62-aeb9-424f-8c7f-5ea0cbbd6ece", "sighting--cff7c28a-3cab-46fa-9e27-29b0b459ee9c", "sighting--81ab5a22-1922-470b-afb9-dbdc8d80744c", "sighting--3fec1d4a-b0fd-42a9-b531-682d8ce35f8f", "sighting--da1b71f7-69e0-4bec-afe7-07c0c086c861", "sighting--f9872a4f-07e5-41a8-af7b-7fefd18d6db2", "sighting--3384504f-ae2f-4ace-9ebc-875b567c0a1a", "sighting--727fadfc-dca2-4269-a9c9-e0b8ef8adcb8", "sighting--2577987e-eac3-4b94-8931-5d6b3ffefcba", "sighting--70f389be-15a9-48fd-82e5-13ded3739012", "sighting--84c966c6-b343-49e4-b3e1-1e10bc844667", "sighting--f08bf242-7b17-4263-bc09-63e6e96d1911", "sighting--eefef7be-aa43-4c0c-8a68-2d5e317235d7", "sighting--add86936-f427-4c04-a47c-552b4e248528", "sighting--865453bf-8f3f-4f59-8ea6-c268c28997d1", "sighting--c4fcb3d6-0f0e-4b5c-a0fe-a98d501d62da", "sighting--a3c77bc5-eac0-42b3-9b56-02708089d1b5", "sighting--828031ce-a9bb-4627-9a7c-702418f80edf", "sighting--039ba75c-0e0a-4a0e-a62e-54adb65da5ec", "sighting--76502f97-27a6-4d80-b8fd-98d83a291b15", "sighting--327cf8d7-1f8d-46cb-a009-e22743bb43a2", "sighting--eb096a84-1cb5-423f-9424-58152d6cbecf", "sighting--bf23773d-b4e3-452d-9181-20303a77cf57", "sighting--2e298d25-e51f-414a-a34a-dbef5e4003e8", "sighting--c0eea5fd-8b31-4b54-82ff-5ddb45fafe0b", "sighting--e5bd0115-5883-428a-aafa-1f35ea80f47d", "sighting--e1d41aca-5b5f-47c6-b4c9-ac7eb86a8acc", "sighting--f2c9fae8-d089-4b5a-accd-2e5976b1c700", "sighting--b079ebd9-e576-443a-a500-40566ba1ca9c", "sighting--528f88c7-c30d-4fa3-8840-b70360e04757", "sighting--71abb223-38d6-4b8e-b5ea-fc0a271743e6", "sighting--0f9ef8f7-5a1b-4ab3-ad3d-b0df3db16c66", "sighting--4a90c156-4a81-4181-9764-ac19518def60", "sighting--79d71eba-6d3d-4a8a-9a5f-5064be480a47", "sighting--736f9543-a3a7-42f2-bac6-374b7ef67260", "sighting--26ec7667-9252-449f-86dd-d7924564ac2a", "sighting--71e4fa26-7d80-4927-8ca7-87490b82e7a1", "sighting--e8e79295-2e1e-4a77-b88a-f7fa4ff90fd8", "sighting--cfe41a39-31dc-47a3-8c3c-02cd1b39290a", "sighting--4c32cb40-19e2-4db9-8220-f92940aae1bf", "sighting--5aadf2eb-3e20-4e09-bba1-a848d149d436", "sighting--2c57ce65-1f80-42c4-b6d6-75becf27f5f4", "sighting--610301ff-5cb2-4c6b-bfdc-95974cb788bd", "sighting--11f1b20b-fb05-4b37-8b1e-77f3d33e9bce", "sighting--66ff8716-a2cb-4d42-a535-8907d371889c", "sighting--e7e5d98e-1fcd-4090-adb8-9c81f79ebb8a", "sighting--124cad2d-825b-442f-b8e2-a55ced4afabd", "sighting--4894724d-d88a-4203-a5db-d0ed6cca97a1", "sighting--d5d8d684-4855-4136-812e-002c65fa86ec", "sighting--b155c831-d248-4c74-b375-4ad3cccb5832", "sighting--ab1d77a4-fe0b-409b-a81e-42b2c7ea673c", "sighting--59ed206f-4854-445f-a71b-4f747a62a62f", "sighting--414cc4f3-eb52-4801-a597-ee519442d86a", "sighting--ecb15a14-9c0a-405f-9612-54b278715e06", "sighting--a871d0d1-6fae-4331-bc1c-daf7464e34c5", "sighting--890af1ca-830d-4337-add7-22adfd871da6", "sighting--b9bc2363-52d8-4bcb-8190-29cbff5d97ec", "sighting--559501c7-84be-4866-8ee0-5c83ebd9e248", "sighting--897640b3-3564-4b56-b468-fb1742b0d074", "sighting--d08f5dd2-87fe-441b-b7a2-025b5c42896d", "sighting--21381dea-7521-46f7-9091-7610f6bf71f8", "sighting--470419f5-59e2-4353-81fc-9d1921e83e0b", "sighting--139d8ee1-2c39-4f92-8f6b-5f69bb583706", "sighting--160af97e-3cf0-4258-aa69-1c6cc17bcfe7", "sighting--6c5315b2-3352-45d8-a058-0004ae1e2e52", "sighting--5a92f471-5302-4210-aec0-640649326553", "sighting--1595df94-eef2-4b28-8968-7c17e582f680", "sighting--7801268b-70c2-46db-9698-8207530756ec", "sighting--345bf6e2-2ac7-4ca0-b5bd-3d290cafca00", "sighting--23f7af92-4b3e-4417-9307-49275c623512", "sighting--0a2b3b84-6a5f-4122-975f-9354bc2e9a79", "sighting--ac290830-961d-4745-9083-6d6a89285ad7", "sighting--02693dfa-af09-475b-bf65-eeaddd582574", "sighting--6e73188b-c130-465e-9080-7536cfdd26d0", "sighting--6a418656-677f-436b-be92-6e4c2865255a", "sighting--bda5fd9b-cac3-4baa-8505-74652ade58ce", "sighting--03a6ad55-367b-4f21-b85d-53019a0645e2", "sighting--c80e78ec-9395-4a00-843f-72f3220936ca", "sighting--dbac056a-5e74-4414-b983-a3bc4b55856a", "sighting--7b22dc2e-ba20-4e6f-aa30-d1f6811eeb28", "sighting--beb0a424-14d3-47b5-ab3c-d6a5af4d5429", "sighting--42d99fc9-4ea1-410f-962c-4ac6ca712a3f", "sighting--7050d57d-9328-4a7c-b7ba-b4d1a110dba4", "sighting--2be0fcb0-6d25-47fe-9954-8a890b1a51b4", "sighting--6f42df30-03e4-4cfe-bae3-c5458b029590", "sighting--8a6b454c-916f-4083-ae8c-cbf8f403253a", "sighting--96248173-6074-40a7-ab42-a4b0350eaf66", "sighting--505902a2-2a73-46a0-a3dc-6fb0fc67b59a", "sighting--8ee15e4b-e08d-4bd9-9b94-b5a866c2c914", "sighting--fcb5b44c-3559-459e-a787-9d578447533e", "sighting--05cb7fcd-a6e1-4637-b478-18ced4a0d8e7", "sighting--8514e3dc-a157-4b07-a47c-64244a23b62c", "sighting--2f58d20b-6ded-4bc3-a77a-d2f3fc1db8d2", "sighting--ad43b143-bd5a-4a95-a614-40e6e84d06c9", "sighting--55f9c3bb-ed44-4685-87fd-2b58fc5434c9", "sighting--6c4e00bd-9cec-4248-863a-41981e65c60e", "sighting--7de0de86-4f79-4f52-bb42-2df23e22bd4b", "sighting--5a344cb7-ecf5-4967-a76b-7bedc68505ee", "sighting--4c0807d5-93f5-46fe-b85d-c49b42eb76be", "sighting--f2e92812-20a4-44b8-8232-33dfa4d980f6", "sighting--54f7c3d3-3c36-43a4-adaf-c34cdd94af98", "sighting--f80d4fd8-6d74-43d9-bf2d-f380d41db413", "sighting--ff1a966e-a565-4c2a-9a7b-6c6778380018", "sighting--d8bc9570-ae86-49a3-a8f9-5a71b76f249c", "sighting--ff69eaad-1fef-4eb8-9412-039b1a40151c", "sighting--62f5b065-62f2-4827-bd7f-c525f0771f54", "sighting--60fd2513-f872-47b2-bf09-889012e05972", "sighting--96a492b3-88d1-4da7-8ff7-c617f30f2a4b", "sighting--b4559316-c898-4461-a6ca-8478402668f5", "sighting--e1c580d6-f27c-453c-84fa-eae7080a7e9c", "sighting--380c40e1-ce94-404b-ae1c-0149a1b2187c", "sighting--0900db89-06f3-45b8-af5d-d8ffb1ffc83a", "sighting--369a78be-31d4-4ca9-b7cc-415234181b27", "sighting--d692f3e8-9511-4c71-9c64-a0b94dd8ddb7", "sighting--d162a462-e892-4ab3-a589-4e2f9e136d72", "sighting--d1014d0e-015a-4e75-b163-97704bfe845d", "sighting--216e13fe-9060-4bf7-bafc-7d905cf70319", "sighting--d32a33bc-5aad-4d52-958d-557d2b565e7d", "sighting--8ee765a0-fbf0-4f17-8f58-7cf8da7c01b3", "sighting--3b223401-bede-4101-83a0-67133430b86f", "sighting--e28c0299-09f5-416b-a337-a86cb65381ff", "sighting--9b7702e7-f924-4956-80c1-af4d0f949334", "sighting--f15d540f-7296-46bb-9a71-8f4d8e945738", "sighting--75a0f943-3199-4500-b6f4-237b1f7f50f8", "sighting--d77b0c2d-7177-4b54-ba82-a634ca534499", "sighting--4d5f5967-6973-49a3-804b-7b9fa674c925", "sighting--72d4215f-e01c-4457-89d9-15dd60b1dbd0", "sighting--fa2b9244-2945-4607-b9bb-bc65966062ee", "sighting--24ba5c24-8526-4e89-a7c4-0597774e0e17", "sighting--60ee6698-a71f-4c4f-b958-1aef0dffb678", "sighting--a3a97789-d758-4a99-a984-ec742eb9384d", "sighting--fffa1836-1192-4e4d-ace1-3431775f1e17", "sighting--2fc662f5-f018-48c0-9974-9008ba077a8f", "sighting--2967e569-89d2-4222-8ee6-f00955f7351b", "sighting--22add75d-74b6-4373-812f-15644efcec20", "sighting--7780f456-0c2e-4456-ba08-26c24e24fd21", "sighting--76a2771f-4749-47b5-9928-dcd605d010ce", "sighting--aba6a369-2d2a-4d48-b27a-d7d6bb9e9669", "sighting--b237cb20-1f6c-43b7-973c-650be2cbb98c", "sighting--7ab25d52-eb87-4c0c-9ad2-16a9cfc8e861", "sighting--b366705e-496a-4e4a-8508-c01ec7f61535", "sighting--05db3be3-1b1d-4567-ad22-8193d898b268", "sighting--f3a6ebe6-dbf3-48b6-9317-02eb3d074450", "sighting--a5670a30-dfdb-4678-b097-33f9c295f85f", "sighting--8c0d4bd1-0ca9-4f60-94b1-f6d958dd39be", "sighting--edf5332a-ddd7-4d73-88e9-b65f38f73c69", "sighting--0c3c5dfa-3a68-4e39-bdd8-e51d9aa06967", "sighting--73371543-6c70-4464-a29c-56d3ceeb01e9", "sighting--5c061c21-b32d-4f3c-9d14-48943f4171b1", "sighting--54af9bbc-77a9-42fb-8d09-30edbe1904a7", "sighting--5b000dc2-bb55-4376-86d3-450d36dcee79", "sighting--1593af36-1750-4fab-aa4f-f916433e528e", "sighting--65dee5a0-7613-4ea5-bcec-9575f18c281a", "sighting--6d804689-8a7b-49a0-afbf-fbc81079f2ac", "sighting--b4e00a9c-6bbb-47c8-8b2c-3d67c510487b", "sighting--997b05bc-0669-44ea-9e74-69a818d59aaf", "sighting--7c9fd305-4c35-4b8d-bc70-3b83f51a79aa", "sighting--62a2fc69-5a03-4d0e-90d8-3190053a6a0a", "sighting--090e53ea-d7da-4844-a70e-90b7f92b39e8", "sighting--2103ad28-1e03-4a17-9825-e618d245cb64", "sighting--557c3def-2248-4357-9fc6-acc7c17e6efa", "sighting--cf10b340-4cf2-46be-a3f4-a6c26a0444fe", "sighting--764c12e2-5ddd-4c0d-b9e4-105d03c02901", "sighting--a6ee1e0e-99d3-46b8-940f-3c26bd729250", "sighting--dbb07bfb-5a1d-454c-b61e-e24f9e6fa9a9", "sighting--d8bb3f13-3f2d-4040-bfce-cd28ad5702c5", "sighting--de2eed59-cbbb-4286-8895-186d75f182ba", "sighting--cba2a2d4-6355-4e5e-92d9-220a3ca9d94d", "sighting--7ef2cddc-bc0a-4177-99ec-b18247a02642", "sighting--aeacc312-5b04-4fc2-bad4-56ae5560f6ed", "sighting--859f06a9-c8da-448f-8c07-361767e7d75a", "sighting--6fcead2c-217f-4ede-afbb-1fd5e73f1283", "sighting--361e151a-a1a3-49dd-8fdf-fa7f0a91b2a0", "sighting--2250be98-27f5-41c4-a96b-4fa433a2db89", "sighting--0be37a1f-40f2-4572-a845-dda8d30315ec", "sighting--79ecb667-4f26-4e32-86fb-f6ae0f0242c4", "sighting--bfd2644f-8733-4ed5-9f64-82059de24eff", "sighting--e4d0ed4c-ca8f-4b31-9d8f-93e869f0f1f6", "sighting--3815bc2e-8f63-42b0-8a2c-2afb57df111f", "sighting--89a58a35-b3bb-4ca1-ae7e-8f0d8eb4e6e7", "sighting--dff863af-91f1-4df9-8057-67bdf1d3aa89", "sighting--2e51e5f8-fc94-4dbd-9e38-eea97418d5d7", "sighting--db9da99e-1bc6-4410-ac86-4403d282a7db", "sighting--58adab9d-d99a-4062-b041-b0aedf17c54e", "sighting--982d003d-db1e-45ad-b7c6-ee9e5bcdd66f", "sighting--5550bf06-1931-4565-9912-3e6fc361ef02", "sighting--8c944d8f-56d1-4bde-a5fc-b2915cfce2b9", "sighting--90852bf9-3abf-4ea6-adce-d1c21875705a", "sighting--10237b3b-0e99-4023-8c9b-55eab1ac168a", "sighting--0ed96c81-a1a1-46be-b49b-6dce1ee40272", "sighting--098b1996-10bf-403c-b187-d8951790dc4f", "sighting--f08ad8bb-c069-408e-b64b-bca678165124", "sighting--5dfc4b95-c318-414d-9da0-711bf56d64fd", "sighting--412d4980-632e-4c68-8feb-b0cebcae2c35", "sighting--9468ffb2-0127-4db1-8fa6-e5bcc79f716b", "sighting--1e528266-4850-497a-9cfd-5a6c75c188cf", "sighting--b9db6289-4624-4843-adf5-dc3221440e22", "sighting--651512c4-ebfd-4b72-809b-21bd74a2a0e7", "sighting--4e126b53-2bb0-4787-a52a-9c745a782323", "sighting--7d075e55-f926-43ea-993f-39e166a2d91f", "sighting--daab3432-5543-4770-badb-651f2b4ed59a", "sighting--4b1e554c-3ca6-4ed5-9cd8-1f7daf1fc811", "sighting--bb31ef13-6fe3-420a-a3d0-d5782be98134", "sighting--d62aa574-8076-43dc-9c33-756edc7b5d7c", "sighting--61c19762-d79a-4802-ac4e-43e5769588d5", "sighting--2c215997-68e8-40cc-8631-c527b0c5b1e9", "sighting--3eee6080-68bd-454a-b091-ea04975ed2b6", "sighting--355c4f2d-365a-4ac0-9848-e3c152dbf98a", "sighting--89e96e0e-5223-49ac-b7a5-2a718223bf22", "sighting--0b8bfd30-ab1e-44a9-9a05-244c4c197c51", "sighting--584b6c37-7503-4b53-9504-d4e1365dc516", "sighting--7714c2b8-f2a8-429e-aff7-10e3f768db40", "sighting--6fc9debb-328e-4a66-b02e-074da21c0663", "sighting--bd9b7aad-fcf2-414a-b20b-7c201457e46b", "sighting--a6376815-f1db-4389-8fa2-d1ec6cd69019", "sighting--831df2db-0bff-4e7b-baff-ca74e5e24867", "sighting--9869ade9-920c-46be-9d69-302d7f3fd422", "sighting--17eff8b5-d2ad-41c1-ae71-793288d79517", "sighting--1b26f012-813d-4376-ade2-ace3f5009c21", "sighting--165b6e53-c7a9-4a3e-8152-fe8a5cff0ebe", "sighting--045902db-fc6f-4ecf-8fa8-95cf61087a8b", "sighting--3363a438-c1f7-450a-a59e-15a6318a6524", "sighting--c7df3bad-2fc8-4644-b65e-aea7b350fc43", "sighting--96fcc3ef-4904-44e9-8bbd-d1bf49c8a2b6", "sighting--6d54b588-f6df-45f6-ab39-3bf0b31dd5eb", "sighting--2058e488-5430-42da-970a-50b12ad91566", "sighting--4a331ece-36a3-46e4-8cf4-e6e65a2a6444", "sighting--1973c2bb-684a-4061-8f29-14e5d44636cb", "sighting--c90d4631-ae9e-419a-95e0-0824389dccdc", "sighting--98af056a-5adf-4ab3-bf2d-a6d60cbc5d19", "sighting--8c74b01b-611f-4060-a71b-6e78c35b447c", "sighting--247095dd-0ffd-4a2e-bd29-e0feec59d419", "sighting--a6a8b923-3b4a-4061-ab3c-af769735a4fe", "sighting--90a445e3-41f8-493b-bae4-caf88b33a89b", "sighting--83016787-c13d-4de8-a8d5-9dacd5968336", "sighting--bdbaee3c-f70f-42bb-a582-1e1f519af069", "sighting--a218f9ec-e7f3-4dab-814b-30649da3e007", "sighting--f1aec972-b53f-43c6-bad0-fe859a8f53e0", "sighting--1a1e3ed9-eef2-437d-9c58-b046528cd259", "sighting--ada14044-8c51-4180-ab34-93d290bbb9c6", "sighting--513fb2d6-7f78-452a-a2f4-b040cdfa4a59", "sighting--5c851326-04fb-4fb2-a4bc-0b48021d3024", "sighting--448ebe18-04b3-48ec-85ab-4ef4a84595ab", "sighting--53a3e9dd-1993-4f35-b5c1-494f31160a94", "sighting--30757760-09db-41cb-b2f5-f9c68db6a48a", "sighting--f34b1b90-d8b8-4ad2-af52-5faa74869d9e", "sighting--c007a97e-9840-45b1-a353-4ee5c20e7065", "sighting--d9473f7f-bf5c-4a3e-af01-62ec51cffda2", "sighting--9e1a35e5-81ab-49a3-8ea7-6bb59ed58c92", "sighting--d548ba1c-1527-4e5b-9e8c-f07126e26de8", "sighting--0cd41c31-10cc-4ac3-b702-8109cab3a004", "sighting--f49412d5-3ef0-4c0f-9296-c1985faeffb1", "sighting--aeb4ded5-35e4-4a44-a127-917d6ea71bc2", "sighting--fb89fb00-2165-4100-9ef1-4c7a6611df3c", "sighting--95abed7f-ba03-46f0-9854-a417b21790ae", "sighting--8ae63b50-2c98-4a15-9612-32855e344a25", "sighting--902775dd-187b-4315-9de1-f38dc6c1f219", "sighting--ee90c7ea-0063-4d08-ac14-c48fda55e3ea", "sighting--072a6802-b58b-43d2-95ef-b3fa883b70c5", "sighting--e3f4e766-61bb-406f-8101-b3a0e7dcf4b5", "sighting--dd705982-4869-4d2b-a3cd-33690ac8a49a", "sighting--8881a732-f027-4bb4-8996-b8cc70311f55", "sighting--5dac3972-ec2e-48bb-84ca-a36482128533", "sighting--2e4d765f-f22e-40cb-b494-8b4a8a1258e0", "sighting--9279d075-b590-4473-9a48-25d748be1ba0", "sighting--ff9e50a1-5bf2-4cab-ad77-c6219d3cd6e7", "sighting--67e784a5-d3e6-4d26-9de4-a30d73b03447", "sighting--8e6b7504-953d-4962-9f1a-1fa6eb8e142b", "sighting--8c3d0410-6af5-44bd-9d09-a975661ca82e", "sighting--4251fed8-eed4-43ed-9abc-1741660f3af6", "sighting--c11fab42-33b7-4637-a1ee-1c412fadaf32", "sighting--eed7fdb5-f390-44ac-864a-f8d7d4b313d0", "sighting--274936c8-b7ac-48a3-aa06-04bfb9f4b729", "sighting--2a51f6e3-74bb-4e87-88b1-f27167dcfcdb", "sighting--cc900736-76c7-4119-8d40-5fdea98cc880", "sighting--5f31f509-d520-42c2-81dc-61f748f4bbfd", "sighting--474cc935-d44b-4930-ae93-4f1c65057f7a", "sighting--c532acc8-9a67-4d38-90c1-076540ef911c", "sighting--c4d291e6-e882-4dbc-b935-17b28aa4cbf5", "sighting--5d2b5890-f6c4-4623-8ddc-577e02d300e5", "sighting--da297c48-7428-476c-bdc0-34d90d3be191", "sighting--9ed2696a-7975-43ae-bf1c-bdfcb1efd70f", "sighting--4ad3bb59-785c-46df-b05b-99f85ee41f77", "sighting--430def9c-ab09-47d9-867c-356d3a865f14", "sighting--ba45ec40-ccb3-45d7-8bea-0511e4fb55e5", "sighting--c59517a5-3d92-4744-869e-e0a36e69bca1", "sighting--78403290-07e9-46fb-a5da-3b852e3624d1", "sighting--418a60e7-a626-4f5d-ae34-daa7fe60e75c", "sighting--16f1ef59-dd29-4db8-b56b-7767f3bef35b", "sighting--cf31f84a-ed67-4e24-adb5-eb73256a5c0e", "sighting--7ca3d433-ffaf-4913-af17-09deda55fa48", "sighting--b23a6568-606a-420f-be86-1a157ae81a61", "sighting--8b4b4bfc-f877-47db-822b-50aef938d20d", "sighting--0a2f9e8e-8227-40ec-9d13-e368bd8f3934", "sighting--475fedec-727c-4174-9bfa-4124195995b7", "sighting--bd771207-0a57-4ddc-8e64-7fa66432fae1", "sighting--b65f368d-f719-4722-aa46-317b856a2eca", "sighting--a60be842-6e0a-4fdb-8fc5-b2bc1986d7b9", "sighting--6b79dbd5-d7c0-4781-bb4d-034bee6c44ef", "sighting--639571f8-8336-4b57-9d5c-6edcee9a1662", "sighting--d6cd7893-34e5-403e-a413-9e248a9e3c58", "sighting--5213930b-bdba-4d14-8928-f6380399b4c4", "sighting--56cb3333-2510-4839-b3de-95456878bec3", "sighting--4ac9ae89-019b-4ee0-b70e-670d42c09d72", "sighting--7ee8409c-1fc2-400b-8e14-a76743583b4a", "sighting--9d45a47b-d35e-406d-a8d3-770d7e7ad3a1", "sighting--a9f77d95-0d3e-4936-a363-aa98071ba830", "sighting--5b57fd11-c299-4ccf-86df-00f521d238ad", "sighting--5b78108a-4f29-4e5a-901e-8a4381e55f44", "sighting--c67bb91c-67e7-47ed-9f7a-1ad044cf7d88", "sighting--2da8cb93-ce8d-4511-85ef-828c26c46ee0", "sighting--0fe5dfae-4d14-4b25-9af6-271eb5d51fc1", "sighting--ca67acdd-c806-4091-b46f-bf80f5badc56", "sighting--a57d86a5-16b1-4cfe-b3af-c31dcde5af9b", "sighting--88c2e1b7-00f8-4376-8039-4196f9fec675", "sighting--67230e6b-d086-4210-ae13-07217e8e4b5a", "sighting--5bf03441-999c-4ff5-80ff-452283b52858", "sighting--24a46fb5-a55d-4e8f-bf8d-c60349100c09", "sighting--972e4a2f-14b4-4d7b-a892-8cb844fa85a8", "sighting--fc13d434-cacc-479f-861f-1f8a5416724e", "sighting--37781f56-affe-46cc-872a-3333b853cd0c", "sighting--ea48b24e-40e1-4df0-891c-832265ea8091", "sighting--d03717eb-dc2c-4b99-ae73-c84287ff4964", "sighting--237f13ae-2f33-4f76-bba3-fdfbca8729d5", "sighting--913466e3-007b-4a86-bc82-7b10a73c1077", "sighting--dfec6b15-31c3-4aeb-a8e9-e28910787b79", "sighting--5b8e5c22-5e35-40f6-8f70-ee1b47b995da", "sighting--a4528d33-fd3e-4816-8cbb-a2c989bf3fbc", "sighting--17d940c7-800a-4d36-9414-dec471c5e24f", "sighting--a6a83ec5-44d2-41cd-b917-c471bdb2c066", "sighting--fc775f24-378a-47d2-a929-e606bf555eca", "sighting--474b9c6c-374f-4445-bd73-e340374bc06e", "sighting--dc30d597-1ea0-4c6c-839b-d9169ad88c95", "sighting--30a85674-cf0e-48bf-9976-2c479bfa922f", "sighting--c2befb64-f4eb-4b6e-8401-b6ff7894c52d", "sighting--71caef86-e95b-43d6-b4c7-3c7cb4cdd20f", "sighting--4bdae4ab-5f70-4dcc-a8e1-0325494b7649", "sighting--ae958d2b-d034-437a-bea1-0d294ae8d2ee", "sighting--28e652b5-7d2d-41c8-a923-01e196f99252", "sighting--989d1bf9-9b63-4803-8bbf-e8c96513bb04", "sighting--f92a6805-524e-4234-9888-b49c54ad8a48", "sighting--a970b33b-6180-4e8a-b534-db21ed09e1a9", "sighting--83085331-8a91-477f-8489-993a3df7a911", "sighting--090ab003-0b4f-44a1-8303-beb8a44e6d56", "sighting--ee79f346-0fc3-4104-91b4-9102ecb1e09f", "sighting--ed714096-b346-4b9f-92f4-b30c639beec8", "sighting--58c2b811-5c69-46b4-843d-981f7bb60829", "sighting--d03a5240-326c-478f-803f-69eeb9933a56", "sighting--da4fad28-7486-455a-bb1c-4b7ef13e80c2", "sighting--e727ff10-812f-4493-9180-a4c6a9e0eafb", "sighting--f0c39ea6-91c5-4e00-8025-9f6b563903ff", "sighting--5cd30352-17ab-42b1-bf26-0da19e8ca1c9", "sighting--6c3966de-2a3f-4a8b-b848-d1fd11e424dc", "sighting--6437384c-34ad-4b2e-b47e-c1f4eac94121", "sighting--50fd89c7-36a9-42ec-babe-8fd8bd11b2e7", "sighting--08591c69-8140-41f2-a25c-9a45b201c36c", "sighting--b9a6ab05-8cc2-4d3c-8340-493b7630f7a6", "sighting--48290674-deff-4c33-87a9-d78798a0053c", "sighting--dc8c1dcc-91f7-4cc6-95cf-1ac2c93b5135", "sighting--adcb249e-2d2d-4ff9-8801-dbcf037a048e", "sighting--1269a7df-5859-463d-b247-59fd48148b85", "sighting--224145c6-65e7-4380-a741-dff1ae321583", "sighting--b3adba6c-8655-4146-81c9-8d940d7e66c7", "sighting--4e242588-6586-472f-8082-20fdea67386c", "sighting--9834e0b5-067d-464d-9131-41167f589362", "sighting--8d7cc3bf-e25d-4935-92d8-13ed94a2f602", "sighting--8c0a520b-af3d-453b-95cd-f69ea48f8977", "sighting--4699c6a5-4676-4ef6-a563-f72eea9de1c2", "sighting--d993f54a-864b-4613-b963-2856e2cb84b7", "sighting--11bb91ac-4a39-439e-8844-5e1e1700028b", "sighting--396f3a60-1401-42b4-897c-6431f8bd3678", "sighting--09f62663-3b01-4764-a61b-8981e47edf03", "sighting--a2be87c9-8380-4e6f-a7a7-62a2ed3aee6d", "sighting--14796abc-88d8-47cb-84a3-5235b22d7aa6", "sighting--34faef05-49fa-474c-ae31-e20a75331292", "sighting--a5ec0129-c3b9-4d17-87d9-5be4d6ae7aa8", "sighting--e5b4484b-0631-4f97-a379-3ff596108c1c", "sighting--40d2efc5-73f8-4580-8d08-c4e8ea2a66ee", "sighting--426b287a-26fb-4d1c-bdf3-9a375427043c", "sighting--b5ad45f3-910e-4e88-a91d-9170661a5031", "sighting--8ff12ee7-8e93-4da7-94c5-f33d8026e017", "sighting--7b4371a5-7c64-43d5-8768-fb18d98f93a1", "sighting--d9057a5c-9911-4add-bf1f-f046947f8144", "sighting--fc67fcad-6339-4645-ac91-22d8c36455ab", "sighting--7d33bd10-7b9a-4e9e-81a1-cc6b4d976fbc", "sighting--1e600e9a-11d3-46fb-aebf-950936e0a3eb", "sighting--19842bf2-d3bd-4fb0-8009-9a7db310fb9f", "sighting--566c569a-8879-447b-a303-b7c857ca1028", "sighting--ac53f3ec-86ac-403f-9110-0aebbc0192d3", "sighting--5562e339-0874-4c54-85c5-402467d2e7ce", "sighting--f0a5864a-059d-430d-823c-1a465c7a6b3e", "sighting--daeae8ce-1936-4848-8737-9fe48596aeb7", "sighting--aa3a18ca-a387-4329-b1cb-6f62cc07692f", "sighting--5abc400c-109f-45db-b91e-dbeacce8eda9", "sighting--51958c07-d954-4ff0-9287-9264ba3f6b29", "sighting--317bd435-7e9a-49d0-b455-eac9d4b99282", "sighting--5c24656e-dae0-465c-87ff-8fd5cfe5ba34", "sighting--1a9f5c34-233a-449a-a810-d5d99e16ab4a", "sighting--626176f0-b026-4376-9af4-d027ba6b1f20", "sighting--037da737-9faf-477d-8bf6-6148931b9524", "sighting--25ac66aa-7b9e-4a96-a4db-40a446ace727", "sighting--b9761a88-41c2-45e8-b140-1905ebdd0cf0", "sighting--64d4f889-33de-41c8-9f4e-758172c1357b", "sighting--5ecdc718-8ec0-47c9-abf3-0b291f4c31ab", "sighting--c52f5b14-4025-42e7-a842-1199754efee8", "sighting--1789ae9c-5905-4501-b3f3-30bf3265a83c", "sighting--c6140aa4-0ec3-489c-967f-10113b3af043", "sighting--0407b813-5bfe-4380-bccc-2bd8766c9c3e", "sighting--198256ec-3774-409b-be80-fe7b7c6651e9", "sighting--69a1c929-8e75-4996-8bd3-56c2c3f47ca0", "sighting--16e11ca5-0a80-4e01-b221-fab39e8fb175", "sighting--f9139271-5ac7-4a7f-a3e5-fad9cd072784", "sighting--84c21506-171e-4a91-a071-5cda4d09e125", "sighting--d12eb607-8b6f-40ed-9894-77601781868a", "sighting--3faad462-b608-400f-93d3-c0673a2b7470", "sighting--6382ef6e-a5ae-4b03-977c-f5997a7611d4", "sighting--235eb713-888e-418c-acb3-cb41a5bbf759", "sighting--11203af5-377d-438c-a9d9-afeb4dce148f", "sighting--5e4dfcaf-6f94-4bc3-894d-ea72c95dea3c", "sighting--2d70a561-8f70-4ef9-a7cc-cccaa392a8d0", "sighting--e34ba6de-be75-4683-bbaf-bf041cec4f68", "sighting--93f7e8d5-8db8-40a8-a33b-f522d56862d4", "sighting--7ef64a2e-91bb-44d8-a648-bfe6b11e0a99", "sighting--bc586ba4-07d8-4c20-bcef-74f08bb018b2", "sighting--6f19e033-852e-4ffe-b497-892134f3c512", "sighting--fa776168-da91-4a8a-b76a-0f552d631f41", "sighting--8b41af69-47d9-44cd-b5c6-14d9bc3c9558", "sighting--c672cad3-8a7e-43ca-a028-446c5b98a372", "sighting--0ea2bb79-64de-45ca-9e14-1e3eece1a839", "sighting--1454e4e9-18aa-4540-bc7b-379f1f9a1c1c", "sighting--a9f1f683-3a13-4aba-851f-309e6c40c45c", "sighting--b4af4d9c-bc45-42a5-97ea-d0809c718541", "sighting--47f64f49-09e9-4e48-9a24-08959baa5b00", "sighting--c7d4038a-77fb-42d2-8303-f5744f982523", "sighting--336fcb8f-547a-4c89-8e82-8793e3ccd1c2", "sighting--1f822b17-bedc-4a4f-bf20-5f194ae4f47c", "sighting--7dc28079-1e92-43cd-a29a-8b4f99101c67", "sighting--885dc3ea-bd56-4743-82c9-e60e490febbe", "sighting--49f71ef5-b42e-48e4-a0b3-60d4ef979f69", "sighting--22fa670e-55b9-4f7c-9280-e2720725120f", "sighting--6bd9eeee-e066-4113-8a38-1441dd183117", "sighting--6173a233-4d6e-4025-b68d-c6f57a48bff3", "sighting--72d477e5-802f-410a-8a59-86dde131ebab", "sighting--fdac5633-b7ab-491b-831c-f75ffc6d530c", "sighting--e078b0e6-b77f-4fa3-b89d-4962672b975a", "sighting--c24b4989-289b-4c8e-bd4d-460b4f6a37d8", "sighting--87355f5a-df35-4d12-bb23-74189634be4d", "sighting--0e28aaa9-c0de-437f-b13e-00d5900c2811", "sighting--8402ed03-0aa6-4f5a-a444-337f5e1db67e", "sighting--2a48c72f-084d-4b8a-8213-8d1a157c6df2", "sighting--c016c5a6-52be-4efe-a487-b9406c96691b", "sighting--9346b233-8692-46f0-8462-a7eb161c02e4", "sighting--e1061932-57c4-496d-b86d-c6c5fef75356", "sighting--bb359c57-5012-464a-87cd-7b423f7e6ad1", "sighting--ef7be8e9-9068-41ae-b8e5-6abbc58d776c", "sighting--95954989-2b53-4fc5-81bb-a4b0ac73a96c", "sighting--c8a93d45-f38a-45b8-b698-80aeb5e6736f", "sighting--ed51ac12-f835-4ed3-bd34-b33b56f0cc93", "sighting--7c63fb82-71ff-45e7-bcc4-1e1076361114", "sighting--fe41935d-95c9-4c48-93df-81f5445da64f", "sighting--d824443a-c2b1-4c50-a327-31ca1179276c", "sighting--12ded8f7-2c43-4a4e-a6f9-63acab75af72", "sighting--f9cca39e-ca79-4253-b4b0-a121c3ab3858", "sighting--e58261e2-1342-47db-9a1a-cc0d77446c01", "sighting--28bfed9b-9a22-4de9-a07f-ed4c4b8cfe4a", "sighting--0a7b0d58-c3f6-4e0f-8faa-7e199859cd78", "sighting--4602acb0-562a-4be8-8935-2ca3d5e893e2", "sighting--63abbe9f-bb6f-42b6-8bef-c6e58950f03e", "sighting--e544038c-6aac-4ab8-b3b9-ee7df1eccbb4", "sighting--b4467548-7f45-4420-97d4-a18a3fdafa63", "sighting--6d41cf90-366d-45c0-8a52-386412be34f0", "sighting--27377a38-bb7a-4670-984c-8e9a885abc58", "sighting--6dd22a1b-d7df-4732-a766-763520e5ff8c", "sighting--60cc6325-12c7-47d9-ae30-2e430e71fa74", "sighting--76806d39-14af-45e8-a197-4babc641c5ed", "sighting--8a231c86-4464-4422-88d6-6014f3882ebc", "sighting--b35d8269-4c8c-4a9e-a81c-f06952ca8a87", "sighting--bdaf8168-2b9f-466f-a0c3-621059e55722", "sighting--53c51b16-b59d-46ce-97c5-9169f51ae126", "sighting--dc7773c5-b795-47d5-9cc0-238efaa6074a", "sighting--d46c45e0-3170-43be-9370-ea08dca18432", "sighting--c484de85-fe89-445a-b085-1fdbef04de26", "sighting--f141309c-6d5b-48eb-afe3-05e78345aad0", "sighting--df6048e3-1f19-4987-af63-c0b42ac9ce06", "sighting--6f9986b5-216f-4c53-849a-cb429ba94923", "sighting--50e2669b-a34b-49ab-9f5f-adb5150e5167", "sighting--43030bde-a45d-4b3a-a9de-7698e7518e8a", "sighting--5123d6aa-14df-4965-a2ea-8f8e8137431e", "sighting--81677a83-33ec-4516-9206-92176750fe0e", "sighting--8d6fddff-6d45-4dce-87bd-025641dcba90", "sighting--3e22ac97-cb5f-471b-893c-bfcd60400c82", "sighting--b18a92df-f08b-4f76-85dd-ec7b9477c370", "sighting--b32edc54-d959-4ec9-89fb-cdcb000420c3", "sighting--ce379b08-08a5-46e4-8cdb-3b6574004cdb", "sighting--5d12f486-bc58-4021-8a9e-0282944c6a9b", "sighting--b47c4dd7-987f-4695-a203-a665a7e84ed4", "sighting--c8f53e1c-a891-4ff2-984c-061c39a5d4ae", "sighting--5d44e9f2-cbb0-40d7-8b6d-2b5787e2bade", "sighting--e8fb4a61-9d69-4812-a08d-0e53f5c7f576", "sighting--6e430682-7004-4560-95f5-0d5cf93f67bc", "sighting--ea02f43e-da2a-4d59-8960-3eec981b14d5", "sighting--ce82281d-69b0-4e5c-8e94-d6479f0cc213", "sighting--61bf001c-19e4-483e-a327-6d3a4f561854", "sighting--72634d3c-cedf-4fbb-a5c6-4288f8d35086", "sighting--e284ad35-8acb-4155-be24-f23389c2af70", "sighting--5a359606-2ed2-447b-9652-e2c4e1c83ec7", "sighting--57247f0e-b1ed-4840-847f-d4104ae5ad3f", "sighting--80a76587-b3b9-4c07-92d0-4e6a6890bf05", "sighting--bbdeef5d-dccb-463c-8c07-69b61e2869f1", "sighting--18a5645f-f4f2-4bd3-ac4a-36d32b4a9216", "sighting--b8529322-6398-4c0c-a70f-9e3f31567786", "sighting--8e9d9ee4-ffe1-401e-866d-34d0caf029c3", "sighting--a17e58fe-af8b-4deb-aa45-d17590924387", "sighting--507d6b60-74d2-4d0f-95c2-9282437e5966", "sighting--ec623372-27e5-4ca0-8578-7f7df79bafd6", "sighting--7c74f85a-eff8-4a21-9a38-1348f509b31e", "sighting--43a66a00-70a0-4750-b0a3-1a4a239cd707", "sighting--18b3c4a1-fd5e-42ea-9b9b-73593cef40d2", "sighting--be8e5e5f-b0f2-4417-913b-1804e2cb320d", "sighting--f880d459-0349-4945-baa4-9364a34f574e", "sighting--587110f0-276c-46a3-be19-a93fd81e7d7e", "sighting--69f1d87f-28e9-4493-ae9b-364f8a7ec18a", "sighting--432327e9-8bed-4f9e-be6a-115921cb0010", "sighting--2a2c823e-0b48-4b3a-8b30-5267aa70c9b0", "sighting--cb7281bd-50e9-454b-b460-1de3673edba0", "sighting--f9d781d9-93a5-4c5b-9409-1b9fcc5a048c", "sighting--13067e9f-6c8f-48be-bead-3e1fe51247d2", "sighting--68b72df7-459d-4850-a51e-54bdadc3284b", "sighting--3724d79b-3063-49f7-84e8-52a840f192a2", "sighting--88fdf7be-95e3-42cb-812c-e76de6e74c45", "sighting--096530cf-8488-4ba1-a456-941274f19a36", "sighting--b5290a07-3894-4d9d-bdf5-b2f1887b38fc", "sighting--3f33ff5d-9c0a-468e-abc8-092ae7c5c732", "sighting--dad1293e-de4b-4cce-bc83-6ed39d3a2cdf", "sighting--975cdea0-ac6f-4130-b417-b9688bb12c98", "sighting--451fb77d-0a7c-4f45-8804-b2e8a95c12cf", "sighting--3f0cfc0e-4ca6-4417-9de1-3eb8378c199f", "sighting--00770255-3367-4932-a4b8-e72a8fdde97b", "sighting--c3e10095-eae8-4abd-a4bb-6c97605e0172", "sighting--5e8020fa-0ad3-4a3c-9c73-22ce5850f0b2", "sighting--7ea5a0ef-1745-46ca-802b-f30eaad6e5e3", "sighting--811ba867-cc33-4c73-b497-19732e086d14", "sighting--f3767944-e73f-41c0-a3be-c48ac1c7fdeb", "sighting--0695c3a4-d3c9-455f-83b8-6cb209f80fb8", "sighting--c89ca255-e412-45f2-aad5-b44235e13c8a", "sighting--89bda657-df4c-4257-a9ac-84f2ea573a0e", "sighting--bd0cff86-9c42-4d7e-88a2-9b69d331e262", "sighting--bff63479-b5d7-4b96-98bd-176a890bd9d3", "sighting--001cd24d-e595-49f1-9315-6fdffff3a3cf", "sighting--071020e5-9890-426b-a25a-d854ee31d585", "sighting--615a6e38-1f29-4902-8674-58fc4473fa3e", "sighting--2d83c08c-84c4-4396-84bf-37ee71110200", "sighting--43ff5f2e-27e1-4a59-8b35-1ee9b8c54186", "sighting--54fb9133-f721-4cb2-bac7-d519675a3f8e", "sighting--719564a6-b7b2-488c-9ac6-1fff666d9c6c", "sighting--0d0a7bc6-c588-4a4c-b2b9-5979174fc6e3", "sighting--2c78b80c-c1b3-4733-b0e2-4b4f3d5b6649", "sighting--70483034-832a-4eae-9d5b-011b438f8116", "sighting--7b4d09f7-a775-478f-9553-30743713164f", "sighting--fa92c239-cc1c-4bae-95e0-30be30e9d242", "sighting--c5c961a4-bdb5-4edb-b984-2386060d5a78", "sighting--7e7f34bc-6d21-428f-98ed-5a4a27971402", "sighting--1be76829-9dc7-4e19-b64f-6cbb1541890b", "sighting--0394f8c7-0ee5-4b7e-8571-375d4f988e8c", "sighting--36a07d77-a4c9-402a-a861-00e35afb67f6", "sighting--b230c204-3471-4405-b6a4-9093685dfe39", "sighting--b9a0296d-8c75-4adb-b3d5-93ca25762b57", "sighting--a200992b-87df-4e4e-835b-9621c8b8349f", "sighting--b05df1dd-740d-4208-9aca-3f73630ef439", "sighting--59e91ab0-9fb7-42e9-97ec-f87273de46c8", "sighting--82df34c5-6384-412f-8246-fe4eb353d391", "sighting--cf6dcfc6-4acc-4422-8748-bf02ccdc0ba7", "sighting--a97ce4a4-b71c-44ac-9e73-992ad5974e0e", "sighting--df90f1b9-34b4-43b9-9df9-813e3548342a", "sighting--7fd207f0-ee5a-421f-8230-757c0fa82b3f", "sighting--b62d4468-9f68-4e32-a503-5fe41af7b70a", "sighting--c6e2a4dd-1a67-4bfe-8a78-423aa00817be", "sighting--4036abd7-8d77-484f-bf2a-9eb451d71a10", "sighting--27a0da02-5a6b-4290-a5cf-4b1defdcbda7", "sighting--9203319c-0f0e-4e4b-8c28-a1554ecc843e", "sighting--8bd8bb1c-24cc-4855-b5a9-ea70ae804870", "sighting--226eae91-6f20-479b-9c2e-1429b141625a", "sighting--0611f4bc-64f2-42de-9587-f15fedfc8094", "sighting--91af0f72-e2d7-4ce1-8de6-a52e7d453b55", "sighting--daeab6b0-610a-4a5c-8cd7-be0ba98eff7e", "sighting--e4fc9cdd-5b55-4854-8186-e66abce4e245", "sighting--befbea58-be2d-4528-a7c7-dee3787c2c37", "sighting--1889ea6a-fb72-4939-9658-e6dc7e6cac1a", "sighting--d88ce576-ebad-423c-a6db-2e33b6341f6d", "sighting--c8bf027e-e116-4c4c-8324-e588f839424c", "sighting--d889bfb6-be9c-4241-aada-cbc72b0631a3", "sighting--855da752-6283-4424-87b6-f3763b790fb4", "sighting--7d2cb78b-a376-4757-9cd8-ad819691161b", "sighting--1e2494c1-4b5c-41a0-98a1-8368f4c6e479", "sighting--c515e08e-0537-410e-858b-b30a9409f43d", "sighting--c3be4c26-a756-4029-89d4-40f0af52ba36", "sighting--dd510ab8-3f34-4f26-a885-163e2f7d6e8d", "sighting--281386ce-1d7a-4235-b619-6cdba3efdd95", "sighting--b0e1a39a-400e-4947-9273-dd8dd6d3cd5c", "sighting--36794d48-c2f6-469c-b6d3-040c99eda30a", "sighting--3dfb0786-d7c7-48d7-872b-63efb7904072", "sighting--8f4221df-28d9-41dd-943b-0cc88ec79b51", "sighting--94be1a4a-5b2c-4d5d-892c-7092f67b97b2", "sighting--f19ec848-eb0f-4547-a45b-3f9291985724", "sighting--5a400198-a2ed-4e0f-91c0-ef7400b5ab23", "sighting--28c8b976-edc9-4fd1-8e03-29d9973a63a8", "sighting--1d442c6b-813a-4ebf-9695-6fd5c3437be7", "sighting--21f31239-f7e8-4f05-aa08-39dc601bdae6", "sighting--d942bf76-5517-44c6-a240-d7ccbad56b9f", "sighting--0a1d6d5e-a291-46d3-a47e-0dbce1ea8318", "sighting--88fe6267-d789-49b1-9d15-4e3ea19cb45f", "sighting--4f546518-15d1-4066-bd53-4b3a468fcbc1", "sighting--db8fc803-3cea-4394-8255-0cbca8f118b9", "sighting--816b4197-6f32-438f-b68b-410892cfc313", "sighting--020b5a48-fbcb-4791-9a1c-4a0e091ed330", "sighting--3c51c1c0-0c1b-4097-b3bb-34368f852a39", "sighting--3f6883fe-2228-4e17-922b-226819e5c3b2", "sighting--0a903705-fa71-48f6-b62c-6f7b3f70ce85", "sighting--bb98abce-82ea-4b07-a0e8-209041297e16", "sighting--c7c83032-b8ad-4e5a-ae46-25f6e83abbce", "sighting--e22c9ea9-a0aa-4673-95a4-233d53432489", "sighting--ab3cdd95-8610-46a8-974f-9988b25079e6", "sighting--ad22fe37-84cd-49ba-ac3f-7ff96516f6df", "sighting--4db16169-efd0-420f-b440-66c13411c68c", "sighting--38459577-5d42-44f4-8880-3abc5a2a030a", "sighting--460e81bc-cf7e-4d2a-80a4-87f5ae729e2a", "sighting--fc150abb-8c5f-4636-b7d8-0bc7d641c6ef", "sighting--526ac877-c221-4f08-a279-4afde43d4f49", "sighting--de0eca45-39aa-4307-8309-3ffc39b91da0", "sighting--eee0a6a5-430a-4054-ac75-d8a76b50a23e", "sighting--4a3df5fb-618d-4807-a3a4-2b0ad66a8b56", "sighting--d0c3c7d1-0770-4105-9433-f2efa9b2d3b2", "sighting--73a1577e-dfe2-4777-91a2-476b775a1f2e", "sighting--4f5d8beb-a9ff-4cd8-bc5d-42a9dd6cf321", "sighting--2610ba74-f3b6-4c7c-a415-42ed9e576d10", "sighting--595be07e-4670-4b7e-8444-20f5de3f6aa1", "sighting--4d6b9e2a-abf9-4419-9127-a868f9c03ef7", "sighting--8515d490-3006-4119-971f-936943a65382", "sighting--4959afce-74fa-4576-9181-a0d562d952ed", "sighting--68594eb4-bf53-40c8-93c5-6ee66de6e29e", "sighting--19311940-3fdc-4250-80ba-ef9504b9a10a", "sighting--7aa25dcd-ede5-4bb3-85fc-9292692c80e3", "sighting--a995ab90-8740-46d8-990b-446eca115c64", "sighting--436ab96b-310a-45f4-939a-caab3b519345", "sighting--e6dd0923-082a-4f2e-b49b-60f41c285f47", "sighting--5deaab1f-f5d7-4e5b-87db-7153cba484d5", "sighting--dca5deea-131d-46eb-9b26-cb19d057ed4f", "sighting--ec19b6a4-3cd2-421f-bae4-18f32c0eed7d", "sighting--bf10116b-0e5d-40cb-bd8d-9e17a0114a53", "sighting--fd444c2b-7cd1-4825-865e-35d9e424188b", "sighting--def366f4-d49f-41af-b691-f0d2c2a1ab4a", "sighting--1f6435cd-af03-4ff5-8586-235cf4b95167", "sighting--7fb24189-30be-4394-9cb3-b9f1db8a736e", "sighting--db0dab8e-1c6f-402a-9cd3-0be3815d8a01", "sighting--627204ac-36fa-45f9-ad40-75ad96103629", "sighting--120fc22c-5e5a-4876-8e70-3258ac68c80a", "sighting--6946c82e-9a53-4166-9110-a233ac853061", "sighting--7948bad6-16e7-4596-8e2b-27c51d043d40", "sighting--1c171d31-1a0f-4a9e-861b-a4c268ba8c5c", "sighting--f026df98-583b-44ab-984c-84929a598cd6", "sighting--411083b9-105b-4ced-b2d2-5ee072187e97", "sighting--08e5a241-69ef-4d3a-b4fb-a8dfcd6803f6", "sighting--46179cbe-ec52-4e7b-a829-1ee13de2f211", "sighting--0cdbbe92-4cd3-4cb1-84da-ef7abb53e377", "sighting--2523d1eb-98ae-4136-ac31-da6d26a840c9", "sighting--e35df08c-96cb-4cb9-bc1b-2de5f98ed701", "sighting--a21b95e3-1604-4563-9c60-d239d1de2e33", "sighting--bf27295a-d3d1-404d-9f8e-377dc449ac86", "sighting--075b464e-6263-49b6-8fb5-45c496003a10", "sighting--2c55e879-af6b-4219-84a5-bfebaab6eb0c", "sighting--21da761f-04ed-4233-9f86-34233c2160a7", "sighting--1a9a50b2-8cbf-4e06-ac39-5354c876f071", "sighting--d77ec911-b039-4e9b-a40e-75663722e38c", "sighting--a8f6330f-6f0c-4d4e-a17d-f91f167bf5e4", "sighting--d43b73f0-185d-43eb-b987-87af0f500800", "sighting--4b0aa7d5-10e5-4c03-a463-80595cffa447", "sighting--cb048320-1a32-494b-9a09-538a0c04d805", "sighting--8e07be49-bb7c-4569-b3b8-0d8707356595", "sighting--0ea0a1ba-70f5-4e2d-9b9d-ec62aba4718a", "sighting--59209524-2406-42f5-b63f-f94356f98ee4", "sighting--426f0b71-9a86-4d47-8cd1-2b7050259beb", "sighting--96cc6f6f-6327-449c-bc68-b146a3b19f43", "sighting--270739d2-0d7d-488a-94d4-19e8737c4516", "sighting--cb37f492-555e-4056-83f5-b8708d01e2ba", "sighting--4a5f66e1-4bef-4e2b-b99d-1fdd58368189", "sighting--2500ea6a-62f1-4c2b-862e-895cc28ec8dc", "sighting--e17ffa36-c615-4d59-b58f-22691e1fb273", "sighting--adf2169d-bdd2-4501-a58f-7acd44641241", "sighting--33092f54-6289-4a19-b067-8ed2baddc822", "sighting--a7087d11-c015-4be1-9c3a-b394066fdedf", "sighting--8d758bc6-1396-44a7-ab15-a093912afe86", "sighting--4a594c91-ff39-423f-8719-54e823c94732", "sighting--27b1fd1a-5738-4715-8892-3e48ceaaab1e", "sighting--6ca4d2b3-dbed-4683-897c-9d89495352f2", "sighting--88d0b066-c7d2-445b-9327-78e8daef8932", "sighting--cedd133a-1182-48f3-8eab-9432bbc504cc", "sighting--cb8b3c99-f5b9-4f20-8b89-9e957ad8942d", "sighting--64a91857-4267-4464-8a6d-d9d79788bdea", "sighting--388fb6e2-2d26-4ef3-b3f3-4438743a6ff2", "sighting--76a9dd2d-ad8c-4e70-8798-abbf54592e54", "sighting--6002c63a-9810-4254-821a-787ae7b8529c", "sighting--3c810088-8e81-4f6b-a81b-166a9982123c", "sighting--3b65e056-57d7-4162-bb4b-221048eab619", "sighting--88147153-5539-476f-a0c0-982b93bbef2d", "sighting--8e1eee83-b195-44f2-ab20-d1e780ff4e01", "sighting--a27ffa88-756b-4cc5-ae66-a3afd29ab044", "sighting--5f9f80de-e975-4646-968e-0991a9a95c3a", "sighting--c51106ee-dfc2-432e-af48-5b7f3514ebf8", "sighting--e59499b7-79bb-482d-8801-4bc199cf8b3d", "sighting--e7822aec-eca9-4e78-98df-bb1734891004", "sighting--bc9cae48-69ec-4641-a385-1299f1d9a8d3", "sighting--99d1a5e6-6eaf-4da1-a121-570f5cec9a98", "sighting--0af020e5-fb83-4def-bef0-078b54c58df6", "sighting--c3f431c3-b08a-40de-b73c-790b5a17a104", "sighting--df668ffb-3f20-40c4-bffc-f00e5faf2ff0", "sighting--3e78ab5d-2ec8-4fdc-8977-b73eb2622fb0", "sighting--4232b1b8-f079-4aa7-8540-c003013e6670", "sighting--647aeaa1-90b4-43fc-b854-11c01c5f3255", "sighting--58c82569-c4e7-44e7-a95d-3d29a688d53b", "sighting--0623cea0-9c35-445c-adb7-a48531a0805a", "sighting--42d0ecfc-c608-495d-b319-2dabbe7be29a", "sighting--123e181c-0921-4100-b92c-b15e067d95ab", "sighting--4a2616ef-e10b-4372-b3de-4bc4d499fb04", "sighting--16780cc1-f544-4ac7-b37c-e7908a733ab7", "sighting--ef54df2e-0c58-4ba2-8760-e139e0d03577", "sighting--0a1a9576-79d1-4e46-9496-3463414d848d", "sighting--d47522e8-ebf2-46e7-b585-bdbad05e1712", "sighting--9808e9ea-73aa-41dc-a9c2-51ec49f0f0a8", "sighting--58af451c-5bb8-4541-ae50-6ef8d8990ff7", "sighting--a1603389-bf0e-402c-9244-87c91c313d21", "sighting--cbdad325-3767-4444-86ed-fdec0d76bf4d", "sighting--81f1440c-61ff-4422-8861-d0e8b1a14337", "sighting--d4a4b580-66b7-40c5-a641-0fb6c86adaca", "sighting--a0bd7e6f-566a-4562-9913-0f2503f7746c", "sighting--341c4aea-4d61-4ce7-a29f-9812b27d9675", "sighting--8965e6f7-e9a5-4dae-a412-f1e1009409ae", "sighting--4061759b-ab4b-43ae-97ba-1cf3368dba2c", "sighting--e1ae6f72-d28b-40d4-9e80-4219a2881a75", "sighting--ab94e758-3c0f-4e32-9ccb-a16fa867f213", "sighting--85818b74-b7d7-4d44-a09d-89647b6ef98b", "sighting--953570d5-c95b-44ae-be85-414cd0ab97af", "sighting--64020e3e-326e-4ca5-9116-9381b3aa157c", "sighting--cab0e694-bbcf-4979-be17-4cfa0df64afe", "sighting--f3ad7960-e406-40e2-b1bf-b65804f5c393", "sighting--a691f1ab-9733-4cb5-ba3d-94ae386db24a", "sighting--5f915d67-3b06-4fe8-af25-1231fd9b402e", "sighting--689667eb-3df1-4cbc-afa8-af4308dfee78", "sighting--facd9fc7-bb7b-4cca-b6d1-0f20cccd1800", "sighting--1ab22086-cf69-43b9-a9da-42e1b6d3b540", "sighting--272da92a-47ef-462e-b6fc-e23274919fc9", "sighting--b7961f16-7bc3-4ded-9b39-64b3fa2d0a24", "sighting--6d95c76d-e20d-4779-a662-89d2f8b9e6d3", "sighting--bbedc114-cea1-45bb-9e00-9e93a380e8f9", "sighting--909e6dd4-5f67-40dd-bb7a-e2707e0bd9e3", "sighting--a915e8d8-1855-4d3a-937f-c7abacdf6c2f", "sighting--1ededc73-753d-4d59-a6b1-b9d7c7676329", "sighting--3ee0f53a-cf4d-4db9-91e4-c2da8e511099", "sighting--6d8d2637-b210-441e-ad39-956099e30f99", "sighting--817056c7-afa3-4ebb-94f2-f71e1ee04e7a", "sighting--68802a4b-0ba1-4929-aec8-7d903b611491", "sighting--6cde4b34-27f2-46d8-9ff2-fce38edc89ae", "sighting--eca5f8a0-f2c0-4ded-9810-278f7730edeb", "sighting--9f05ebfc-4cc4-49be-87c2-39a0de781104", "sighting--4bf80470-8872-46af-9478-e37004c87908", "sighting--89a80af7-7dea-4b12-91bb-a195d3262714", "sighting--0fe05da1-dc35-4e48-af01-cca8beceed27", "sighting--194ebf3e-f3ea-4080-a3c1-f29dc425adb9", "sighting--35928827-de4e-4111-a50b-a2621750588a", "sighting--2f1ddf07-ebee-4979-86c3-741c607d9675", "sighting--fe3f2e91-1bd3-4d76-8fb8-13e781c60997", "sighting--6f05d543-66a1-4a35-b50f-b5ce3dbecf65", "sighting--b168a2fd-4336-4adf-8ec4-5e37928ab19a", "sighting--3f790bf0-5c85-463c-a1da-1a8f1300097e", "sighting--65018ee5-98d4-4c66-a5ba-f5ee3aefbaa4", "sighting--dd862e06-c365-4f5b-b752-6748de0adcb6", "sighting--6c49938f-3129-4a67-92d0-94ae71861b3c", "sighting--d7cba8e2-98a4-49e2-b7cb-ff28722121e8", "sighting--106349f4-bc42-4e86-8d8e-6d64e1789b39", "sighting--07e1cef7-e9ab-4baf-a84e-a1bd60acf325", "sighting--fcfb3dcf-60e7-4cd0-be11-a43b4369c8d9", "sighting--3b437ebb-30e5-4e0f-aee0-bf7c668503ea", "sighting--1d58cd31-d0b5-4a4e-be4e-224a4c31af66", "sighting--614bf879-5f80-4229-9364-a9d258f48cf8", "sighting--b5d42405-38aa-42ec-a7b3-5cb6c8c5e13c", "sighting--0eccda90-12ee-46f5-b9c5-7d6a2a89cb66", "sighting--d319c5e8-fbed-415b-83ba-649e803ce4d9", "sighting--7ea51865-16f1-4fd7-b292-e37651606d32", "sighting--a9fc3115-fb92-456f-9898-ae3b21255fa6", "sighting--2e99e80d-2496-4ad0-8b44-f0ea74baedba", "sighting--dde3c9ea-a997-403a-98dd-69ed8e156367", "sighting--d0228066-e6a8-4ca6-b83d-cce41f2510cb", "sighting--8cbeb383-fd4b-44e8-9b33-c2bdc35d84e4", "sighting--5fc87d3e-d16d-4fd5-ad07-85c315c72c75", "sighting--3a718875-c859-4c7e-ab17-fb58e22a8339", "sighting--984f9a5a-abdc-4367-9973-9e084951e776", "sighting--a6bcaf2d-faf8-475c-ae9d-af31f2aa1655", "sighting--442422cd-fdc5-4d93-8cee-d75cd23bfa36", "sighting--56a5b929-52eb-4794-a0e9-6ae5a51ba4da", "sighting--e5d97010-b192-484a-b72b-f3fd60653b2b", "sighting--6cd63a45-f28c-42ce-852e-12106f810ba6", "sighting--38bb7f66-6002-4404-9564-7fc1919b5de0", "sighting--4ecfda83-50d2-4c30-bcab-c3fd8b791b5b", "sighting--e566594d-55e4-4cc1-acfa-ab8504e31d3a", "sighting--17deb526-55a8-42de-989e-0d187bedd3d3", "sighting--d1442b99-62f3-44b8-bf64-12d8687308b6", "sighting--bdd714ea-f1c4-4371-be30-a25bad73969b", "sighting--13a1d804-cb5f-43e8-9fcf-3e045d60296e", "sighting--6b9efcb5-d9a7-47ea-8542-c544bc671c51", "sighting--988ac3e1-f491-4a85-9db7-27ca29f56947", "sighting--f911b86e-6426-45e8-b361-882e20578ac9", "sighting--31545b7a-0a7b-4d8a-9c8d-9cdd53644797", "sighting--207b1ed6-73a6-48ee-a421-71762761adb1", "sighting--6ef12f0b-b59c-497a-b025-4f705c35ea91", "sighting--7799514a-167c-4435-a6ab-c19506df60db", "sighting--26279e65-53bd-48f8-91f1-7701c90c0147", "sighting--72f734a0-346b-4b23-959b-fe8a32837f29", "sighting--9416f53c-d0d3-4b15-9858-c0eb93fee694", "sighting--5537e2d5-ce71-416d-9412-43e7b960b5d5", "sighting--ff92e30e-2b57-4410-999e-095750a4a335", "sighting--5467578c-2cb7-44f1-86b8-860bd6f280f4", "sighting--ad041209-eda2-4dec-9100-8072de0b008d", "sighting--1c33135d-c406-4e12-b618-fe6007d92a05", "sighting--70587fd3-7054-4655-84f8-58026cf2f57e", "sighting--fa0823a0-f31e-47be-80d7-134128970449", "sighting--3075e5e7-6639-4283-b60a-5ac31f29cf14", "sighting--7e351157-36e9-44c5-9e68-10f57cf1eca8", "sighting--1f6f78fb-900c-42f0-b516-c843c475f541", "sighting--531522c1-29c1-4929-963d-5f8bb37900ec", "sighting--57f4efd7-a266-4642-84eb-6b8bb2177175", "sighting--e0a4bbe0-1d89-40f6-9680-e02bf40c7adc", "sighting--7cc78ec8-dcc4-4eaf-bc8e-d5aea78357f1", "sighting--990ecfda-507e-4eeb-83d7-863e7eb48648", "sighting--63a10a39-950d-45d6-8927-302a45e73e9a", "sighting--662eebf8-f98b-4977-acb0-aba8fc45af38", "sighting--978f2a5c-3aff-4bef-b52c-1b2bff2d0660", "sighting--447d553e-3627-451b-9453-48e9521596f3", "sighting--585034fa-0a19-4899-94cd-d4589bcf341d", "sighting--eac8fda6-0b30-4343-abf5-faf461f85afc", "sighting--bb25d87b-1e02-49c2-ad9c-13de40bb75f3", "sighting--0f5116dc-e28b-421a-9dd0-87c1fff8b665", "sighting--64d8c366-7242-465d-8fad-581985fb415a", "sighting--b6ea4e2e-4789-470c-b65d-54e7f97102d3", "sighting--033fcfcc-4085-4f16-bd1f-3fa3eabeba57", "sighting--d1088d35-12d4-4da9-adc0-8b243eef4935", "sighting--158d7cbd-2620-43a6-bb5e-9a3b5e3935f0", "sighting--3b5792d6-7803-4678-938a-e4ecb958e4f0", "sighting--615ec117-1a95-4f2b-9d37-f66b023ee93a", "sighting--809824ad-fcbd-459d-86ef-1fe046c19dc4", "sighting--74316446-c274-4a53-96b4-a6def926d4b3", "sighting--a3d21094-cdd0-42b9-9ecc-fe45571b7535", "sighting--211e513c-1b09-4900-bccc-6e16dc16fe82", "sighting--0c7af5bd-0ea6-4a88-a522-17c7d1c4dd03", "sighting--a60d2599-db42-42e5-8f54-f663e5bc28f0", "sighting--bacb9df6-8641-450c-b8b5-766cf145479b", "sighting--17799fbd-ee6d-4af1-a276-7265c26468e6", "sighting--6f413dad-ce7e-426d-974f-c94358e5ae26", "sighting--2fb135c5-a714-4d26-bfe4-5536bc833d94", "sighting--0b8c88fb-e1b0-4ec2-b865-7c721840d665", "sighting--8d39784c-cf5e-470b-8e31-4195c400311a", "sighting--7f932f0c-a56e-4536-8051-7c681dc561ea", "sighting--b1cf0736-44a9-45b4-9ff3-281a79a065c2", "sighting--b4260e74-1235-483e-9737-015db778fc09", "sighting--6cf3c23c-b1b6-4b08-8873-c7b15b991785", "sighting--6ddf349d-3f6f-4404-be43-859bc21609b4", "sighting--b3751fa7-832c-41bf-bbfc-cbe216b292cd", "sighting--cd43eaf5-e20e-420d-b5ed-6acd7bad7705", "sighting--f60b30c4-efff-4ad8-bb4d-df20ba832a8c", "sighting--38c66031-9da6-4eb5-bb4b-c86ea28b8e8a", "sighting--04037245-8d0b-467f-a4e3-e9fb3d3a0e35", "sighting--03ce31eb-27ac-492c-af0e-3b1c0d360546", "sighting--764c65a2-a7f9-45ea-ba64-ee846bc7a364", "sighting--e0cd3605-ca08-4f92-8817-fb5062840cb0", "sighting--13c06cb0-103b-4208-98e3-772ab9772bcf", "sighting--8ff4467c-16d6-49cc-833c-2b96d6704876", "sighting--2fbd413f-8ab0-4bdf-ae62-f02149ab7206", "sighting--9f0a8d86-bcab-4574-82ef-fb6e46817603", "sighting--fdd291d6-1e81-4c53-921a-5c548dd4edcf", "sighting--63dc071a-c91c-47b1-8aa5-f9006289fae5", "sighting--595bd8d1-7689-4290-93f6-03097d89ab36", "sighting--98afdd60-e00b-4046-8269-ee0c56899fb5", "sighting--ef6c40de-a7d0-41f9-8959-3ed22bdf5797", "sighting--9a23a76b-ff30-4499-a6e4-545be00cf446", "sighting--843dac8b-ed66-40ab-afa0-bde162b486b8", "sighting--2b77cbbb-74d4-4d51-ac76-569798df44dd", "sighting--b8a74148-5aed-4f85-bb58-cd29a6494f51", "sighting--f53c0509-09a5-4b3b-aaf1-acafab49ccc8", "sighting--87e181f1-075c-474b-91a9-0f344072afd1", "sighting--94120bd7-f8b6-4eae-a1f8-dc867aa42e36", "sighting--584b2f99-9504-4b79-8955-d5c898960d47", "sighting--cf2f770f-0ce7-40b8-9f4d-7441a02e2267", "sighting--4391d314-95c5-41d0-b05d-730799edcbb8", "sighting--24e5832f-6cf7-4bc8-b105-bde76dc9d34d", "sighting--f49510ee-919e-4688-91f8-d09b64e455d8", "sighting--b806d2f3-4378-4c16-b4da-5033016fb01a", "sighting--fbbbe3b1-1258-4334-b091-2373dfe518c4", "sighting--d468dd63-9d20-444a-9681-5e65757cd12f", "sighting--f8d2b99d-6f7a-44e8-9b9a-34bcd4893418", "sighting--b2bc4dd5-9893-4818-bdb4-e3043de1b7ae", "sighting--a15d7dc1-6b6b-4155-9b22-f46e9b90505f", "sighting--0d0af4ed-af24-4892-a7e6-c742d7355ccd", "sighting--c050a9d6-e8bd-40bf-bc93-72126f75878c", "sighting--1347baca-70a1-4f92-a3a2-e34f789c22dd", "sighting--1c152dab-c2a9-4341-bfc8-9e8e1984f678", "sighting--e58597ca-a507-41e6-a1d8-fa472942a95e", "sighting--bfdac231-6034-418f-81cc-8d5a826e8840", "sighting--c8cc2edc-601e-4749-a08d-71837997b721", "sighting--427aa91c-48f8-4834-b21e-19aef6e1a17a", "sighting--ab4c4756-69de-4358-b3d6-ed11bf7634fc", "sighting--b27273ac-373a-4d9b-ba7e-5f26cc3dfcb5", "sighting--5eb46d20-36bd-480d-a4a0-15d9ade6fb5f", "sighting--d7868f27-d34e-4304-9781-4ae7724103c6", "sighting--3e7c4c67-8f0d-4e07-a111-ea6004950950", "sighting--2c9acdf8-77bb-43f4-aa9a-916ea21ae65a", "sighting--51837e13-135f-4872-bec8-08b6a3d280c3", "sighting--19355b3d-d86f-4e4a-940e-6376f4be004d", "sighting--e2358bd4-5b11-48cc-91a3-c521bc8427a4", "sighting--57b656bb-72f4-4456-96ae-7fa4ce15b390", "sighting--86a37448-571c-4a31-978c-1f34ccdf5064", "sighting--141486c2-1a21-4355-8d6f-ae118afbfb2c", "sighting--1a4796d4-908e-4126-959d-3bac229d1c7d", "sighting--f6a115d3-ed98-482a-9875-09b6c804f0e0", "sighting--1660177e-7774-406c-81e9-cf9ffde264a7", "sighting--89a0f263-c8e4-48c6-aac3-ea2ed962520f", "sighting--322fdd97-7f88-4734-8138-de66b61d5181", "sighting--68e0c3b8-03ab-4826-b624-764beb949cd4", "sighting--eef7cba2-b0c8-4259-9317-c270b2ed9275", "sighting--b13503d1-2dce-490b-88c5-405ed47d36dd", "sighting--41b50c2e-194c-4915-a87d-ff453e7f937b", "sighting--a2ba19c4-cd24-4202-9a62-68ad592b45ba", "sighting--1edcf3e8-bc79-4a60-8181-7a7329051409", "sighting--d8c6db15-d493-4db1-b492-eadc3b7c3b27", "sighting--d0828c8a-6805-43c4-8a84-58f19e5d7225", "sighting--08885c15-1862-4dcd-a78d-e4c4ee511f37", "sighting--cc36fd08-6f08-4239-b4d8-5e521f9c529e", "sighting--105dee3a-0646-45ed-a6b6-03d3be0d16a4", "sighting--68ce803a-687c-46c9-a002-604ef44c31ab", "sighting--1cf85449-f7a4-44c7-8cfe-d22b0ff330cc", "sighting--efca3b09-426c-4d53-8ec6-bf5ca52c0501", "sighting--b268e97d-f241-4a2c-b7a1-065a5f484a8e", "sighting--2e5adaa9-4056-4ddb-aefe-ef991d951c82", "sighting--3c9086cf-c0be-4944-8d55-1980da305ef5", "sighting--2769373b-be20-4cf3-8a78-d4acbf175d7c", "sighting--c738f99e-6fb6-4042-bf77-747e90b2c287", "sighting--17001c03-5366-461e-b24a-1e824678fa8d", "sighting--db39fc36-dfb6-4823-a168-c9f1ad691a07", "sighting--7b6f4b87-f36a-435a-be9e-ea252cbecf1d", "sighting--e555e6be-fec6-4610-a049-7ff0aaad9bb5", "sighting--adecc9da-050a-4c21-9df3-a7191abb17ed", "sighting--4acfe201-c0af-4ec6-8658-1424e2b945ea", "sighting--f47a864c-0ebf-485d-9993-bf5109d9ca89", "sighting--5ab363a2-51f2-4f6f-a3b6-251cc9bad567", "sighting--aeaf1574-472f-43bf-9784-8dee133dac12", "sighting--28dcc024-2a3f-4c3a-b457-cb12c41eac17", "sighting--a1cf1af9-f01b-4a06-98c9-9a5ecf6eb581", "sighting--75158fc6-5ed8-4164-8736-7e48e52b4fec", "sighting--87853918-5add-42ee-a1db-f2368ca25636", "sighting--84dd29fd-e6e4-400e-883b-2782d3a1d6d8", "sighting--fb03f1fb-f1a8-4419-8e9c-69f02f6cefa4", "sighting--5ba8865f-b15c-41c3-af1b-c74301538b69", "sighting--487f042f-6cc9-42ab-97b9-e74dbf9dd56b", "sighting--41b1cdd1-f767-4bf8-8ab2-193542e44c5b", "sighting--3c9ad224-1713-424c-8c57-a2618419b6a2", "sighting--5807c7b4-fed0-493f-93ec-17a0883a1002", "sighting--ffbd1b6e-04a6-472f-8607-4d088072b65b", "sighting--f876d4e5-1e48-4b10-8152-f0dcf77dccd9", "sighting--ddb61b20-3a95-48f7-9b30-a4271922a40e", "sighting--5eadda4b-49eb-4cae-b465-eea4aa3bd64f", "sighting--73616a21-6a6e-4e1f-a13e-e78ed414448f", "sighting--28d8c5dd-fb1c-4f62-93cb-c08dc1719f24", "sighting--1e6a28bc-92a3-4d3b-8457-3c6c8d48ec5d", "sighting--daafac7c-6d81-42d8-bc67-1b6c1287eea9", "sighting--561d4724-b3b6-4656-a267-fe6b5e43989c", "sighting--9b3a865e-8a61-4611-8458-ec4205c5e6f6", "sighting--9c0a435d-d360-4e11-8114-e53db125a0ed", "sighting--d21db85b-5f7f-4adc-81f1-e314a764b66c", "sighting--359f304e-af9c-4ffd-9b9a-ebb9c7a4c2e5", "sighting--cd53c995-27db-49e2-a18b-08f631a5de5c", "sighting--5950c125-74c1-4930-8a3b-95691f5d1dfa", "sighting--85ebfdd1-7f98-4d80-b62f-91a1e24a1420", "sighting--3a4176f2-7203-4b05-9427-f0b0852671da", "sighting--f4136e73-ff91-44f6-8326-b183f4859c34", "sighting--8cc15be1-1c2e-46ec-afcf-e78316d57569", "sighting--bf842d4d-971a-4b86-a292-a79dd65746e0", "sighting--83f1569c-0371-4ee0-8abe-1a1d2a2b54c1", "sighting--b0830973-56c5-43c1-9787-90ae6998282d", "sighting--942b722b-a34d-4819-9ca0-0862858b2549", "sighting--5c472871-257f-4cff-8550-819ff04c3acb", "sighting--58358e02-9ce6-4a64-8a8c-fce4192ef130", "sighting--e4d16d16-0ee2-46e8-8b49-860b3b8430a4", "sighting--0ade0b2e-dd76-4f43-8117-cc0039e173ae", "sighting--d77a2e9c-771a-4e85-a7d1-0f406eb6480c", "sighting--adde26d9-5cf1-4825-af40-a11354e2311e", "sighting--4367a8ab-234a-48bb-924a-37e5251696c4", "sighting--500288d9-076d-4e4f-bb62-89001d168f30", "sighting--dca1756f-6d1e-463b-b5f8-ce1eec526e2c", "sighting--97882055-6f94-435c-8c6b-e0205c150017", "sighting--7c27ec89-92d8-44d3-837d-baa5ec6121f2", "sighting--83741480-5dee-444c-998d-810c0ce05169", "sighting--48558960-f6f0-4727-88a9-39f0d3b0d3e6", "sighting--f91a76d2-c780-4159-a37c-6623136c42a7", "sighting--821db840-dff2-4df8-9136-154071b3bf8b", "sighting--3dd2d314-2872-4c8d-8e2c-50dab4bbf11d", "sighting--a9f9b368-b064-4d11-85e7-3a94342663f2", "sighting--a9a0444a-d95d-4452-a23e-7206447d534b", "sighting--03f6245c-1748-41e4-8d08-b66a76b4b984", "sighting--c79d7d84-d748-4b24-8ae8-984e821d7044", "sighting--54d71051-f958-4e75-ad74-e90257ffa8db", "sighting--be40e308-99fe-49d4-9735-fa45aee2d670", "sighting--32ad1cfa-6d67-4b42-a447-aff7e98d612a", "sighting--8bdb9cfd-4d2f-41ee-b253-bdb590c7b260", "sighting--8a327994-99d6-4768-b55d-30e8a1e6ff8d", "sighting--379977e5-fcdf-4c51-b398-d41c84159782", "sighting--04592d7b-e494-456b-a2c6-c6735577a245", "sighting--ceffbd33-0ea7-406a-bb04-f33191747dea", "sighting--f87b6fda-b503-4473-837e-da7bc50e4c09", "sighting--b24123dd-c87f-42b5-80bf-a64037e588c3", "sighting--39e3fc51-0c27-4983-bb01-8df44c059c2e", "sighting--ed88c1ea-6d73-4f0d-bad0-14e6e854350c", "sighting--d99122bf-1fbb-4730-86ac-a054561a5cb2", "sighting--5aa27a90-c9bb-44e3-abb8-7bc1d4b6ebf1", "sighting--84d2593e-dd70-4a3d-9ff1-d8a4d571ffab", "sighting--35254647-f6cd-4186-a381-76d524791543", "sighting--62dc96b3-3850-42ce-b027-619f4b171ce5", "sighting--67ce6517-1140-47c4-85a0-6033ef32e296", "sighting--de124a83-e2c0-413a-88e9-51ee1e909739", "sighting--fc971c21-4095-4849-a15a-6f6e1016f9c4", "sighting--645d4d60-cf9f-4f81-b56d-666d0e19cb7d", "sighting--cc75b76e-05ad-4357-8b58-b7ba0f9fcb1c", "sighting--a58ac6ee-97a4-485b-979e-5872470be725", "sighting--d5ce537b-60b3-41d7-8e78-34d7662619cf", "sighting--df18d186-0d36-4ebf-bf3a-d900d943427d", "sighting--8dd706e1-c991-4bfe-b6e2-020da90da7a6", "sighting--82d60d05-c749-4e8c-83fc-6205ec3b1b2b", "sighting--3342b25f-dfee-44a1-90fd-db242701e2dd", "sighting--d9d8dd6a-b797-40e9-80bf-19e39e44716b", "sighting--d4a308f4-4ed2-4fc5-9133-30d578bd56fc", "sighting--2a5e07dd-35ec-4ec7-a92d-3eddf5fa9ded", "sighting--7d762f90-2116-4127-89f6-3e259a08ae28", "sighting--e7dc7591-d302-45e4-83a3-b8332a52ea05", "sighting--5c3af244-2105-4160-97d2-0c373b008680", "sighting--d397e39b-4f1f-45b1-885e-b0e2923736f7", "sighting--111a4272-3aa6-454c-9039-c314678d5277", "sighting--84d7a631-aee0-4c1d-91ca-2c225e27c42c", "sighting--b6bf9cd0-3cef-4e3d-92a1-7a33569a1eda", "sighting--5feb8876-97fb-4895-b9f5-69d081abaa2b", "sighting--8a702225-ff17-4792-a838-44ac1c3d8347", "sighting--c000c352-4dbd-4223-998b-c21444fdfd34", "sighting--cabce289-0a4d-4ad4-bbd3-00b29c39b097", "sighting--475e7ea3-bab6-410e-ab42-cc921aae8544", "sighting--3c4976e8-a9c2-43ab-95fc-a7c07c6fcff9", "sighting--8e8b03f7-6fe9-44fc-9740-a4c74cf0b600", "sighting--6c754952-73bb-4d21-b20e-ee203d39deff", "sighting--00e67606-da94-4686-b83e-eca357ae82a6", "sighting--dcf9a029-1e42-43f3-9844-b730914dc219", "sighting--ee9dd64e-9293-4206-98a0-9942ba76f829", "sighting--5f5f2071-f5a5-42a2-a6f3-4cdf2de737bf", "sighting--2d97fbde-4eec-4154-a31c-2abfcee3523e", "sighting--eef72f9d-5a2d-40aa-86b2-b7c239b9a78b", "sighting--99f12ce1-9883-40a3-887a-5b122c547a20", "sighting--9bca0de1-15db-40fa-a057-3a222401bdb0", "sighting--10d19aad-05dd-487a-83ef-3a637fcf7d9c", "sighting--06233183-3fce-4fbc-9815-0f554c523e37", "sighting--dd15428d-d52e-4eb0-994b-61b9889ffe78", "sighting--92f7db15-ca4a-4455-ab43-490ad4b4c33e", "sighting--2095ce23-2a4a-460f-ae35-c1f833ca5df9", "sighting--3bd8201d-f4f5-4528-93e4-0fcb056cc892", "sighting--9b70b2c1-847c-4735-bfa4-1a14d0c3b53a", "sighting--e483e0c1-2671-4502-a5d3-61bdebc75e69", "sighting--090335f7-c356-4956-917a-0c2bc1927c96", "sighting--8cd71f1b-1c8b-4582-ac33-9b1d15bf5f3d", "sighting--1243ae1e-d738-478c-9168-92e53a408050", "sighting--1da36a09-791a-44e1-82ef-fc59eeb3ac65", "sighting--0812910d-4fe6-487e-94d0-96753b2b4a93", "sighting--59d78958-27d8-469f-9a55-a8cf5dbf4bf4", "sighting--ed3d66c3-97cf-4ac3-b944-81b001a6b03e", "sighting--08257152-f58e-455b-a664-cfe806fee705", "sighting--2ca151e4-438c-436d-b65b-6c53857c4203", "sighting--2adf1d1f-7f0c-48c8-8e31-86faa7ce4a41", "sighting--f711f6b1-c8ac-4bbb-ad5f-95644e50e106", "sighting--663d607a-376b-41b5-bc02-ae26efc1fba5", "sighting--6fb7ec6f-e67f-4918-82cc-e07bb64f0e5b", "sighting--6b9d272b-a616-4cf3-839c-3b0ad8ddd1fa", "sighting--a9315117-7279-4368-a1a8-9ad5a9c107ac", "sighting--fc20d26f-d7b6-47e3-9269-ebfc1f74a975", "sighting--3003b6d0-549c-42be-ab77-630b12e31f35", "sighting--47d119d2-362b-496f-91f6-3883977f8974", "sighting--dc54af63-4916-448b-84a4-d2f564e97765", "sighting--2ea59b78-7e77-4c20-9709-eff64fa7fe9e", "sighting--99cf50bb-167f-4433-b271-a989efe1ab81", "sighting--a570d85f-5cb8-41ed-a35a-083467a47dee", "sighting--128f9408-e33d-409d-93d9-b66cc395802b", "sighting--886f65cd-7bd1-4eca-a8e3-4084cf2a0db6", "sighting--721ff0c8-8b45-4f75-b486-92a75b93454d", "sighting--07d217e2-1e2c-4544-baa2-f16d2fa57e53", "sighting--97800028-9011-450a-8566-5c339c98de35", "sighting--68280a84-640c-4cc4-b414-840839e74d6f", "sighting--fbe9c046-3c9b-4203-930c-f341b56449bd", "sighting--e45310db-90bf-4440-b848-ea9aff6f84d6", "sighting--7e5feae3-fc64-48f5-9568-410da877efaa", "sighting--2ee09c0c-7b44-4cc2-b6fa-396830b1e2dc", "sighting--499aa557-bf11-478a-8547-522b981cbc6b", "sighting--5e9318d3-4399-4493-a64c-a30f531ccf9f", "sighting--34403e8f-628f-4d37-a913-1e53131690c8", "sighting--059e97c8-e3b8-48c0-bc06-d3018974fc61", "sighting--599faefa-4c70-49d1-9231-beb23d93140e", "sighting--8fdd76c0-2df2-490d-9ddb-b03ea15ff01e", "sighting--c50dbb8a-1364-451f-9dff-b844e93d3338", "sighting--7646356d-dc66-4ae2-8d70-e3d5eac1defe", "sighting--7ed0f6f7-41f6-4537-b7d2-4844779d35ed", "sighting--7cf0eb2f-3f48-4ea8-a0f7-3f5ff0bd4f77", "sighting--a5909dee-06e0-4d9a-bfa7-89e0d96e010d", "sighting--c94c8a6a-879f-410d-b02a-05aa762323b7", "sighting--193b1751-8a7b-42ff-be51-1a81e8c12195", "sighting--b9417e6a-360c-48d3-a528-a8286e8622be", "sighting--6ab4c455-1efd-46a3-a00b-0f64544e7007", "sighting--de58d650-869f-4a63-b416-374510d8a35b", "sighting--3fbc0c33-5d2a-475f-b8fd-ef2d3453922f", "sighting--82715183-7c1f-4dee-9e54-3f57c35276f9", "sighting--d7189842-5c36-40b8-97e0-e9a31f7c5e8a", "sighting--63e504cc-4988-406f-9a7c-5ab10725a0db", "sighting--386d8781-a4a5-416b-9e37-8f1885d387a9", "sighting--cf6c30dc-a2f4-4ae4-b07e-72a48e2fb957", "sighting--ac9eca30-9b32-4b17-ac85-0e2e1e959a35", "sighting--145d1140-d906-4c40-8bb0-5617d58ba33d", "sighting--952e2214-1d08-45cd-916a-4c26f1a81985", "sighting--02563209-c0d0-4721-ad43-a8fac069946a", "sighting--8df55df5-d83b-404c-bdec-b4a9b3030528", "sighting--82a4afe3-80e5-45b9-b0f2-ffd82609953c", "sighting--14922f0e-89b2-4fb8-8da9-19034d5cf2ba", "sighting--2a4bb84b-4547-4d8e-ba2b-d8c04e96d5ae", "sighting--5019c044-8cbc-4d69-8a4d-ee71a13c0afb", "sighting--0433a542-1f4d-4082-a65d-1fcf139a7e0e", "sighting--afb4e499-bdef-4ee0-acd9-5a3491513c32", "sighting--4b678bc9-2609-48cf-9791-d48521662b52", "sighting--2a25803e-50db-48af-baa1-49263917d063", "sighting--fe354ad8-5b54-4ab5-8c79-368e25ab8894", "sighting--bab1ab48-a871-42f4-b7ea-2002438005a0", "sighting--76d06d59-47b6-41be-af25-494e5077403f", "sighting--7f86c890-f670-4d20-90dd-edbb279a3187", "sighting--e19164df-30eb-40ea-91dd-23e8fb75fbd4", "sighting--911afdf7-d697-4bf8-a72e-c2755d65a2de", "sighting--07a25d12-9be4-4787-9ebb-fc1c3fadc1aa", "sighting--1fb5dee6-8699-42a5-98e5-fedd3dae9531", "sighting--3f54fcb9-be02-49e6-8d89-e0b5b5e11b5f", "sighting--21f70779-709d-45e3-8101-f19861c7fce6", "sighting--10da77f9-16b2-4c5a-be4c-b7ce8bb62fc3", "sighting--f32fdc15-8bef-4ca2-b89d-b0b586d496df", "sighting--8b1dc200-2ba5-40df-9d9d-6b52631e345c", "sighting--7e98945e-306c-42f0-9c00-d36596178dab", "sighting--fc32d450-67ef-49a9-9f8b-8043bb79c623", "sighting--41c63bc5-eb90-424d-9701-c926084bc9ed", "sighting--d5f17b17-5e1b-4590-bc5b-ee9d5903e93b", "sighting--d2c89e3b-81ff-4b65-8e53-a8b12926528c", "sighting--c4b69cf4-63e1-4323-a518-6ecd47b9ba69", "sighting--570a86c4-7acb-4d4a-9cf4-b6510a910241", "sighting--8f6c47c6-6738-4645-93bb-30dcfebef5cf", "sighting--dec31480-2a83-4bd3-9181-863e5111f72a", "sighting--2f81f051-d6ed-4366-841d-aaaec5832ec9", "sighting--b34306fc-f686-4db8-86e9-0cec66015228", "sighting--ecf67394-5eb4-427d-bba0-76c82406c688", "sighting--24109e45-b6f4-4c60-809a-9e4695452940", "sighting--87c7b920-17b4-426f-a01f-6f6ebc52a6f7", "sighting--113c08df-a2a1-4815-92e7-f91bf1d9b46b", "sighting--4c163e63-1218-4a1c-90ec-c0bdb31d1b10", "sighting--c3fee8cc-bee5-4afc-9e8b-99937df97ecb", "sighting--3aefade4-4bc5-4563-8bc0-473b922e78ed", "sighting--b58fd8e2-24e0-406d-9bb5-01d992799026", "sighting--1a5a0972-2b47-42e9-adac-11101e5a1a17", "sighting--931f93b6-5ab5-44fd-9ae1-c6872a57a456", "sighting--cc53605a-7a26-408b-bbaa-22140d3f4419", "sighting--66a8ef6b-711b-4c09-9ee1-0d2c0ae732a8", "sighting--85525254-991a-4c64-af83-c77844dda878", "sighting--dace4e90-5698-43fb-b24f-55443067244b", "sighting--98554786-2e29-4eee-9029-dca40f807fd6", "sighting--cea3ca50-f264-4a95-9901-0d7c7430e8fd", "sighting--b9dc5dbb-e4ab-4457-9b1b-25a55145dc09", "sighting--1b855d0b-7a3f-4ea1-bdb8-dcff93f57ad8", "sighting--8da7d611-e3d2-4c43-a002-718dc2e0bbf5", "sighting--2c9d6c27-4f17-4f04-8a17-41bca7876af4", "sighting--b9664a0c-77a9-457b-9d4e-cc4e44d03f7f", "sighting--e21c210f-d4cf-4d95-8aeb-03438f836641", "sighting--eba4f928-6a1d-4c19-9e3f-3801bc68152a", "sighting--a3531687-e9e4-4b75-9f8e-bbe27b628069", "sighting--150edf84-b57d-4dd9-8458-119c9dba72b7", "sighting--58af38cb-14d4-45c0-b04d-fa3bd639acca", "sighting--412c8df6-81db-4e8f-af65-1e724740ee07", "sighting--8914b4aa-7d86-4784-b4d2-2d292c92b596", "sighting--ecd1744c-efd9-4791-9147-e1296109e0e0", "sighting--f3dd9a5e-7b60-4982-8bf3-7e7bf374dab7", "sighting--c55e53b7-b175-4efe-806c-c1c6f35b939a", "sighting--acd09d32-91ce-4ad3-b717-458c4a21980f", "sighting--0538b8f5-a7bd-4a90-a2b2-6c02b2c3bf14", "sighting--7f3f40b5-5f89-4172-bcbc-984e0b9455f7", "sighting--51098e36-5104-41d5-b301-1b53aa10decc", "sighting--126e3ffd-00ad-412d-be44-3141ac4fa9b0", "sighting--265d0e54-a98f-4c37-a61f-9f30274e14b4", "sighting--396731a8-75e6-4381-bd8b-dc853f3f235a", "sighting--b1017d64-69b4-480a-ae77-b96ddff107c3", "sighting--56be898b-0b28-4c91-817b-37b8f7f26cff", "sighting--493f76d4-c88a-4731-96bb-cbccd69ac12d", "sighting--db64551b-c28d-49d6-9c33-7be5d445b87f", "sighting--53ab4e0e-a7d2-4399-a3d5-1827ea9fe27a", "sighting--e08e302e-8a49-4815-8d42-185420bc757b", "sighting--523bf6d0-cfe6-4c17-b9fe-6b2c2f7ce2cf", "sighting--a984fe73-99a2-4266-8b18-850e917d925b", "sighting--6551ebfd-49d3-4ed4-bb59-8f7c45dda991", "sighting--3730ef41-efa2-4e2f-897f-fcfcbd816b64", "sighting--7830963c-05b6-42fc-96b1-aa9bfd5c829e", "sighting--08ad00c7-03c1-49a3-83fc-b213d54a644c", "sighting--031c2afd-ed8d-4c33-aca8-afa1f6ddc733", "sighting--6ed6e3b3-39e3-4e69-9323-0470d4ca040a", "sighting--ce6809a9-e54f-4145-8291-d6d8a2692760", "sighting--412bcbde-eb34-4c79-994f-09d2e8ebc0dd", "sighting--9b22b551-023a-4ea2-99c1-eb9f9a36c87b", "sighting--4f32c80d-211c-46cf-9aae-4080cabce1f7", "sighting--8d9f1bb3-afaf-4007-ab3f-e00cfe713bfb", "sighting--fbe5799b-e820-4eed-9c6b-ffd6b25df890", "sighting--7c8b2faf-5a38-4896-9f6b-60b439ace213", "sighting--d1f1cf41-995f-4cf8-8559-289c409c2b70", "sighting--602cb50b-3fc4-4de9-aae4-7c28b1b2c1e1", "sighting--22000d94-507d-4f3a-be49-29e272a57ae4", "sighting--14998fbb-aa77-44eb-b241-54c28167a7d4", "sighting--55966ab0-5084-43c5-a97e-8a0c56e5add8", "sighting--c4c35267-f2f5-4e91-8507-1007e68fec7d", "sighting--3fb53345-7af8-4366-988b-22f3dae88596", "sighting--230913d4-aa5b-4b61-96e3-54c10e7439ce", "sighting--a3cc09e7-e4f7-466e-bdb6-ed4e6e4c860a", "sighting--3727cb40-3b43-4413-905b-17b77bfecbbc", "sighting--9d62907e-3273-48ea-90ed-3cd156bd7293", "sighting--7d6fb47f-e46d-47bd-9a4b-e86b530d5a71", "sighting--3c7bd05d-8bb5-48a2-a350-bba8544d076b", "sighting--01795109-78fd-47c0-821f-7eaf7f713b45", "sighting--66bec320-2278-4352-b345-d5aafa0fd133", "sighting--b13317bb-7662-41b9-8df5-3f3c4f0e3699", "sighting--4620ac82-eddf-464e-92cc-1f67505502d1", "sighting--790e057f-bd7c-4826-aecd-c8d1d68e8631", "sighting--25dca012-9e85-48cc-9c56-5afd131316d2", "sighting--3125b48d-2f60-4291-b1c0-20836d4bf50f", "sighting--fae55242-1e7a-4a27-80a2-0dffc350c588", "sighting--3abe5917-1436-4c3b-a934-d311d7acce3c", "sighting--4e7e7352-6a6d-46a9-9964-3dcd3616b0a6", "sighting--237fb10e-7ad7-47f3-95de-3a5826441ae5", "sighting--370c4fc1-89be-4f2e-ae11-8d2acabd9af4", "sighting--cccbcaa4-9fba-4501-9d72-71970db6c53e", "sighting--a11932ef-dc9a-4cc5-b49b-94d580431b55", "sighting--5fee4c52-5f47-4189-beeb-e4e9687b6d95", "sighting--33c5a046-a24b-4edb-9c64-3f5924aeed62", "sighting--bf815f6a-7edc-4b60-8777-72ba6d9985c3", "sighting--499f677f-7a43-4386-8048-8127e226c740", "sighting--8693fd7b-f905-4e7b-992f-73bbaa00600b", "sighting--06beec42-f578-49d5-8c4d-208179d3beae", "sighting--29a2d735-dd3c-417d-9ae1-3837b42100f7", "sighting--f17c3934-ce82-47e8-979e-21c964157255", "sighting--dd038fc6-1c2b-4f56-9034-65b8f21369c3", "sighting--4d0fe3ca-2130-486e-b470-1fe5edf4ff18", "sighting--aec4e30b-af59-4a3d-9dd6-b24b42eec343", "sighting--058462cc-e31e-48bf-aeb4-4f52fcd04bce", "sighting--4e363b72-c7dd-439b-8560-dcaf370372b1", "sighting--cc8f4faf-783d-4a92-b687-64abcddd208a", "sighting--61092f4d-5fff-4db5-85f3-33144d1286dc", "sighting--31e87606-98c6-4d72-9988-2546ee40d9fa", "sighting--7594e4f6-cca4-4c14-abcc-2a69d5a9f827", "sighting--39935253-3a76-4ab5-bcc6-7550d91186de", "sighting--4e408368-1bb1-4cb2-89a9-26fba0ad278f", "sighting--b668e9ae-72f8-481d-8b00-b531ee89881a", "sighting--33c3ec56-665a-452f-a1f9-e6947c3b2187", "sighting--899944b2-fb7e-46b3-ba9e-c09b489ed717", "sighting--82cf4ede-d74c-47f4-81fd-107e6c9b8e19", "sighting--2d3af199-a004-4fb3-9683-080020ebc10b", "sighting--f2d645ba-7ea8-4d31-9a0b-a5d28b4cd8a2", "sighting--d7eae621-c040-45fd-982e-231c3a52e602", "sighting--c5f50cf1-4866-4376-8cde-77b5f23b1d4c", "sighting--af0d1272-b637-4402-ba19-7504ab7955ae", "sighting--8d902acb-b763-4207-92ba-3273112476e9", "sighting--3e000af7-0ef6-462f-ad76-e1e5605b9886", "sighting--5819de41-4fc8-49f1-9c46-8d41210e27ae", "sighting--6ff1e580-2a04-43e7-9679-5a19b80ed101", "sighting--b88890e6-540a-40fa-ad8e-f7f67415337f", "sighting--1d49b7b1-52dc-4a0b-a532-b53f5cde7d95", "sighting--aae259eb-864d-41da-97e9-0cbfdbdddfa5", "sighting--23ebadd1-63e0-412e-927e-456c14b1b794", "sighting--6a671a9a-7b55-4459-affa-61d107376ce8", "sighting--76f4d18c-b2b8-4a45-809b-4c87fab656a6", "sighting--fb5d1236-4f8c-41d1-882b-6be3401370b7", "sighting--fca46b98-ef6c-4e9c-8df0-1a2b5305fa5d", "sighting--efe194e4-c1fc-4dfc-9202-24979853e75d", "sighting--d9100c05-4db7-400b-854b-065fd04d31fe", "sighting--2252a59e-2b34-47e8-a460-676c0b0c52bc", "sighting--d6d8fdfa-fe77-4933-b04c-e62565abb4bf", "sighting--4a359ed7-5ba2-4646-aeb7-55c010430fb0", "sighting--b7d9d982-f643-4c5c-9dc5-a56ca40d570f", "sighting--0e07dde9-2611-4809-a9b1-a5d8041efd9f", "sighting--81cb909c-2704-4d11-a78d-40c4f7feb189", "sighting--9f2df697-c52e-4692-b1cb-18d19542f245", "sighting--c27b4072-7ca8-4fa3-8b1d-68f814c221ae", "sighting--d26f7678-07e5-460e-ba64-f58ad799e343", "sighting--dfc0cf55-cedf-4219-a5cc-6120898ad1f9", "sighting--fd6b2920-7e58-4b34-b0a6-0bcab35160cf", "sighting--fb857405-0716-4b49-aa38-6329e9dc0b93", "sighting--bd3c656d-13e7-4e66-9a55-1a7b91cbbe5c", "sighting--bc356183-559a-4262-90ee-2f94229e04b5", "sighting--11102cd5-8305-4d20-8a27-e431e9ef65c4", "sighting--8dcebbee-c2a8-40c0-aac8-bbcd354f9034", "sighting--68d792f1-33d7-47f0-bb95-ae03aed4a27f", "sighting--c3a609a6-576e-4f6b-8cbe-2e4e4c5acd7f", "sighting--fcb5ecf8-be41-4e36-92fe-4f4974cf1927", "sighting--42b550f7-5b86-4497-975a-3c365b42d154", "sighting--fff56d92-41de-4acb-9753-2e0c819cfd2a", "sighting--da5baa6d-f85a-460b-96aa-6046be4adfc9", "sighting--8ca370ea-3241-42fb-8f26-9ee976595a8c", "sighting--f4d6d2d1-3d06-49fb-b972-6b94b8aea927", "sighting--bb524b5d-c29b-4757-a076-9d1a382c6f2b", "sighting--1db3aec3-f48d-4a8c-a4c4-fc2e769c45d1", "sighting--dcaaaedb-15a1-402f-844f-47bf2d55235e", "sighting--7012ba5c-87ff-403c-a301-d3a3e0288037", "sighting--5db9021e-5ccf-4bf6-b2fc-6bb7c1a77168", "sighting--86b422a6-14cb-488e-8994-4e294f4071f8", "sighting--b774ae00-e72b-4426-9ad5-e7938135a999", "sighting--aaf33a72-133a-45d5-b902-d3c2231757b7", "sighting--87b389ae-5669-4ca9-93d3-6dbf802f85aa", "sighting--df30ec12-d322-4ae3-8289-babca73cc635", "sighting--c2224a4e-9a3f-4a51-9bd7-1b4d14705e71", "sighting--cc3b5c07-956d-40a3-9215-965099643c4c", "sighting--f2cd441e-376f-447d-9d8d-7150ff9974e2", "sighting--58b5f482-ee1c-40dc-ad73-3da594568cd5", "sighting--a4c02e3c-9e96-4f5a-99ef-de589b03d6ef", "sighting--aceb6bde-5bac-4161-9b8c-545b823418eb", "sighting--5b23538e-3e62-4378-adf7-98ab04e367e5", "sighting--9f8e37d8-bac4-4b8b-b2ca-5fbd23efc011", "sighting--246ed5fc-d229-441e-88cc-82314cd4c55b", "sighting--88bd748f-239e-49bc-ba36-e2da63763460", "sighting--1c97f3b1-308b-4653-ae1d-f8bf62ce9528", "sighting--6d75aff2-9e1d-4de5-b354-335dc56f999f", "sighting--3242b9c6-df0c-4142-91d3-5ffc9ef6164d", "sighting--11ea9f37-c26c-4bed-b7a1-fe23fbdb2e9c", "sighting--48bdcbac-3742-44bf-99e8-090d5355e0c6", "sighting--f26c4518-f7b3-4f43-9ede-dccc2e3303fb", "sighting--a93add43-7948-4825-848d-e658982f43af", "sighting--9b6ef81e-a4ff-47b3-b3fd-3ed001b48850", "sighting--bdcfe0d2-0bda-4746-993b-712641a5697f", "sighting--ba3cd275-5a90-4c5e-bf90-4dd00930b893", "sighting--23b156c3-ff60-4543-8b63-ce1618251d9e", "sighting--8c64e3f6-101e-4772-ada6-dfc57f32eee6", "sighting--ed111c00-8e70-46a8-b022-9fee229f8a96", "sighting--722dd87f-40fc-4070-bc45-ce6aefc9d8fb", "sighting--975846f0-b5a6-47ae-baaa-ea871ee62462", "sighting--6c93b722-d9eb-4fb9-8440-58e6261ab491", "sighting--cd337af4-b478-47ee-ad91-b01b011e4a1a", "sighting--1c0a8c42-fc4f-45f5-9774-530d118fa920", "sighting--8f997f75-bc6a-4d34-b05b-8677bd2a70f4", "sighting--bd6fc15f-203f-4b4e-b021-04035ea5646a", "sighting--28040835-6932-4a79-9143-1fb71572f464", "sighting--aeb39804-b1b5-4409-b894-5da06c18bd8d", "sighting--abad2489-360c-41bd-9a8c-8b9e0c24a7c8", "sighting--aca58f95-cda7-42a2-af5b-ae1eb63f3f60", "sighting--23b12df7-8307-46c3-b8d5-8328f8d39dd8", "sighting--7c111b4c-f693-47c2-920f-98184f6aaea3", "sighting--02e60c3e-c934-4f68-8498-8ad8f28f71ac", "sighting--86d58d2d-5030-4f41-91b2-927d23d8477f", "sighting--01f04c53-5f73-4718-ab62-9be516639f72", "sighting--9e58b547-a3a6-46ef-ab0c-87ef1effe429", "sighting--473421ff-8a10-4453-80e6-7618cc1dfaa6", "sighting--93f3df23-30d1-4b81-9ffa-7fcf6380a4b2", "sighting--c9d00034-db04-4d6e-8c06-3db99a188bc1", "sighting--a01a0920-39dd-4961-832b-5c1522ef7bea", "sighting--0e6adaaa-524f-4db8-aee0-841f58b884f9", "sighting--c526bd71-2c1a-4875-8ee3-9ffc96edf29e", "sighting--388f9036-b1e0-49c7-8bae-8130f72d6f52", "sighting--b1dada56-f1e7-4478-a590-1222433f5a1c", "sighting--5598d705-2ed2-42d5-9329-ce99d25d83ca", "sighting--0e196fe5-6072-4596-8cc4-33bf8521c362", "sighting--3e0e532a-c5a6-4d71-b3ef-fc95b8d3fe4d", "sighting--58cb8ffe-5745-4a1f-88de-ff144f8ff846", "sighting--bc5c13a9-dd52-4b5e-9132-251ffc329abb", "sighting--6058ce08-fb72-42c2-ae78-d1dfcee46d89", "sighting--b46aa81e-691e-4d1b-9c50-f081ea9a82a9", "sighting--e6d5f84b-b27d-4072-98e0-266da6b0a6f2", "sighting--7a17e716-d1aa-4889-9366-2c2404b7a2e0", "sighting--fa8c6459-09a6-46e8-addd-18061693f1ad", "sighting--10ca66c3-4127-4262-ba80-929b15cc8bde", "sighting--e899247e-2760-46d7-b1ec-6b347cb2d70f", "sighting--bba8244a-8572-4caa-8243-624454ea73b3", "sighting--f9a84d09-b1c3-4412-b3d1-4df70aac7ab1", "sighting--919cc914-0f27-499b-aab1-d947f2b34763", "sighting--aa5f11f4-6cee-41ab-8c20-c852d21e5623", "sighting--41b86129-4335-4bed-ac37-558be730cc19", "sighting--4e1a4e52-0646-474c-9975-e82d27c47fc5", "sighting--c4ba1abc-246d-4de0-9141-020471377226", "sighting--5068d4d6-1592-4740-ba10-d5178f0efb37", "sighting--8d25b188-ff49-4549-8290-2dd251bccbf7", "sighting--4b2af6fc-f36b-484e-8b33-071ee80d8985", "sighting--6482b9a9-2813-4093-8c6a-e2a35d9aab40", "sighting--dd7f13b2-f992-4b6b-af8b-4bb9f41ba900", "sighting--6a7f6b58-a544-4e68-a971-cb66cc4b9462", "sighting--64957a31-ce5e-459f-8df6-3cddcff8cb29", "sighting--5453f52a-9ae3-43b0-97f0-716ec656b8a1", "sighting--553b6d90-3034-4172-9989-0eac5f599380", "sighting--933de422-8d0d-4b55-bd10-ed3273e7d27d", "sighting--c4ef7b0d-d68f-41ae-a1a5-1a05c533048f", "sighting--657f7073-bcb7-4e1a-9d38-2caca2a0685e", "sighting--2a5952a7-e4d1-4b1a-a11b-45fec4dac8c1", "sighting--cf1da57b-d498-4749-b1b6-83a560726c1f", "sighting--63beeaae-72a2-4960-8e34-3e4fdabded50", "sighting--62e50d7c-1bd0-4726-816b-844e56b53d83", "sighting--6ba4ce70-52dd-4f51-b209-1fabe9f52eb3", "sighting--e44d737f-06e1-4717-abe2-3dca10a14ba8", "sighting--18e599b7-9103-4a9b-8008-1a285cdeffdd", "sighting--5f019a48-8e3c-4743-90e6-30dbb3e61af1", "sighting--6d35f530-37ef-40a1-93f5-161e7b025e62", "sighting--5f061365-23bb-4043-8be9-098de2023f55", "sighting--8a66fbf3-6781-4450-8edb-a11b42e332f5", "sighting--3579f9b4-c2d8-4727-91c0-5c0be1f7a731", "sighting--a5fa6d1c-6e0d-4424-a10d-464d6726097c", "sighting--6c0c8bd4-88ac-4948-897d-a9ddc353137b", "sighting--e944c6c7-4839-4da4-bcf6-f3c48fb8140e", "sighting--91165479-a308-4c03-b5f9-c04d1cc3fb29", "sighting--5acf9087-a613-4781-b02f-e46be75d1b06", "sighting--4b03081f-8074-4abe-baae-1f180f0182fe", "sighting--500ed960-1a08-4ae5-90ab-aed64a026417", "sighting--12880645-4331-4b7e-8748-70a766f30cd4", "sighting--beb95313-85a8-4f4f-a9a7-d0e1b2642344", "sighting--616a47b8-b1e1-440e-9025-a188702c9d24", "sighting--d77f50a2-bce9-4f7e-8c67-36a6d30102b9", "sighting--6347706c-0d56-4784-a261-e557bdaee4de", "sighting--829c8607-e702-4b6f-b889-883a41d153e7", "sighting--3c2c894a-9a3c-446e-a2d0-db8e7d73cd09", "sighting--02417ba3-4c53-47e9-9096-ea720fe142d5", "sighting--1cb838b4-3451-4701-b9e6-5e4f9f1833b9", "sighting--4b24e513-f4ec-475a-bf9a-b8aa11aabc05", "sighting--aedc5146-0aac-443b-9d0d-273289e86578", "sighting--d622693b-dcbf-4366-8d08-30343d8a5f71", "sighting--bd64104c-3382-49ca-bded-52f3989fd19f", "sighting--4ca058db-9884-4b41-bafb-8ca941ab9b60", "sighting--439a220c-c80e-48e1-baac-37769f3ee0fb", "sighting--6e14957e-7a0c-46a2-9fb9-e3b24fcfc4de", "sighting--4e806fbc-9a09-42f1-8e77-69e9e222bc8e", "sighting--1d7f39df-f004-44bc-b88d-cf51fb0eb7ca", "sighting--883878cb-0423-4a14-bb14-baaeda3234fe", "sighting--1447b2bc-ef30-4d00-ab5e-5af3383666c5", "sighting--45994601-e733-4e05-b33a-c8ee7fbfa8fd", "sighting--056dfcd7-08d5-4b4e-8db4-1b83204671e6", "sighting--bac7723a-2ad5-46a6-b109-9c57c3c72ef6", "sighting--b6d01724-dd77-46fe-ba06-ecea395c066b", "sighting--425d1d37-a05d-4dcf-901e-194b18a3bea0", "sighting--feae8606-b905-438a-b90a-d5f8db41aefd", "sighting--940468ff-a01e-4bb6-9bb6-c3dfb6f0b490", "sighting--f1c0a225-0eeb-4a2f-a7be-5fb0c9ac60a1", "sighting--615e214b-f372-42ef-a3f1-e2f20171deb7", "sighting--545b9c76-6b8c-4310-b8f2-b8cd80d0d907", "sighting--d796c84d-9e02-4df1-951e-9273a6658b74", "sighting--8023c45d-f4b8-437e-8d03-29fef62c91a7", "sighting--be354d96-b0e1-42c6-89d4-f88b0a50e34b", "sighting--d8a81f2a-5ad8-431b-8206-fbec7c655a0d", "sighting--e18d9146-9e6b-484a-8b8e-1ea68a9248f8", "sighting--8ee1e27c-bcd7-46b7-9064-d2a75e2a68d1", "sighting--b3827f31-29cc-477d-a4e5-d67b199dd014", "sighting--25c26610-d1fa-45f8-8525-a54ff5a725db", "sighting--cd303044-8ce2-4162-8882-24f55ebf4125", "sighting--5733218b-4dab-452d-8b56-c64ddbd8e1c8", "sighting--750c9601-40f2-4e98-b1db-347ab0ae0513", "sighting--03b47e62-2267-479a-b235-f4abefc728a9", "sighting--b26ec871-43dd-45a0-a0af-620dbbd49b7a", "sighting--58c45743-2a47-4277-ba63-8ad4551160c8", "sighting--466ad5dd-d3d3-40a6-a3bd-092072a34598", "sighting--52785fc0-c7e8-4f79-8742-dee4b5f7586b", "sighting--a0ef99ba-7ecb-4952-ae4a-11bf3e576d9b", "sighting--7c5ac75f-1a5a-4efd-a5a6-d3136ec19c55", "sighting--82909659-9329-482f-8feb-fb37f9343cb7", "sighting--899e8129-3309-4d61-bef6-f8da8daa4961", "sighting--7fdf5d57-5abd-4518-9d63-bb5ebacc5589", "sighting--07462c11-13aa-4def-a854-3fd0a28c320d", "sighting--1d4b4ed7-9b22-42db-8bb4-265db6ae8b41", "sighting--b347e69a-eca7-49f1-bce8-9911de85edf4", "sighting--aa596959-f813-4624-9e2c-fd8409446d55", "sighting--7977292b-078d-49f4-861e-20657570cdba", "sighting--ca2cdb43-dbce-4272-8a76-5932f1132fd7", "sighting--86458d66-5c67-4d8d-a0d3-d944c600484d", "sighting--f66e1c0b-c1e2-4064-92a1-1acd9126ee12", "sighting--67582eb8-6bed-4385-a68c-f823a6375048", "sighting--ddd4b895-96ab-4df6-9fa1-910875680181", "sighting--a6c9a82f-59e5-4546-a595-cf8e7dd2fd13", "sighting--ad313972-1ce1-4a4f-aafb-e3050f307db7", "sighting--830cb423-a7a4-46ae-aec9-3cdd47fdba7b", "sighting--6bf10d51-e40d-4f7a-bf55-56c13c81d4ef", "sighting--f9cd6f5e-0a06-4ac7-9216-ee9ee362e126", "sighting--b515b617-9cea-43d0-b0e4-9992ca4f956f", "sighting--636da680-9ddd-46d5-9dad-f313d6517794", "sighting--827947c5-3e05-47ab-ba1c-4a09af698abe", "sighting--6c746a1d-4085-46e1-bd92-e090de16588e", "sighting--c0c57497-4402-4c37-af83-eda5bffe3463", "sighting--703220e3-7265-45b7-8399-16c36373b9ae", "sighting--e3326da3-432d-41cd-b25e-1d9713f7451a", "sighting--2f967692-cf98-4b3b-b0a6-59e81c0a63d4", "sighting--4da2e401-1f54-4533-95ef-970459afed9c", "sighting--6efa892d-736a-4645-861f-abc9402bf4bb", "sighting--ad8473bd-45b8-4761-8024-754df4d70617", "sighting--befb3321-79ff-464f-908e-b5310e22583c", "sighting--4c0bb195-843c-4ff3-be50-2eaf589bf6e5", "sighting--3fcff48b-cc71-4a9c-a90f-354165d658ff", "sighting--f1390e42-50a3-4b0b-9c59-78a5b3524fad", "sighting--bb5662a6-47f8-40f5-b3e2-41b4a494d690", "sighting--45a27719-0b6a-4974-89ac-7d9f7aac6fca", "sighting--c6ddab1e-9135-4552-ba43-5fbd2f19d9f3", "sighting--9172038e-2ffe-4c0b-a829-8b132509d000", "sighting--ab6be74f-1268-49f9-b651-8d51af14a8cc", "sighting--e94f10f9-b6da-4991-b739-a84b08bab950", "sighting--8be1fdcb-fe2b-41e1-9f5f-0197dcb5de0d", "sighting--1f30ab02-c88b-4989-a7f2-de36eb133286", "sighting--b2fb4a89-f900-4afa-8567-d19d8d2cf7d7", "sighting--93c9238e-90d6-41eb-97b8-b9df91486c46", "sighting--fffc9a19-850b-4677-ab2d-6a250904a7f8", "sighting--9085f0eb-e00b-4adc-a429-eee6ea6408ff", "sighting--8e1c8e8a-3b4f-406e-9f89-2f63599f5937", "sighting--b7b9de60-7624-4ffa-a8b1-b5987ad6099f", "sighting--93c2a053-bae2-4452-aaa1-60c04ffba10d", "sighting--0083c6cf-cb3f-41d1-bb7b-752540d407ab", "sighting--434f2a8a-5489-4127-b9de-33caacd4d874", "sighting--12a3eb7f-914a-4d06-8703-13b83c3d884a", "sighting--5a9aa615-e528-4def-b9b0-f8679c7fdfcc", "sighting--d2d90ad8-82d0-4a96-9902-b240ffc34a04", "sighting--6a15363d-4c7a-43db-8a33-3cf1664aa129", "sighting--f8a99979-2200-4a2c-aa57-25e951419319", "sighting--b0abec60-c885-4df7-812d-f192dfc85bea", "sighting--fd223903-2f06-4d90-82db-5ac2c9daccd6", "sighting--438651d4-e2b4-42c3-8555-81c75b43b2ef", "sighting--76c05d48-8e9f-4d9a-8953-39b89b278933", "sighting--763a5c51-7890-44f3-b471-729ad7d9c89e", "sighting--d5c1512a-6d55-4dd6-9eaa-76ba3bb56aa8", "sighting--6ea3e843-8fb6-416a-9ef7-37982732e8a4", "sighting--53ae3d42-f3ca-46df-8d38-09c18ee385a7", "sighting--521f8385-4e11-4e2b-92ea-c56c8d78fc7f", "sighting--291a0284-ca6e-432e-8362-3257c3016b14", "sighting--582bc2c2-f056-4f67-8be8-2833e214375a", "sighting--a2459a6f-575e-49e2-98ac-224d5b7b31b0", "sighting--6156dec7-47bc-42eb-8ac8-26e3b65c7a42", "sighting--2add0907-4e3e-4568-969f-982a3c53f73a", "sighting--5f9a0ae9-3cef-4a44-abed-e79ce152efaa", "sighting--801614d2-a9db-4ab1-bce7-41a31b96fb92", "sighting--c3fd8d2a-bd42-40e7-9cf2-23a4c7afd364", "sighting--27a43785-5ec0-449e-ad05-166adcce639a", "sighting--283a1068-6e32-4cae-a298-183e9bf44677", "sighting--da7cb1d4-ec60-497c-903e-6de3957aeada", "sighting--f8870100-2815-4efa-891c-922c62612870", "sighting--3a97d9f2-bf52-4835-940f-fe9d520e8ec0", "sighting--300b3fa7-ada8-4d4d-a08a-3cd5ba2bc28b", "sighting--e955f0dc-ab54-40ac-bd4b-63bf7e9e488d", "sighting--7c2726f7-3f2e-4fe7-b8d1-26c25f330aa7", "sighting--bf01830f-67cf-490f-a5d7-478bd02f1037", "sighting--38e4819b-8d4e-4d89-95b8-66830ad4164d", "sighting--1038dcb2-15ce-4773-9aff-cec0697cafa8", "sighting--a25a3726-b754-4210-a612-a9c5b24e253d", "sighting--d269c0d1-7b94-4c26-9803-65d083b93de6", "sighting--2cfe3b78-5475-414c-ac58-6b1f869d98f6", "sighting--c638c71d-25d9-41de-bf72-d4abeefc65ca", "sighting--cd5c6b01-b924-4556-a8f6-67e6441186a3", "sighting--01b1f0de-ad38-4268-adbd-917354c54a63", "sighting--446fb3e0-2f1b-466c-8be1-b2ae8cee083b", "sighting--a63d5782-61f4-448a-97fa-a4f48b760355", "sighting--88881aa8-8fa8-4d5b-8cdc-0df5086cafe0", "sighting--f5ff4ad5-f343-4ed6-93f3-59076190aa99", "sighting--de9e81de-c4b6-4881-b890-b4b498065386", "sighting--29844579-124a-40c2-aaf0-3afbef10242f", "sighting--b25e3699-7ee3-410c-83ae-6fe1a6d23e03", "sighting--094b944f-a00f-4ff3-bcb1-ad7bf563f987", "sighting--8810252f-c693-4097-b3a8-bb095a6808f0", "sighting--c12f3589-ef64-4998-a051-e805e4e3a1e5", "sighting--c47790b1-8096-463e-9daf-f32075b9cc8b", "sighting--b09912f4-b081-4a00-bde7-12e8861d4ed9", "sighting--3cd33598-95cf-42c9-9f20-1920dc5ec0d1", "sighting--00d529d9-a80f-4b1f-844c-364d927f6c06", "sighting--177b594f-e517-4c9d-a3f5-054034ce3afd", "sighting--a33054aa-1414-4cd2-b03d-360c7fb72e82", "sighting--f2b53340-d743-42b4-b8d2-68b715137b3e", "sighting--7dcb885a-1161-4fdc-82f2-fee4d2678853", "sighting--4b352685-f39e-48e7-918c-52b305dcbdaf", "sighting--d589f35d-ace6-4f9b-9e8a-3939c5b1875b", "sighting--ab079be2-72d1-44bb-b72a-e245cc3d316f", "sighting--927d308d-fa4b-42e5-bd8b-16411407ad82", "sighting--0228ada6-09b9-471c-aea5-e94fb8f4c9a8", "sighting--8edf5cac-b42c-4fa3-b2ec-af8399ce8ac0", "sighting--e33f4421-29a4-4c8d-a66a-8d048e6b3287", "sighting--0f325d0f-b5e6-4c19-9022-f130625ed205", "sighting--b96c6356-f414-4ce8-baff-05df1be87f80", "sighting--db2feb2a-46ae-418b-8b3e-ed4cecb09ef3", "sighting--0c8bbf84-1cac-456a-bab7-a572cf76592f", "sighting--5abc82cd-24ca-430d-9c7d-f34cd6df2036", "sighting--b4516d89-5e10-45b2-a0be-be24082cfe8a", "sighting--17ca422a-07a9-44c5-a613-9dc900a126b4", "sighting--4eda5456-7925-4859-a1da-f98d0b887129", "sighting--cde410bc-940b-403a-8fbd-7aa29d5165be", "sighting--734c0249-70de-4b39-b939-621d5c743c38", "sighting--f798711c-bc36-407c-856a-797c5212ea8a", "sighting--16271912-f292-4f97-8092-4682ea35a70c", "sighting--98f128f4-28e0-4dfb-9ebf-c1afc27296a4", "sighting--40071750-fc6b-460e-8536-233e3bf6ed14", "sighting--b641ca81-45f8-46b9-bef1-f289f9519cdd", "sighting--53a994ba-d038-4f01-9119-c1368c49eca7", "sighting--ecb315cb-43c0-4cd0-93cb-5d325647cb7d", "sighting--50554653-a731-4a58-9609-2d8a8b2f1fb1", "sighting--e41f9d3d-955d-46c4-8365-6a6cc68aea17", "sighting--eebebbc7-9595-4014-bbb7-e9cbb167678f", "sighting--bf42409c-f9b5-4cb9-8aa8-106d70b9ce1f", "sighting--b21e742a-a6df-4f45-b3bd-0e6039cff72b", "sighting--372845a9-46da-4305-a74b-322e84a39b9f", "sighting--4e2e507c-ce3a-4f3a-8b96-6025d1554f5f", "sighting--a51471d2-57aa-4c6e-8ddc-fb0a4706bacf", "sighting--cd704bd4-a665-424c-a91f-188265eecdf8", "sighting--55fc3351-42fa-440a-8243-271444b20014", "sighting--3b0ea8f4-44fb-47fb-900a-bbb02ddbe0b6", "sighting--38d24a07-1898-435b-ad58-4d39f8990651", "sighting--1d439652-cf7c-4c34-89be-3d2e3ec40d57", "sighting--393fbfc4-fab6-4fa7-b2e8-d39bd1e6c62d", "sighting--5339d33a-5272-48fc-bad9-2b0256b96f7a", "sighting--ed4ce45d-36fa-4d56-8f27-5e3744a631ce", "sighting--b54894f0-0a00-408b-b16a-d6d313cd1e0a", "sighting--0bc9f3de-aeec-427d-b173-6fe1ed20eafe", "sighting--8f314705-1103-45be-b267-d13ca93a6103", "sighting--23879039-7435-4b22-8b74-a8d68fa747fa", "sighting--5f07d5c5-e32f-48f1-b555-3f16469c5e99", "sighting--bfa638b6-dc59-46cd-a797-6d4794ffd111", "sighting--59a1a394-aa86-4cc5-9b23-0d3046baa781", "sighting--1da36419-061a-4ffa-a408-42753cb6c45f", "sighting--dfffa651-e368-44bb-93a1-36ce93a27217", "sighting--885afba9-1316-410e-a18e-d3a41ef746a8", "sighting--bdd13c67-daca-456d-9866-87693fde3a9b", "sighting--66794e64-fcde-40be-a573-da7dc0cf183d", "sighting--91aca093-1f85-487f-81b8-7ab7dfb4ad99", "sighting--93edc626-8692-46f6-9621-ecf25eda8bf5", "sighting--bb36dff9-b68a-4351-9eec-6eeceb80d899", "sighting--7203ab86-0bc3-4b2b-83f6-8e08c3f11d27", "sighting--7e700b25-2d78-4da4-a349-380cd4cccc7c", "sighting--e3d9e26e-909a-47a8-a135-3e6f5fe45253", "sighting--6f1fc61a-479b-4cda-af37-255896563203", "sighting--2e07b8df-0fb1-4b3c-8406-ad19f23950cd", "sighting--031e3807-affb-4a4b-9cf3-58992cad6679", "sighting--da8df8b4-7287-48bf-b14f-b1652f8d97a8", "sighting--570c4fae-a329-4e54-a4df-afa61923b57f", "sighting--549df396-90e0-4642-88a4-746de014803f", "sighting--7db86f36-4756-4973-8e56-4c54ea4d8f5a", "sighting--31b16200-d078-4abe-98bb-b0913f8cdb1d", "sighting--f5165923-5b07-4872-b378-7d40e22f30a0", "sighting--b6b2dbc2-ce5a-4b6c-a021-97dce2ddfd1f", "sighting--fcb6c3ed-6595-44b6-a7f3-39f52e67563c", "sighting--cacc37c0-71fb-4972-a147-0251cdd9851f", "sighting--f3590dba-5fe8-43a7-bc53-0833b9c2cedf", "sighting--07f022a6-f540-489b-b131-890a0f2cb935", "sighting--2aff76f7-b545-44d8-8cfd-737700655c68", "sighting--021c3c18-7ef9-4d64-9209-b7639ade8cdc", "sighting--8a67b46b-7195-42be-a5fc-7098c0233d45", "sighting--d518525b-5a23-4175-9d78-03d16d102a7c", "sighting--6b9546fb-28c1-40bb-b67f-1ed6594e0701", "sighting--b4fa2829-9a9c-4546-a257-320758f904c8", "sighting--c8308d00-9161-40ac-9d7d-c767aa600e60", "sighting--1dab9ad7-179b-4679-b693-cbebc8f8268c", "sighting--e4983da3-b437-4c1b-80e8-af988fdf0374", "sighting--fcf83aab-1827-4f4b-be05-51aaffe3dd1c", "sighting--89b99066-ec53-4119-990c-95d85f2e5ca8", "sighting--328d1782-10fa-44ef-936f-c5d6b22960b7", "sighting--cdebf33e-248c-4607-9a59-da78cb27e53e", "sighting--ca2d738a-0312-4e84-9945-c0a569f169d0", "sighting--b713538e-1a7b-4abe-b617-ec64de320a1a", "sighting--c7ab5100-a4f1-4fd5-a03f-a60be6c9f6ad", "sighting--9411ff10-17b0-45da-828e-46ca5402ce01", "sighting--b0f211b7-65e2-4bdf-ad97-aaf3872669dd", "sighting--26e01b93-2f44-4213-8d0e-05fa158d19c0", "sighting--5835cfb3-63bf-4855-8de3-0f4202ba5736", "sighting--90af8927-ceb2-44db-8cfc-b09f4881eafe", "sighting--5860f3c2-0764-4471-b413-00e96e249d23", "sighting--2216b22e-84bb-4402-bef0-f098255178d0", "sighting--84074e04-0b69-4300-803c-2727c8a38de5", "sighting--5e6a4ff7-d93e-4838-b656-6d6776664c8e", "sighting--daaeb9d8-1af7-4480-a431-09fbe83c8f52", "sighting--8b3f699a-f92d-42cd-932a-5a5102997d88", "sighting--157ce7bc-799c-4d48-96d4-c3578757875d", "sighting--0b6b09ff-f34e-4342-a9aa-989a45fd3946", "sighting--de91ef98-c85a-4d55-81b0-4125c88e9178", "sighting--080793d6-0df6-450f-a9d0-ae3bd7bb7162", "sighting--d4c7cba2-6627-413d-a748-d5cf6d425e36", "sighting--3f0f21cb-495d-4b68-a8c5-a636980c0de5", "sighting--ddf0a88b-b90b-4701-b535-b20b8c4caa5c", "sighting--821e6bbb-9e83-419d-a078-c308b9e52294", "sighting--1385ceb9-39f8-47e3-82db-22596336f83d", "sighting--f4021449-9bd4-4b93-b5cf-710e8ab321ee", "sighting--17f744c3-e3e2-47b8-8c23-2a52f93599b2", "sighting--3d7ac3f7-950f-40d0-8ae9-0698696f8dde", "sighting--1195a074-0680-4fa7-ad4b-330b2b2d0999", "sighting--e879223b-1b73-46b2-aefb-0fbc661931d2", "sighting--06b9d911-37b7-4961-a94a-b7ddcc94d20f", "sighting--a7c01fa1-274d-4dd3-8e04-cc78d318c11a", "sighting--c7e10eb9-5d5a-4f45-a652-ad6b395793a7", "sighting--782b581a-c96f-4371-a8dc-64628ffbf572", "sighting--3709c764-1ecc-4d37-80da-d454f6ac5538", "sighting--f04fff77-41ef-4910-a85f-6663b8d47723", "sighting--d24bcb01-a2c8-40b6-9ef5-be3a3d5bdafa", "sighting--b7ce6d04-d340-4c47-9f72-aa37dbc91eb7", "sighting--bfe955b7-cc3d-4961-aad9-0b3bb471372f", "sighting--99a164d2-8570-4819-a954-b21858ebd899", "sighting--4268d8ed-1e23-49d8-becc-4ac1db409340", "sighting--93d54221-3336-425b-bfb8-91227e2dbc60", "sighting--28e0da9c-576a-4ff3-a67a-98e26d64a624", "sighting--50976f7e-9c89-45c2-ac34-e14c2e7b7d80", "sighting--b1c9f31a-5157-4e37-8ef8-aa1ab2dfa202", "sighting--8366b405-953d-4a8e-8422-8a3e32994fb9", "sighting--05183133-0cd9-4a4b-b9e4-e629dffc4d52", "sighting--95a3b934-0a58-4a69-8c86-47c8d215e4c1", "sighting--2e198967-609c-4f1b-a146-266128ad7c36", "sighting--1b292f0f-c6ee-4ab8-afef-c2faa28b60e9", "sighting--5a788c45-e124-4ebd-9177-1e87e050a5f6", "sighting--a6b6c4f3-defb-4d15-aa04-e6cff3dbe23e", "sighting--a826b71b-3de7-4185-a16a-d536018190f9", "sighting--1dd3d299-1420-406c-bb7b-a262d3110351", "sighting--fe66d429-d583-49c8-b3e9-7cc9a259862d", "sighting--bfbac6ff-86aa-4455-9241-77b8c252b64d", "sighting--b4b4feb2-7509-43ad-95f1-0021b403c2ff", "sighting--1c931c0b-2410-44ac-8a73-14c70000bc64", "sighting--18b36929-c32a-4d26-bbf9-56fbbb735624", "sighting--74d53fdc-4c05-4c78-becb-f657201acb46", "sighting--2b277977-32f4-49be-9eeb-247443e37562", "sighting--fb085bac-6f16-40ad-99df-46e180da9e05", "sighting--befb8233-1721-4abd-b0b0-9986b1a3ed6c", "sighting--f4db8078-6bc2-46e8-8f90-704cc235e649", "sighting--bb38ac7a-8682-4ddd-8155-ec57ce3d6ea9", "sighting--fb73a03b-7ce5-406d-8ff7-29331475d3f8", "sighting--9c12b367-a298-44fb-86fd-104e1f735d70", "sighting--61d6d18d-a9bd-4fae-8819-6e277ca52372", "sighting--3bfd9158-f57d-4f44-9a80-20e7af609e9b", "sighting--a8f7d30b-6b7b-4b53-ab3e-4412c7d3732e", "sighting--a2009165-8ccf-4a61-a76d-5b9c3f0a1b54", "sighting--3fa65389-b9f5-402c-8fc2-aa0193eadd0e", "sighting--7ff15361-52d5-4d91-ba42-fc1016adea49", "sighting--86c35960-63d7-4a9c-93ea-501906529d7a", "sighting--aa57d2d7-6eb4-42b5-8654-9e95432791a3", "sighting--5b4142e0-84f8-44cc-9ee9-babcebb5d12f", "sighting--edf85352-b894-4a8e-8947-2b6198e35db3", "sighting--270b29eb-a3b4-4040-95d5-881c40b396be", "sighting--eb343e63-d874-48b0-8029-608b4714ac25", "sighting--32f96d8e-0180-48ca-860d-da73847bd888", "sighting--6b9261c2-d86e-48be-8ed7-17c7f4bba1a5", "sighting--3705970d-5064-427f-ba1d-afff6b2f0ef3", "sighting--921419d8-3258-4f27-b390-ac732cc94906", "sighting--28912a4b-5d93-41f0-b0df-9eae197b6843", "sighting--6611c695-b804-4889-9133-d2ec4257d6b7", "sighting--22e406d8-2a75-4278-b1f3-aa67cb86021f", "sighting--3bfb81cc-e933-430c-beb4-1bb833de9867", "sighting--1d310c4c-b20f-4df6-9aed-723908f51469", "sighting--2fe1cf00-aed2-48d6-86b7-c6e5ba099415", "sighting--68ed8966-ad38-43c9-97f3-dd6c704a1eef", "sighting--a5ac1cbd-970c-4333-b190-a8337718893b", "sighting--edacb55f-5587-4b3b-8851-a6e220c37b35", "sighting--889c64d3-6e5a-44e5-9cb9-b0d91b5ae981", "sighting--95e774ae-6a58-4ba2-b445-65c9aa77fe7c", "sighting--b86328ff-aa00-4a1c-9c3c-10d618f75c42", "sighting--38c6146f-54a1-477c-9551-49f6949d3a11", "sighting--d44a6985-1968-4f9d-90ac-8f1ef724a8d1", "sighting--bdc8eb5a-b994-411a-8156-cec8898c22c5", "sighting--810a240b-41a7-4fee-8404-ddd5e824f3b3", "sighting--486bc4eb-ca4c-48dd-a4b3-90a19c7a5cf3", "sighting--7f422b52-7a95-4022-bf3d-a5ebb7f257ee", "sighting--f1aa1148-e8c4-48e0-a521-4388b86aa7f6", "sighting--fdc444fa-5c1d-4320-9c5d-7cf3259ce644", "sighting--dcda8ad6-9d9e-475f-862b-926fce358805", "sighting--59762c1b-f5eb-41ca-8e06-22df5e4da246", "sighting--44de3abd-7c7e-4680-b2de-a140f27897d8", "sighting--14bce95d-d6c6-4f2d-b2bc-6ab0944bccf5", "sighting--079b3789-08f4-4ce9-af50-223611cd12a0", "sighting--86a5e67f-52c1-4c08-8d6d-9568d782080f", "sighting--bb78ae28-d534-4733-9b3c-133965231a50", "sighting--b8309cde-d9da-4e8f-bf61-298a4e1fb302", "sighting--423892ea-e9bd-461e-8d14-c795bc02fd22", "sighting--1bf54033-2ad8-4d82-a686-3d8344b33b2b", "sighting--551e4fc6-fa32-470b-a543-2c28903c4c2c", "sighting--4ca9f7dd-5353-4766-88b4-339f29d3f703", "sighting--78b07502-9056-4df8-81d1-6cf4931e1219", "sighting--8ea5adea-6cc6-4aa6-b924-bcb1193f77ba", "sighting--38a1917a-c778-42d8-a8e3-a421d9bb107f", "sighting--c3b34af3-9522-43b0-a5b2-e7e68ab0a85c", "sighting--27a997d8-bcf8-44b4-9b22-1d8ff05ec27e", "sighting--a6005782-f306-478d-b61f-343386445250", "sighting--fc754f6c-e81f-4bc7-a31d-8515422dd91e", "sighting--761a94e0-0bd1-4bd1-83be-0ad64fa8f134", "sighting--26068911-f456-4bdb-91ed-39caaea1f5e9", "sighting--4a6a82af-486e-46cc-85cb-a5f0f582478c", "sighting--2d889c78-6e89-4d78-98d0-e5da53f2feef", "sighting--709b4a05-7d56-4542-8715-3f7eab2ff16a", "sighting--b88fc5de-95f1-4e9c-932a-e33eb0e848f3", "sighting--2925ab24-f792-4e36-82e1-2c69826c92cc", "sighting--67718b4f-5077-4167-b6fd-7fff46a0e541", "sighting--ae9c864a-930c-4813-a4f9-ae71a70ae40d", "sighting--025763b6-e6cf-4d71-9b92-6b68e6a2c1f7", "sighting--207c17f0-ad1f-4721-957e-32fa863dd0f0", "sighting--932651ec-e477-4a51-a005-5ce3af7c5f59", "sighting--73e696c4-a80d-4390-bae7-08164e4be5c2", "sighting--1fb8d69e-36b5-4102-a7e4-989c60f246e4", "sighting--2f952386-6fb4-42eb-a918-85179bf78b73", "sighting--cb5a9e67-051b-4f07-9be7-a48f204c1651", "sighting--e4086e3e-e05b-448a-a40c-1dfc6857f941", "sighting--cebcbb7a-298c-4ed2-bbe0-e78a60786b44", "sighting--300ec72b-8f81-4609-9775-2b18f51e9678", "sighting--850f52e1-86a4-4ce3-8295-1e16f0fbb48f", "sighting--0197d200-d79c-4842-9ef9-4af39bc171e7", "sighting--cb6d5b1c-4f38-48f9-8423-ea89570e41e0", "sighting--268a9e1e-1213-45f6-a5b2-ee62a6f35c97", "sighting--a171a1df-8835-4150-aec8-906647657b02", "sighting--7c9e2042-f79f-401d-a3e6-70150e299314", "sighting--a7e0b021-f29b-4bc4-b79a-f99852932398", "sighting--5b4408f2-8444-482b-b5c3-084fa80126e9", "sighting--a19cb27b-af77-42e1-a189-ae9dfe5a7379", "sighting--d83b17ca-c7c5-4d5d-81a7-e2bc5739dae0", "sighting--73cf91d5-1c56-4d0b-a72f-c45ef9613d33", "sighting--63745352-0300-45e4-a11b-22e067866b1c", "sighting--260c6ef6-e285-4048-aec0-50a690211ea4", "sighting--7861c861-3463-46fa-8ad5-69195cd58132", "sighting--6f94742c-1f8e-4c61-8859-77a6f2761af2", "sighting--7638778b-b651-4624-91db-addf45e2f45c", "sighting--a381a5a0-46f1-4d9c-aff4-e485b7c1a463", "sighting--b0f5df76-a530-4eed-bfdf-fe24cd9b3ce1", "sighting--adc8dd2c-400f-4cc2-a12a-a2833633a49b", "sighting--45adb100-3e72-4262-9652-739023a3f00a", "sighting--992f1408-1077-40ae-8cd3-02b3f24caf06", "sighting--169405af-afbc-4068-a0e8-ff90a3606210", "sighting--18a1a543-10ec-42d3-a031-d7e404051f6b", "sighting--93c4bc82-dcb4-45e4-b7c8-e19ed89b548c", "sighting--64de5c6f-1bf9-416d-848c-d99d6b179b9b", "sighting--667229d8-4346-47c7-9b45-d6d664263fe8", "sighting--15f7ee55-542c-4bb7-8316-d2219664d908", "sighting--5ea53fa3-f191-4473-83f5-b3f74a4cce74", "sighting--e8837801-7e97-4a98-9e16-efd96d739f26", "sighting--26eaed85-5f05-46b5-9236-39831482d68a", "sighting--5ffd9151-1763-4125-9b87-c6c6ed93573e", "sighting--3ef0717b-ba1c-4721-b10d-71ca6e28fcb1", "sighting--b2392f3b-1aad-42fb-9f76-f2692acc6d44", "sighting--26542cf9-6cc7-46d5-91fa-95f935273779", "sighting--012e59b1-d5dc-4b11-a524-e6dc0bf909df", "sighting--2a7e810c-2a50-4f13-bba7-ce09fe50afe4", "sighting--c2b21dc2-8add-497f-b72f-09f9bf88511a", "sighting--ecf480dd-3288-42f0-9def-0acfcc97403c", "sighting--b9c40bb9-77cc-4447-b7d7-3017d9a31cb2", "sighting--619e6ae1-6459-4e16-8a95-bb660f5b7858", "sighting--5876fa5d-f9a5-4a0b-a5eb-7e610880f83c", "sighting--3a297e7c-d479-4aba-8e7b-c24b68fa275d", "sighting--4c973135-8da6-4622-9e76-29ace05aa395", "sighting--06f5346c-ea2b-42a9-b32f-eca6e5bbeda2", "sighting--2763e34d-fe31-4d3b-941c-5bbd131aa4de", "sighting--c8c1355c-23b3-426b-87b0-f76724ddd9ab", "sighting--1c57aaa6-f6d0-4bc7-bc33-7433584ccf0a", "sighting--50a36fc7-0698-4d8b-85c4-1eadeb52c0c6", "sighting--8865aba4-6ec5-4258-8edb-0e396f4480eb", "sighting--7759a7c9-ce0f-4430-bb37-dab848c5df14", "sighting--fb2beb92-6892-4ba0-9c72-5fb666b61e17", "sighting--d22e550c-b9ef-4609-832c-49ea3cf7162e", "sighting--6e2f36bc-9129-477e-a0f3-076bb37d2795", "sighting--7b5e27a0-b4ee-4df9-b3e4-766e2a88f68a", "sighting--8a900958-5292-4345-876f-3544da62cc52", "sighting--e863295b-04fc-4e65-b645-cd549166c30c", "sighting--c7a0a992-39b6-4d07-8543-5af42ac81669"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-06-01T11:00:01.711Z", "modified": "2026-06-01T11:00:01.711Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}